Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/3137372e32312e3230382e302f32302d3233203d3e20323632383739.roa
File:                     3137372e32312e3230382e302f32302d3233203d3e20323632383739.roa (raw, json)
Hash identifier:          loIvkSZE1i1L7iLQkyq0nfpDiPOrERqKQl2eCsMEE7Q=
Subject key identifier:   7B:6B:5C:55:F7:C5:4A:6E:B4:2C:0B:B8:43:F6:37:6C:41:80:95:8A
Certificate issuer:       /CN=D5185EB6AF2331AEBE136E6B92FA533A35153197
Certificate serial:       7450E26A1A43618D639B12727ECFA10EBA0D3FB7
Authority key identifier: D5:18:5E:B6:AF:23:31:AE:BE:13:6E:6B:92:FA:53:3A:35:15:31:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5185EB6AF2331AEBE136E6B92FA533A35153197.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/3137372e32312e3230382e302f32302d3233203d3e20323632383739.roa
Signing time:             Mon 26 May 2025 20:59:32 +0000
ROA not before:           Mon 26 May 2025 20:54:32 +0000
ROA not after:            Mon 25 May 2026 20:59:32 +0000
asID:                     262879
IP address blocks:        177.21.208.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.crl
                          rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5185EB6AF2331AEBE136E6B92FA533A35153197.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 09:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:50:e2:6a:1a:43:61:8d:63:9b:12:72:7e:cf:a1:0e:ba:0d:3f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5185EB6AF2331AEBE136E6B92FA533A35153197
        Validity
            Not Before: May 26 20:54:32 2025 GMT
            Not After : May 25 20:59:32 2026 GMT
        Subject: CN=7B6B5C55F7C54A6EB42C0BB843F6376C4180958A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:03:05:03:ee:8e:39:a3:ca:c8:d6:55:58:
                    66:37:cc:5a:a4:e4:eb:9a:fb:93:cb:d4:56:67:14:
                    be:4d:d1:7a:2c:df:4d:f0:46:ab:df:8d:05:28:a6:
                    0d:e7:d3:2f:15:9e:7b:29:e8:5b:f5:2c:3f:62:65:
                    1c:f6:3e:5a:6e:9a:3a:94:72:af:02:e0:e4:99:c8:
                    f6:e2:23:64:45:04:09:9b:3a:2a:44:40:75:57:91:
                    db:44:30:72:3e:f7:10:09:34:56:31:4a:35:86:54:
                    f4:d8:28:6c:8b:98:1b:0b:55:c8:60:7e:94:ad:5b:
                    5d:f5:62:79:98:b1:c9:d6:bd:7d:36:7a:df:6a:1a:
                    db:52:e5:ee:34:49:0c:16:7b:72:35:20:8e:e8:ed:
                    14:e6:ae:49:80:65:44:a8:f2:81:91:8d:1d:b4:b1:
                    09:e6:ee:eb:b0:d2:75:ae:62:88:64:c3:78:55:60:
                    92:70:e0:96:56:4e:37:50:c7:52:be:48:33:de:6e:
                    40:e5:fa:db:ac:0c:1c:d0:43:53:b2:95:52:c5:1c:
                    df:35:40:89:99:10:8f:d9:f7:d4:27:7f:c2:21:58:
                    c2:1f:b2:47:29:11:8d:9d:71:60:db:94:e3:0f:5e:
                    c9:28:18:fb:c5:13:87:cb:37:89:fe:9a:86:2f:52:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6B:5C:55:F7:C5:4A:6E:B4:2C:0B:B8:43:F6:37:6C:41:80:95:8A
            X509v3 Authority Key Identifier:
                keyid:D5:18:5E:B6:AF:23:31:AE:BE:13:6E:6B:92:FA:53:3A:35:15:31:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5185EB6AF2331AEBE136E6B92FA533A35153197.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/3137372e32312e3230382e302f32302d3233203d3e20323632383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:ca:5d:47:c8:1e:de:b4:4a:bd:c7:22:f4:05:7e:c6:0e:c2:
         b8:7b:03:51:d7:64:aa:05:67:be:fb:cb:76:56:b5:c0:55:b1:
         f4:50:48:6f:b9:df:58:00:83:79:de:85:c1:a1:47:37:f9:73:
         e9:1e:73:db:a9:5c:3d:c9:20:c5:c2:02:15:26:1e:4d:97:fd:
         a9:13:f5:74:e8:0d:14:50:93:62:ac:22:90:19:33:50:80:f7:
         9d:6f:83:38:87:1e:cb:3a:e7:67:46:2d:65:e4:1e:d1:58:89:
         35:6a:31:27:ce:f7:95:d4:c1:1c:39:f4:ea:1f:81:f6:a0:23:
         a2:21:d0:ff:f9:07:34:2a:d7:a8:14:82:ae:5f:09:a9:02:aa:
         e7:33:c2:8b:6e:f0:0a:fe:3e:eb:6a:d3:7c:00:61:88:99:20:
         19:53:ec:d4:0c:f3:9f:ec:21:79:7a:1f:1f:ec:3e:0b:cb:07:
         b0:7d:3f:68:06:5a:d5:58:a9:ad:24:57:3f:7a:3c:e2:be:e4:
         12:8b:f2:e1:3d:28:d1:24:e2:c3:fe:6b:bf:c1:be:1f:21:28:
         5e:0c:c6:b8:a7:b7:90:04:34:b2:20:67:97:6a:8e:73:f2:23:
         67:49:51:d6:20:8d:09:b0:a4:76:d7:aa:65:ff:3a:fa:00:d8:
         a8:95:01:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:15:11 2025 by rpki-client