Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/3137372e3135352e37362e302f32332d3234203d3e20323637333031.roa
File:                     3137372e3135352e37362e302f32332d3234203d3e20323637333031.roa (raw, json)
Hash identifier:          KIF5oG3Z3NCioqKOwvgn4mjxz5NvQLFRUDD7BbdLqLo=
Subject key identifier:   EF:7E:43:B8:CC:72:3B:63:16:C1:D9:16:5F:79:EA:74:1C:13:BD:EE
Certificate issuer:       /CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
Certificate serial:       05E173FE33584C74CDD9A6E1A9A3223BFC092BB3
Authority key identifier: CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/3137372e3135352e37362e302f32332d3234203d3e20323637333031.roa
Signing time:             Thu 06 Mar 2025 04:00:13 +0000
ROA not before:           Thu 06 Mar 2025 03:55:13 +0000
ROA not after:            Thu 05 Mar 2026 04:00:13 +0000
asID:                     267301
IP address blocks:        177.155.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl
                          rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e1:73:fe:33:58:4c:74:cd:d9:a6:e1:a9:a3:22:3b:fc:09:2b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
        Validity
            Not Before: Mar  6 03:55:13 2025 GMT
            Not After : Mar  5 04:00:13 2026 GMT
        Subject: CN=EF7E43B8CC723B6316C1D9165F79EA741C13BDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:73:cd:a0:09:14:3a:41:50:b5:2e:cb:e7:54:
                    a3:f3:94:c5:0b:fa:eb:58:04:5c:b4:69:76:80:25:
                    0f:89:9c:72:3f:82:e8:f6:d1:a3:a8:25:3a:da:18:
                    56:0a:6a:91:e3:b7:45:d2:3d:d5:e9:1a:c8:87:54:
                    82:6c:bf:08:30:ab:24:25:94:c7:6d:a9:0a:75:a3:
                    7f:e0:e1:9a:2f:e9:f9:87:e4:be:25:aa:2e:77:63:
                    44:f0:43:df:cd:53:e8:2c:b5:df:e0:05:7c:c1:8f:
                    4f:d4:81:87:fb:c6:c5:40:ab:11:ea:1c:2b:3a:aa:
                    61:83:09:f4:ba:7d:89:cb:76:95:e8:e0:bd:86:c5:
                    03:01:06:b6:63:38:73:c5:69:c6:85:22:81:e0:57:
                    56:62:b5:33:38:76:78:1f:18:03:9a:4f:9d:36:56:
                    dd:dc:b0:8f:c1:ee:fb:ea:e5:8c:c5:a9:c8:13:ed:
                    7b:40:c7:da:a2:16:52:08:73:2e:d9:82:3a:9f:61:
                    e3:b3:02:a0:ff:f8:ca:83:ee:d6:7f:ea:85:a5:93:
                    d5:9f:5d:30:c6:b2:ab:92:be:bb:c4:d8:a4:95:14:
                    dd:a4:66:06:58:6e:b5:60:45:8b:c0:2e:32:d7:0e:
                    05:c6:3a:a6:8f:d6:87:b3:cd:bc:93:e9:e3:d5:66:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7E:43:B8:CC:72:3B:63:16:C1:D9:16:5F:79:EA:74:1C:13:BD:EE
            X509v3 Authority Key Identifier:
                keyid:CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/3137372e3135352e37362e302f32332d3234203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:0d:bb:51:4c:00:cc:6a:6a:12:9d:9b:fd:e0:9a:aa:e3:72:
         88:05:47:e2:ee:c6:14:79:d2:e7:fe:b9:e8:2c:73:45:a2:ec:
         2b:d9:0b:ce:b5:ca:31:95:28:4f:b9:2d:a0:83:03:54:bc:55:
         64:5b:28:87:d0:0a:0d:5a:5d:de:f2:4e:bd:b3:76:c6:e4:64:
         4d:b3:ce:34:44:01:ae:d9:07:aa:4b:0d:81:34:13:a0:a0:c8:
         34:52:d9:09:21:19:1a:f8:76:6c:9b:92:5b:aa:44:fe:93:9c:
         fb:7b:af:16:ad:8d:fa:9e:8b:07:89:d7:68:0a:87:f6:98:26:
         e0:31:6a:87:b3:21:5b:15:81:6b:05:39:f9:2e:a6:dd:45:20:
         1d:04:60:29:83:dd:56:16:db:27:bc:19:84:4d:c4:1c:b7:93:
         47:d5:24:c2:fb:20:72:c3:69:8f:9b:69:c9:71:03:38:5e:26:
         f2:e4:f4:85:aa:c1:68:9a:03:ed:d3:1c:0c:77:c3:fa:07:ff:
         94:d1:56:39:c9:74:36:0e:8e:64:d9:1d:f7:33:a7:63:20:0b:
         7c:98:5b:0c:41:6a:51:54:bb:6c:3d:6a:a9:8a:c9:89:06:af:
         cb:1c:a4:e3:4f:4b:a4:be:5b:e7:22:ed:18:c0:cb:13:0b:52:
         1c:7c:b6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:49 2025 by rpki-client