Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/3137372e3132352e35362e302f32322d3234203d3e203532363037.roa
File:                     3137372e3132352e35362e302f32322d3234203d3e203532363037.roa (raw, json)
Hash identifier:          gTm3JE2wZ9ec0kDgE2rLrOqSrbtHePEDbcoKoOa5iWE=
Subject key identifier:   EA:D6:B2:B4:10:D7:C4:D8:18:19:A9:CF:1B:9C:D1:0E:18:83:E7:85
Certificate issuer:       /CN=EC37D17C061BE878628F004F6A8613266553C3FB
Certificate serial:       3294E4359CB296BFCF67A50D33AA269BDF0B4092
Authority key identifier: EC:37:D1:7C:06:1B:E8:78:62:8F:00:4F:6A:86:13:26:65:53:C3:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/3137372e3132352e35362e302f32322d3234203d3e203532363037.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     52607
IP address blocks:        177.125.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.crl
                          rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:94:e4:35:9c:b2:96:bf:cf:67:a5:0d:33:aa:26:9b:df:0b:40:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC37D17C061BE878628F004F6A8613266553C3FB
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:a4:40:ef:d3:16:d4:80:cd:bc:31:ed:cb:
                    28:bb:7e:60:6d:d1:94:5a:32:2d:f0:f3:98:73:0b:
                    78:1d:5e:c7:f5:44:a1:9a:9f:42:a6:5d:8f:22:e2:
                    30:62:98:a3:b9:47:97:69:fb:a5:d8:88:aa:a4:33:
                    0c:e9:eb:a2:ea:3f:74:50:0f:34:67:d5:21:03:10:
                    c7:41:37:c9:37:33:36:71:1b:3e:dc:24:5b:9b:8e:
                    ab:92:73:17:31:23:90:ee:31:bb:f3:12:1d:4c:1a:
                    62:a8:23:fe:16:ac:40:ed:a6:9d:37:f5:69:ee:54:
                    fa:fb:be:d4:5b:56:e3:13:24:7b:09:f7:68:12:27:
                    63:51:10:27:52:dc:b3:17:aa:42:c8:84:9c:e5:f0:
                    8e:f0:a0:b7:fd:77:ef:0e:76:7e:4f:d0:ef:0a:57:
                    98:49:43:40:11:ea:57:b7:66:8a:dc:fa:d4:c4:0d:
                    e6:14:e4:0d:30:92:7e:1e:dd:e4:e6:9c:8d:65:f9:
                    65:01:45:a6:05:4f:10:6b:3d:ec:ef:b2:a2:46:c9:
                    9e:65:77:a4:7b:40:2a:05:65:af:05:fc:81:2c:72:
                    1a:47:80:a6:b8:35:66:6d:d3:d7:ed:9f:69:0b:e1:
                    a2:6c:79:c4:8d:f8:8b:74:f6:47:be:6a:82:f1:7a:
                    03:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D6:B2:B4:10:D7:C4:D8:18:19:A9:CF:1B:9C:D1:0E:18:83:E7:85
            X509v3 Authority Key Identifier:
                keyid:EC:37:D1:7C:06:1B:E8:78:62:8F:00:4F:6A:86:13:26:65:53:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/3137372e3132352e35362e302f32322d3234203d3e203532363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:01:7e:11:f8:98:5c:38:01:08:69:5b:50:f1:50:08:40:45:
         56:09:0f:27:6d:3a:c8:a3:fa:71:cf:53:bd:63:67:af:61:46:
         28:f5:64:1d:19:83:b4:77:3f:12:de:e0:4f:11:2e:ae:f8:14:
         c4:9e:12:0d:bf:94:ec:61:8a:bd:09:6a:01:73:93:5d:b8:98:
         fb:18:52:97:ba:cd:23:f5:d8:87:1a:6a:55:c3:27:bf:b3:2c:
         65:6f:94:e4:54:ef:8e:f6:45:8f:f9:ac:d5:4f:58:b4:60:b7:
         aa:71:4c:ee:a2:cc:d3:be:be:a2:03:69:d2:b4:c3:9d:cf:0d:
         56:f0:75:fc:e9:05:6c:18:f4:00:75:fb:17:e1:bb:37:45:83:
         ea:a3:01:e2:af:05:97:d6:76:f0:da:a8:1a:c1:2e:7b:45:87:
         ab:ae:e2:c3:6c:03:c8:b5:ea:29:46:54:d7:35:91:cf:13:d3:
         86:a0:9d:02:56:49:7d:82:6f:4f:bc:c7:32:0e:16:b9:1e:b1:
         22:0a:a7:14:59:08:7e:f6:13:b4:3e:09:45:80:f5:0c:e9:2a:
         ea:e6:b3:7f:fd:4d:a6:2c:da:fe:8f:4e:df:db:39:9b:ea:e0:
         7c:2e:b6:22:96:03:fb:63:6c:e1:b3:fb:43:d7:d2:63:bd:ec:
         d6:bb:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:40:03 2025 by rpki-client