Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38302e302f32302d3230203d3e203532363533.roa
File:                     3137372e3232312e38302e302f32302d3230203d3e203532363533.roa (raw, json)
Hash identifier:          BEIH0AL5YK7Jb7D/gapn/xM/fHYClGUkzzivQJ5xNdk=
Subject key identifier:   DE:68:90:A8:16:68:41:BB:A6:04:D9:EB:FE:DA:16:FB:F1:E1:A2:0B
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       6913781E25CC31D1D0D8FED5286D01EB7863F07A
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38302e302f32302d3230203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:02 +0000
ROA not before:           Wed 05 Mar 2025 23:55:02 +0000
ROA not after:            Thu 05 Mar 2026 00:00:02 +0000
asID:                     52653
IP address blocks:        177.221.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:13:78:1e:25:cc:31:d1:d0:d8:fe:d5:28:6d:01:eb:78:63:f0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:02 2025 GMT
            Not After : Mar  5 00:00:02 2026 GMT
        Subject: CN=DE6890A8166841BBA604D9EBFEDA16FBF1E1A20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ba:08:8e:7e:91:64:be:5c:ff:94:9f:af:67:
                    fe:ab:00:50:51:27:e5:38:19:4a:da:48:99:02:7d:
                    85:94:c0:39:60:83:9b:96:14:9b:71:e3:29:ae:e5:
                    b7:29:10:d5:dd:61:6e:9e:20:96:47:f0:7d:bb:9a:
                    3f:11:41:7c:83:d9:7f:28:b7:6b:29:cd:76:c3:42:
                    9d:da:75:f8:59:2b:fe:dd:9c:d3:83:4d:d3:79:3a:
                    cd:cf:7a:db:8c:03:8e:e2:51:8f:80:b2:f5:99:85:
                    c8:95:c0:fb:c3:2a:7b:5c:fe:00:11:49:ea:75:44:
                    ca:a9:49:7c:bd:8c:36:d7:04:9e:63:5c:cc:4a:77:
                    c0:78:dc:93:68:7e:89:25:5e:da:b5:89:c1:3f:d3:
                    05:c1:7c:79:b2:c4:2b:7f:07:60:e0:06:82:43:14:
                    8c:d5:c6:e0:c7:fc:e3:2c:f6:9c:24:50:61:8c:03:
                    75:54:5b:74:c2:ed:1b:19:78:03:15:43:f9:01:1a:
                    1e:fe:15:13:d4:d6:2f:ef:e3:c5:bc:ef:8b:6c:89:
                    1f:7d:e0:e2:65:d5:88:85:c1:ca:73:0b:8c:c0:03:
                    8f:a5:10:97:44:d8:b7:ea:13:6c:5f:7a:fc:e6:ea:
                    31:05:21:00:3e:ec:cc:0c:cb:a4:86:f1:fa:83:a6:
                    0c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:68:90:A8:16:68:41:BB:A6:04:D9:EB:FE:DA:16:FB:F1:E1:A2:0B
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38302e302f32302d3230203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:db:a1:97:98:53:b0:52:07:f4:bc:a9:12:1c:8b:b7:f2:25:
         c2:51:74:6a:75:f4:69:a9:cc:ba:d3:e9:94:3d:c0:68:1e:b6:
         39:ba:e5:00:00:4f:a6:7a:74:d7:86:94:ed:5e:bb:0a:1c:bd:
         47:e1:b9:c4:e6:02:73:24:fa:35:be:70:b0:5d:00:c3:f6:a1:
         1d:bc:97:43:da:15:53:b7:8a:84:7a:2e:4f:d4:25:df:41:73:
         fe:63:1b:c3:f1:1e:c1:a0:63:14:fa:72:c5:b4:a5:79:fa:8e:
         1a:7f:9b:ab:56:29:33:fc:5b:e0:94:5e:3a:19:73:2d:ff:d0:
         4d:00:26:7c:e8:2a:b6:fd:70:4b:f7:5a:13:7f:9d:fa:07:09:
         ed:af:a9:5b:5c:64:60:f1:31:ba:9c:94:5c:9e:4f:9c:6f:cf:
         25:7e:7c:fb:18:6c:aa:d7:e7:43:95:b5:af:14:00:d9:dd:e8:
         4d:e3:ad:0a:88:fb:89:bc:1d:b0:0b:8a:bb:8e:f5:6f:ab:18:
         f6:78:6e:ee:e1:8b:ae:73:cf:a2:85:30:de:55:f0:38:eb:75:
         2d:7c:6a:a5:66:b7:97:6a:15:42:a9:6e:1a:98:eb:cb:3f:23:
         6a:f8:c5:6d:1a:10:af:09:b8:8b:e8:d3:40:89:78:b0:ab:5d:
         72:24:63:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:07:42 2025 by rpki-client