Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36352e302f32342d3234203d3e20323633323839.roa
File:                     3137372e3139302e36352e302f32342d3234203d3e20323633323839.roa (raw, json)
Hash identifier:          1DgY3tSymZxxX7qj2J4LZ4OBzsughRblo6kTZCMuUGI=
Subject key identifier:   0B:3E:66:E8:D2:08:EF:22:F5:DD:99:86:DD:EF:4F:08:BD:53:3C:40
Certificate issuer:       /CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
Certificate serial:       18BFDAE4035EF489C4A0EF9F91BB009D47707CAA
Authority key identifier: 15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36352e302f32342d3234203d3e20323633323839.roa
Signing time:             Thu 02 Jan 2025 16:37:06 +0000
ROA not before:           Thu 02 Jan 2025 16:32:06 +0000
ROA not after:            Thu 01 Jan 2026 16:37:06 +0000
asID:                     263289
IP address blocks:        177.190.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl
                          rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 00:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bf:da:e4:03:5e:f4:89:c4:a0:ef:9f:91:bb:00:9d:47:70:7c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Validity
            Not Before: Jan  2 16:32:06 2025 GMT
            Not After : Jan  1 16:37:06 2026 GMT
        Subject: CN=0B3E66E8D208EF22F5DD9986DDEF4F08BD533C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:7b:56:8b:02:d2:b8:da:38:59:e1:fd:8e:
                    b2:d3:64:df:91:46:32:cf:12:af:3e:ce:04:45:1c:
                    bb:50:e7:15:ac:0b:24:f8:5e:10:b5:d4:51:f6:0a:
                    d7:17:0d:bc:19:93:15:48:3d:81:47:99:8d:e5:31:
                    98:29:a0:2b:8e:77:0c:3c:e2:90:3e:40:69:42:c8:
                    38:5f:40:84:f0:1a:6e:f9:c0:fd:15:7b:e9:c1:07:
                    aa:49:f7:41:93:c8:52:9a:2e:d1:77:2c:44:e5:4e:
                    e4:1d:05:9f:b2:59:23:c4:5f:64:6b:4d:f1:9b:da:
                    a3:e8:24:b1:3b:63:cb:b7:ab:41:d5:d6:c9:07:2a:
                    52:3e:8c:b5:fd:df:08:eb:95:1d:f6:4e:62:f3:5e:
                    b9:92:48:9d:97:96:da:00:fc:76:63:f5:b5:73:76:
                    05:08:f4:5a:92:52:99:6c:84:c2:d3:80:69:51:ee:
                    55:4b:5f:b2:a0:d1:65:11:9e:02:00:56:92:19:e9:
                    97:1c:33:60:4a:92:34:78:79:be:38:78:c0:3f:3c:
                    5d:9e:88:6f:90:c1:3d:e0:bd:1e:1b:cb:ab:3c:52:
                    b8:0f:c5:6a:32:9e:7a:2a:25:be:92:73:d3:cb:59:
                    1d:3d:42:c4:5e:ec:60:05:a4:52:ff:80:52:a6:e4:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3E:66:E8:D2:08:EF:22:F5:DD:99:86:DD:EF:4F:08:BD:53:3C:40
            X509v3 Authority Key Identifier:
                keyid:15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36352e302f32342d3234203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:9e:ab:26:8e:86:4b:97:cd:9a:4e:5b:68:48:e3:18:3a:66:
         1c:01:86:f9:f2:e5:57:87:31:56:5b:94:58:49:09:f9:21:3c:
         97:33:68:33:7c:0c:bf:2f:f7:f1:c2:66:b4:6c:3b:1a:68:62:
         4d:54:98:af:40:64:99:d2:7e:f1:62:28:97:e2:79:43:93:be:
         95:28:b2:8a:df:31:dd:e5:52:83:12:31:be:c5:e8:a9:c0:5b:
         7e:e7:d8:a6:3c:98:b8:0d:1d:0c:c3:71:4b:cb:12:01:f9:d9:
         f8:fa:8e:25:13:7d:49:cb:9d:6d:1a:db:62:ef:6c:16:31:ed:
         e2:71:c6:c2:df:72:c9:e3:07:c3:1e:36:5e:c9:cf:41:92:e5:
         58:fa:f0:57:e2:dc:03:e9:7f:3a:18:cc:22:e5:3a:ce:f2:b1:
         92:12:f7:8d:cb:55:72:aa:56:8a:e8:01:95:bb:0f:15:57:eb:
         80:34:6f:53:31:67:86:11:c0:5b:cc:b0:f0:b2:95:27:84:e2:
         47:91:ab:5f:39:0d:c7:83:c7:7e:b5:51:63:af:ae:20:2f:00:
         6a:00:c2:c1:21:8c:64:c4:60:64:1e:c5:a0:39:37:d4:c0:05:
         29:66:81:94:22:41:8a:30:84:45:a4:77:bb:46:d1:f9:48:ca:
         e9:5f:2f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:16:45 2025 by rpki-client