Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32322d3234203d3e20323633353731.roa
File:                     3137372e35352e38382e302f32322d3234203d3e20323633353731.roa (raw, json)
Hash identifier:          qBbLCGll6jATW+1P+n9QWcr7BZ1CCjGXFFq5Z6MEdRM=
Subject key identifier:   48:B0:33:D0:0A:79:41:6B:4B:6A:93:08:40:33:7C:6B:A2:E5:77:8E
Certificate issuer:       /CN=2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190
Certificate serial:       037051B777C1CAC09393AE69C34E70CB79C81362
Authority key identifier: 2B:D7:FC:C4:7D:CA:9F:F8:A2:B9:C3:58:07:6F:80:CC:7B:9A:51:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32322d3234203d3e20323633353731.roa
Signing time:             Thu 12 Dec 2024 11:32:34 +0000
ROA not before:           Thu 12 Dec 2024 11:27:34 +0000
ROA not after:            Thu 11 Dec 2025 11:32:34 +0000
asID:                     263571
IP address blocks:        177.55.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.crl
                          rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:70:51:b7:77:c1:ca:c0:93:93:ae:69:c3:4e:70:cb:79:c8:13:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190
        Validity
            Not Before: Dec 12 11:27:34 2024 GMT
            Not After : Dec 11 11:32:34 2025 GMT
        Subject: CN=48B033D00A79416B4B6A930840337C6BA2E5778E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d8:46:f9:18:16:1f:9f:48:90:a6:01:5a:03:
                    18:8f:6a:d0:cb:16:c6:87:b0:02:13:1c:7e:82:4b:
                    03:40:dc:90:00:2c:6c:82:68:21:e3:61:b1:6e:f6:
                    36:d3:f6:73:89:17:e2:c4:ee:88:58:af:07:f0:72:
                    7e:f7:c4:f2:dd:e1:12:05:0c:9c:6f:8b:d7:ec:3d:
                    06:b5:47:2a:62:84:a3:a5:05:e2:36:c9:c8:cc:70:
                    b4:b3:1e:ac:ca:ff:66:c0:b1:7f:ca:98:ff:d8:0f:
                    e0:07:b6:aa:a7:15:61:6d:d1:04:68:5d:f7:42:ae:
                    a0:74:5e:2f:f5:37:60:4a:76:b1:02:30:c7:1b:04:
                    ee:8f:d3:63:19:65:f9:96:00:e4:0a:b1:c4:7a:71:
                    b1:24:6a:51:62:be:1a:df:16:3e:4e:ce:e9:e9:b1:
                    55:09:49:dc:4b:c6:dd:a5:73:e9:7f:1a:22:91:5c:
                    a9:ef:eb:fb:28:8a:66:01:bd:2d:b2:f9:84:4a:e6:
                    e5:f5:48:71:ff:d5:8f:5a:5f:65:8f:66:1c:46:e0:
                    b4:df:ed:73:e1:c0:76:2e:d6:d5:c9:da:44:8b:82:
                    26:60:c9:b0:f6:9b:97:b4:c9:53:6f:e1:fc:5d:77:
                    f0:cf:d7:2b:79:6a:c9:b4:76:a1:2a:16:79:a1:32:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B0:33:D0:0A:79:41:6B:4B:6A:93:08:40:33:7C:6B:A2:E5:77:8E
            X509v3 Authority Key Identifier:
                keyid:2B:D7:FC:C4:7D:CA:9F:F8:A2:B9:C3:58:07:6F:80:CC:7B:9A:51:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32322d3234203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:57:90:95:f9:d8:5a:a2:78:14:d2:12:d2:15:56:83:73:0e:
         db:2d:c0:be:62:4e:20:18:ea:05:ab:94:ea:9b:36:8c:94:84:
         71:da:cc:49:84:ee:e5:b0:0e:c5:a8:c1:e1:d2:39:ff:4c:72:
         40:63:90:be:fe:ce:f5:c8:2f:45:2d:b5:00:7b:68:00:b8:e2:
         40:6c:4d:13:37:ba:ee:34:eb:aa:e2:6f:64:87:9e:d1:ce:c7:
         a4:ea:ba:e8:c1:57:d8:2c:9c:1b:52:34:20:0a:0a:7f:db:89:
         86:24:14:17:eb:aa:d3:7b:d0:01:13:1f:18:23:71:60:85:97:
         bb:29:71:55:cb:c6:06:b2:5d:93:a8:f0:30:01:67:a8:0f:40:
         b3:64:7e:f4:49:c9:5b:b8:cb:4d:d1:1b:b2:cc:1c:13:04:04:
         80:2f:b1:47:65:a4:df:06:52:21:19:6d:d5:4c:87:79:b4:14:
         fb:68:8d:4c:78:72:7d:ea:e2:1e:d2:b1:f0:fc:42:ff:ff:6e:
         48:f1:5d:47:48:ab:f6:16:51:fd:d6:0a:35:40:42:2a:d0:79:
         44:79:66:0e:54:db:3f:d7:35:8d:93:e4:f9:96:56:97:21:c7:
         80:95:3b:cf:6e:c0:a7:1e:61:66:7c:af:62:cd:ca:ac:34:6a:
         19:dd:13:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:44:24 2025 by rpki-client