Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa
File:                     3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa (raw, json)
Hash identifier:          NfymXOCJyT2Z90Amb45ybAgXHskg4tz2XyAwoLmtAdg=
Subject key identifier:   27:C6:68:EE:94:AE:55:B1:2F:32:EE:89:0C:96:6B:52:06:1E:09:F1
Certificate issuer:       /CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9
Certificate serial:       3C1A2D11EA3D1D19B107104F4EB3091AF34A76A4
Authority key identifier: F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa
Signing time:             Mon 10 Feb 2025 18:28:46 +0000
ROA not before:           Mon 10 Feb 2025 18:23:46 +0000
ROA not after:            Mon 09 Feb 2026 18:28:46 +0000
asID:                     262452
IP address blocks:        177.52.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl
                          rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 23:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1a:2d:11:ea:3d:1d:19:b1:07:10:4f:4e:b3:09:1a:f3:4a:76:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9
        Validity
            Not Before: Feb 10 18:23:46 2025 GMT
            Not After : Feb  9 18:28:46 2026 GMT
        Subject: CN=27C668EE94AE55B12F32EE890C966B52061E09F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fb:f4:3e:37:b4:c2:76:aa:f5:d5:e6:a3:17:
                    48:be:28:d7:8c:4a:20:c1:81:3c:32:ed:b1:df:18:
                    a8:4b:37:c0:36:72:c0:de:cf:b4:3b:33:9a:af:47:
                    ac:e7:11:1f:03:93:6f:c6:8d:34:38:28:c6:a2:9c:
                    93:68:07:cd:b2:fc:54:52:2c:21:60:13:4b:ea:e2:
                    3f:0f:e7:99:0c:42:8f:d5:9f:ab:29:2d:db:0d:39:
                    e2:71:6b:43:b6:fe:94:c0:8e:ea:f4:42:38:b3:ae:
                    6f:e2:9c:7f:c1:3a:d1:30:df:d9:78:5d:7c:6d:3e:
                    ef:e8:49:34:21:f2:23:c2:ff:fa:bd:1b:ee:8e:36:
                    98:33:a2:8c:62:0f:ae:fa:d3:ac:25:4e:95:ae:44:
                    05:da:df:df:c1:ab:c5:d0:c0:b9:35:fb:6a:d7:e9:
                    d0:05:ca:76:42:ee:6d:6a:8c:d3:4b:5a:6a:ee:97:
                    91:16:fb:48:89:29:83:74:83:21:42:09:9e:b8:a2:
                    c7:5b:d5:ad:36:24:e7:81:bc:6f:20:28:93:1f:8a:
                    eb:f2:7f:28:f4:7a:98:a8:fb:f1:33:64:f4:38:bc:
                    9d:de:43:b4:d8:16:b2:65:cb:54:ca:ad:2c:26:95:
                    0b:91:f5:e3:7b:98:89:de:65:f3:27:d2:ca:99:bb:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C6:68:EE:94:AE:55:B1:2F:32:EE:89:0C:96:6B:52:06:1E:09:F1
            X509v3 Authority Key Identifier:
                keyid:F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:c2:5d:57:ea:5c:06:21:c4:1a:18:8c:db:3b:69:82:7f:42:
         2a:bd:54:e7:25:66:a8:fc:f5:07:c1:39:80:a8:ba:f5:9b:7f:
         87:74:7e:90:0a:fe:71:46:06:cc:c6:26:36:f0:bb:4b:8d:cf:
         c9:22:8a:72:df:33:1f:c3:d0:a7:02:69:67:8c:8d:2f:08:a3:
         9f:bd:5c:58:5b:ce:8b:4f:a9:5a:1a:b0:47:5f:62:93:d3:5a:
         c5:03:f5:40:5a:e4:39:d9:c8:13:1d:b8:c6:68:c7:dc:e6:30:
         6c:3b:bb:d2:85:2b:f1:73:b5:05:05:66:84:ca:19:04:04:c2:
         12:2b:2d:bd:61:f1:52:87:df:ff:ec:6c:99:61:14:88:89:bf:
         b8:1c:b0:8f:d8:bb:1d:de:d3:cc:90:c5:9e:f0:b9:e3:70:03:
         38:97:b5:03:9d:f1:0c:f9:01:2d:54:df:34:f6:44:2c:75:95:
         f3:86:b5:e0:78:a6:7b:3a:a8:36:81:d8:37:b9:1a:53:75:8b:
         cb:23:c0:ff:b3:86:89:43:2a:4f:15:39:a5:d9:01:b5:47:2a:
         54:eb:e0:b0:ec:d0:93:01:95:46:a7:1f:8e:51:12:b8:97:b2:
         65:da:fa:f2:af:4b:27:09:2b:41:ad:fa:64:b4:32:4e:b8:d7:
         0a:76:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:53:49 2025 by rpki-client