Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39322e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e39322e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          GX049oOtYSF/JbNmHOExmu1Ek5D8S9DvY1U6y3RYh6w=
Subject key identifier:   77:61:FD:0D:37:2C:23:93:C4:B0:E0:97:61:89:B2:04:26:5B:23:B3
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       6929A5B1D96B9C9C33C4FCFFEE12548064C7CC76
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39322e302f32332d3233203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:07 +0000
ROA not before:           Wed 05 Mar 2025 23:55:07 +0000
ROA not after:            Thu 05 Mar 2026 00:00:07 +0000
asID:                     52653
IP address blocks:        177.221.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:29:a5:b1:d9:6b:9c:9c:33:c4:fc:ff:ee:12:54:80:64:c7:cc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:07 2025 GMT
            Not After : Mar  5 00:00:07 2026 GMT
        Subject: CN=7761FD0D372C2393C4B0E0976189B204265B23B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cc:26:f9:53:30:b3:2f:21:19:56:bf:a8:f0:
                    15:bf:4b:7c:d7:34:bb:81:5f:99:43:c8:da:68:60:
                    51:8f:19:a2:7e:1c:c3:ab:c6:7e:51:64:69:98:6a:
                    cc:30:a0:83:37:8a:e7:5e:44:a2:0b:69:7d:7a:ee:
                    9c:98:e5:03:ef:35:15:74:15:17:82:83:7b:76:79:
                    53:5d:92:e7:eb:16:91:64:b7:92:b1:39:87:41:60:
                    ca:74:5c:2f:86:1b:77:ae:fb:d7:5c:d8:80:15:c0:
                    25:ed:c5:5c:19:38:d1:77:09:dd:89:37:f0:13:b5:
                    d9:fc:36:56:88:e1:d6:5f:f8:4a:ba:5f:0b:8a:0f:
                    be:fa:06:b8:37:37:7f:65:de:59:41:bc:2a:28:32:
                    94:b3:36:3e:23:69:93:26:bd:e2:d7:4a:99:20:90:
                    a6:f2:7e:cf:87:ac:76:ab:1f:0e:29:3c:3a:64:3e:
                    4f:d1:f1:f5:d4:7e:05:3d:0d:90:b0:c1:be:74:55:
                    0f:92:dc:f9:e8:5a:8c:30:14:82:e6:4c:f0:4a:e8:
                    c1:95:dc:65:15:48:60:09:f0:4f:3b:b0:4b:33:d4:
                    0a:e5:8e:ad:9a:8a:dd:69:35:b5:d0:f8:22:82:24:
                    3c:32:0b:54:28:32:44:4e:43:6b:0c:2b:11:f4:9e:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:61:FD:0D:37:2C:23:93:C4:B0:E0:97:61:89:B2:04:26:5B:23:B3
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39322e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:4b:3f:d3:e4:16:d0:ae:4f:1c:b8:97:16:c1:2c:c1:31:2b:
         de:9a:72:fe:e4:f0:0d:28:76:f6:fe:53:9f:24:9d:d2:be:89:
         99:0d:c4:7f:64:ab:26:63:19:87:46:ca:28:25:1b:c8:70:05:
         79:76:f1:d9:c4:b4:c8:8f:79:8f:3f:37:ca:07:a2:a3:af:ba:
         e0:81:d3:31:22:e6:e9:e8:72:44:c6:9f:57:d4:e5:03:c7:47:
         e4:33:46:f1:cb:08:08:10:df:e2:39:11:71:e2:21:93:75:d9:
         a3:75:6c:f9:22:75:c2:0c:d0:78:ca:5b:77:6c:75:de:8d:b6:
         d7:0b:53:ec:d9:e8:c2:2e:f4:41:03:21:34:f3:e5:70:7a:51:
         73:9e:e2:ff:ed:ef:a4:d2:38:3a:59:f6:6b:6d:02:bc:80:24:
         f7:cb:35:dd:ba:24:a9:a4:95:5d:87:37:6a:01:58:23:41:72:
         12:3f:7e:39:40:c9:22:73:0f:f5:ce:9e:f2:04:2b:30:c1:a6:
         55:26:ff:f6:7e:b5:23:38:b8:b6:51:94:a9:b6:4a:91:ce:11:
         00:4b:05:b9:3c:bd:63:f6:e5:8c:67:59:4b:46:c4:fd:e2:1d:
         c1:8d:2a:35:e5:87:c1:39:1d:6a:53:36:70:8c:2a:a9:8d:6c:
         c1:07:04:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:10:15 2025 by rpki-client