Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa
File:                     3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa (raw, json)
Hash identifier:          2PXBSERgF9BGeDJ4jOYiixuYWLdYiXYQ0KgU/3BcBrs=
Subject key identifier:   1B:85:26:33:75:04:6B:8F:D4:B5:28:26:80:E7:5D:9D:85:E0:15:E1
Certificate issuer:       /CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
Certificate serial:       7458203B59DB3863FE03DE0CD3B3AA7750D8AAFC
Authority key identifier: 94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa
Signing time:             Fri 07 Mar 2025 05:11:16 +0000
ROA not before:           Fri 07 Mar 2025 05:06:16 +0000
ROA not after:            Fri 06 Mar 2026 05:11:16 +0000
asID:                     262462
IP address blocks:        177.105.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:58:20:3b:59:db:38:63:fe:03:de:0c:d3:b3:aa:77:50:d8:aa:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
        Validity
            Not Before: Mar  7 05:06:16 2025 GMT
            Not After : Mar  6 05:11:16 2026 GMT
        Subject: CN=1B85263375046B8FD4B5282680E75D9D85E015E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:58:ed:ff:f0:d8:fc:9d:d5:65:41:4c:13:
                    95:b7:4d:58:0e:8d:cc:f1:f0:26:8b:64:56:c9:e7:
                    47:a9:1a:20:48:76:a2:b8:c9:6d:34:ba:68:86:b5:
                    a4:a1:1b:30:51:44:a3:7c:0c:b6:76:74:f0:ed:04:
                    e5:d7:0c:37:a1:f3:e9:59:8b:ae:e7:01:e9:c6:f5:
                    e9:f4:69:87:72:5f:34:85:45:3b:5a:fb:12:f4:df:
                    93:c7:2f:fb:4d:ed:ae:bd:26:ec:49:cb:e6:57:bb:
                    50:b0:47:05:58:25:72:de:da:0a:b9:a1:25:ea:d3:
                    c4:de:9a:3c:90:5b:82:a8:b8:af:23:7f:ed:a2:b2:
                    0a:8f:6f:a0:41:8c:fd:50:2b:3d:b2:4e:fe:63:01:
                    8e:7c:0d:9b:05:5a:7d:49:8a:8c:b2:99:f0:bd:16:
                    79:e6:a8:35:0b:f7:e7:ba:7d:ea:c6:c9:82:ce:30:
                    b0:91:28:78:f7:95:2a:0c:cc:76:e7:c1:92:c1:6d:
                    89:c3:d4:43:09:d0:6c:41:fa:2c:94:ae:32:d3:2e:
                    6c:6f:b7:a3:be:1c:7d:38:23:42:c8:b2:9f:f4:2d:
                    c6:c9:df:8e:31:60:82:e6:26:ce:94:4d:34:d0:68:
                    b5:71:d8:e3:db:e3:2f:d6:55:0c:4c:ec:fd:0a:56:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:85:26:33:75:04:6B:8F:D4:B5:28:26:80:E7:5D:9D:85:E0:15:E1
            X509v3 Authority Key Identifier:
                keyid:94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:51:1a:40:da:57:bb:23:73:d0:ef:4a:20:00:02:ad:ed:f0:
         6b:83:45:c0:9f:f5:da:74:2a:94:19:41:43:04:29:63:65:fa:
         85:f0:51:48:4c:7e:29:c6:bb:44:82:02:88:13:3a:8a:0e:d8:
         e8:a2:f2:79:39:5d:9b:24:6a:c6:c3:1d:5f:b9:a1:8b:19:da:
         97:38:7f:74:58:7f:24:cb:dc:58:13:ec:99:6d:78:ce:a3:fc:
         81:53:71:0a:6a:c2:9b:89:18:09:9b:2c:25:1d:5b:6f:5a:96:
         d2:7c:26:fb:52:bc:6c:b4:2c:dc:31:17:12:2c:4e:53:e5:60:
         36:62:e7:5e:30:f5:e0:a7:ce:ef:5e:c7:51:98:b2:7d:fe:6b:
         0b:1e:d8:14:8d:d3:da:e9:dd:7a:a8:34:c2:51:26:6b:f4:7b:
         2a:98:88:76:74:cb:2e:0f:9f:48:61:aa:78:16:7b:d0:66:29:
         b0:03:71:51:79:83:d8:2c:78:20:c1:49:ea:6c:bd:39:be:3e:
         58:29:20:04:ea:f9:50:8f:56:54:b6:85:63:f6:cf:54:77:94:
         28:b8:67:d0:bb:e5:f2:4a:cc:78:d8:6c:77:1f:73:90:34:22:
         c4:1c:8e:f4:00:bb:a8:39:6c:ad:12:e0:0f:59:d0:1a:e0:f9:
         81:34:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:16:55 2025 by rpki-client