Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e37332e37362e302f32322d3234203d3e20323632373639.roa
File:                     3137372e37332e37362e302f32322d3234203d3e20323632373639.roa (raw, json)
Hash identifier:          okRSgm6tTpjxTkb9wnxtgrY0N5qGE6icPVw38aY+vUE=
Subject key identifier:   19:DA:50:CB:6C:D8:08:29:7F:5C:2B:B9:12:25:4A:DB:CE:E1:A0:6A
Certificate issuer:       /CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
Certificate serial:       1D925EB327C6E29DC931C936D3D48809A5C14436
Authority key identifier: 09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e37332e37362e302f32322d3234203d3e20323632373639.roa
Signing time:             Tue 18 Feb 2025 21:22:41 +0000
ROA not before:           Tue 18 Feb 2025 21:17:41 +0000
ROA not after:            Tue 17 Feb 2026 21:22:41 +0000
asID:                     262769
IP address blocks:        177.73.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl
                          rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:92:5e:b3:27:c6:e2:9d:c9:31:c9:36:d3:d4:88:09:a5:c1:44:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B86DF2675EE46F17CF5F43330433E2F22C8432
        Validity
            Not Before: Feb 18 21:17:41 2025 GMT
            Not After : Feb 17 21:22:41 2026 GMT
        Subject: CN=19DA50CB6CD808297F5C2BB912254ADBCEE1A06A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:80:ab:c2:db:89:8c:70:8b:38:89:c9:42:
                    5d:3d:92:bd:3e:2f:f1:b5:c6:80:a1:c7:9b:8d:33:
                    77:47:ac:5d:8b:4c:8b:6f:a4:f0:57:e6:fc:85:68:
                    f6:ae:46:df:96:fb:4f:90:c3:0e:f4:32:00:ba:55:
                    00:8c:1e:33:a9:b9:26:24:16:6b:cc:81:8c:88:81:
                    f1:9a:f8:7b:2a:31:12:b6:57:6b:a0:27:06:8e:e5:
                    20:5a:1c:0f:61:32:3c:d1:20:09:6e:8c:d3:50:aa:
                    d0:b7:31:23:a3:89:de:bf:9d:a0:fe:02:9e:a8:91:
                    d9:5d:50:80:56:e1:dc:56:95:8b:62:16:e9:70:95:
                    e0:bc:59:86:a1:9e:cb:fb:54:42:35:33:4e:ae:36:
                    15:99:b1:ae:fb:ef:60:4c:a9:03:02:cd:32:4e:83:
                    2a:55:d9:86:56:ae:12:49:e4:1f:d1:7a:6e:a3:00:
                    df:e9:c4:ce:14:f8:4e:9b:f5:b1:bb:45:c3:d5:9d:
                    75:cb:0b:a6:21:1a:4d:1c:5b:d0:fd:23:fb:97:eb:
                    6c:5a:fc:38:89:4e:8b:f7:78:e5:b5:6c:be:3c:3a:
                    e4:6c:3a:52:0b:1a:e0:f8:46:fe:e8:f6:13:5e:ed:
                    95:3c:ab:5a:d5:14:5c:7e:8e:49:e4:7f:a9:1f:9f:
                    e1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DA:50:CB:6C:D8:08:29:7F:5C:2B:B9:12:25:4A:DB:CE:E1:A0:6A
            X509v3 Authority Key Identifier:
                keyid:09:B8:6D:F2:67:5E:E4:6F:17:CF:5F:43:33:04:33:E2:F2:2C:84:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/09B86DF2675EE46F17CF5F43330433E2F22C8432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B86DF2675EE46F17CF5F43330433E2F22C8432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/3137372e37332e37362e302f32322d3234203d3e20323632373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:b9:d9:73:3c:35:3b:f4:7c:79:df:5f:4f:03:ac:45:1e:0b:
         c8:84:0c:98:a2:72:5b:de:16:07:93:2a:02:26:99:3a:7d:29:
         29:e6:3d:97:0c:70:66:09:77:f5:31:34:b4:78:bf:57:63:f7:
         74:00:b0:ad:eb:de:c6:59:46:cc:85:a9:0d:38:df:bb:b4:3b:
         5d:3f:fe:d6:1f:ac:e5:1d:0a:15:cd:c0:1a:cc:d7:70:a1:10:
         45:95:c7:b6:fb:cf:5f:01:90:2f:26:19:95:0d:d6:35:56:5d:
         b7:38:6a:cb:52:50:b3:57:de:c0:ad:b6:7a:06:cb:29:9a:bc:
         3c:3b:4a:27:04:e2:5a:c1:d7:c0:bd:c8:d9:1d:c8:1f:2b:52:
         b5:5b:d4:37:98:e6:f8:c3:96:94:46:cf:bf:83:92:29:fb:c0:
         54:f2:15:33:47:e1:83:74:e8:bf:f1:f1:46:96:ea:a0:55:51:
         11:fd:06:83:15:dd:84:09:b1:7d:9d:14:42:ec:6e:05:1e:d0:
         8d:07:6e:a1:b1:25:f1:8a:e8:ba:97:01:c5:7b:8f:d5:57:7f:
         70:46:d0:d5:02:e9:6f:a4:98:25:7e:73:47:cb:7f:3f:81:b7:
         42:89:b0:16:b8:75:6b:24:b2:dc:a5:98:f3:d7:54:79:77:ec:
         66:f6:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:57:41 2025 by rpki-client