Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137372e3232332e3234302e302f32302d3234203d3e203533313532.roa
File:                     3137372e3232332e3234302e302f32302d3234203d3e203533313532.roa (raw, json)
Hash identifier:          37ZiitrKIRrfnY/XvMF30Fb8iz9WC3ph3iw2F8pzR3M=
Subject key identifier:   7D:55:03:46:94:0A:95:D6:90:85:80:6C:31:1A:6A:BA:E4:AC:3B:AC
Certificate issuer:       /CN=192F14755AC879D7851EBA5CD1002E9D4B65583F
Certificate serial:       1A1EB77E61E87BDA1FAB0503931129DF8003F1E4
Authority key identifier: 19:2F:14:75:5A:C8:79:D7:85:1E:BA:5C:D1:00:2E:9D:4B:65:58:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137372e3232332e3234302e302f32302d3234203d3e203533313532.roa
Signing time:             Thu 06 Mar 2025 05:00:22 +0000
ROA not before:           Thu 06 Mar 2025 04:55:22 +0000
ROA not after:            Thu 05 Mar 2026 05:00:22 +0000
asID:                     53152
IP address blocks:        177.223.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.crl
                          rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 04:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1e:b7:7e:61:e8:7b:da:1f:ab:05:03:93:11:29:df:80:03:f1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192F14755AC879D7851EBA5CD1002E9D4B65583F
        Validity
            Not Before: Mar  6 04:55:22 2025 GMT
            Not After : Mar  5 05:00:22 2026 GMT
        Subject: CN=7D550346940A95D69085806C311A6ABAE4AC3BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:d7:d4:16:d9:7f:b3:af:b8:02:e8:0b:1b:
                    78:8d:40:6e:77:56:c7:26:a7:ae:12:73:e9:b0:54:
                    0d:59:59:c4:24:52:cb:2a:e3:24:30:5b:f3:d9:6d:
                    ca:72:fb:9d:8f:0a:6f:47:dc:f7:db:1f:cc:39:3f:
                    7c:e3:53:cf:3d:af:a0:3e:0e:2c:46:73:7c:9b:6d:
                    d7:74:16:e5:47:a5:75:ac:1e:94:47:fd:94:b2:99:
                    4b:fd:4c:d9:1c:88:18:84:c4:1d:67:47:9f:71:a4:
                    a1:3c:f0:9e:17:e5:29:27:86:8d:f4:d7:a6:3d:c9:
                    bc:b2:e8:69:f5:54:c2:b1:15:5b:60:82:08:b9:a9:
                    c6:6f:6b:b6:cf:40:44:f8:63:e1:12:43:4c:0f:91:
                    ea:26:62:59:2e:57:53:f8:ee:85:a4:06:77:32:b7:
                    f4:8e:4e:54:80:36:f0:ca:df:36:ba:01:3b:c2:ba:
                    ec:93:90:4e:07:60:03:43:3d:2f:2d:29:88:82:ee:
                    b1:91:1e:a9:f0:93:9c:d6:3b:4e:28:c3:e0:76:6a:
                    6b:bf:76:c9:de:c2:02:b8:1c:fb:38:a8:80:bf:24:
                    69:92:72:26:27:60:9f:3e:81:7a:81:62:ac:ab:77:
                    10:15:d6:14:65:73:78:05:e7:3a:ec:87:99:32:a2:
                    9c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:55:03:46:94:0A:95:D6:90:85:80:6C:31:1A:6A:BA:E4:AC:3B:AC
            X509v3 Authority Key Identifier:
                keyid:19:2F:14:75:5A:C8:79:D7:85:1E:BA:5C:D1:00:2E:9D:4B:65:58:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/192F14755AC879D7851EBA5CD1002E9D4B65583F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XmgkWMQSmk967CpBEstX2x1biNU5FYuaiboX6cHMJBi/1/3137372e3232332e3234302e302f32302d3234203d3e203533313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:a7:e2:1b:5f:9a:ae:54:98:dd:4d:ce:24:92:0b:ce:e2:3e:
         d1:1d:c8:30:f6:73:30:79:b3:33:2e:a5:61:95:74:c7:cd:02:
         59:1b:27:b0:45:6d:3a:bb:da:f5:93:07:45:ae:3e:ee:fc:0e:
         57:f3:d8:ad:1f:f0:d1:c6:95:44:6a:18:e0:18:98:d8:e9:72:
         af:a8:64:4f:30:09:6e:7f:64:17:eb:e4:65:fe:cb:cf:55:a7:
         57:d3:2e:2c:0d:f0:72:91:b4:13:41:a7:9c:54:6f:b8:97:ae:
         eb:28:44:f3:7d:43:1a:60:28:4b:e7:f0:f6:b7:f7:b3:9e:a4:
         cb:00:07:53:57:39:d8:8c:f1:a4:3a:4f:cc:08:a9:7a:41:f9:
         7d:f9:39:4b:cf:65:7d:6e:a9:73:3c:7e:98:c0:db:bb:88:37:
         90:de:e0:48:b7:95:48:1b:b2:67:e9:b9:4a:02:65:40:3c:de:
         46:82:52:56:7a:6b:ae:00:97:d2:a9:a0:54:de:29:cf:51:93:
         68:89:58:20:ca:ef:2f:36:33:cf:2a:48:e7:65:2a:73:be:fe:
         c8:f8:ee:7b:10:16:07:3a:92:98:c0:4c:c3:67:90:03:d7:22:
         8f:2b:fb:11:04:1d:38:49:f3:cb:c5:10:48:7b:80:07:aa:a8:
         74:bd:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:26:23 2025 by rpki-client