Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133352e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3133352e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          11yBqdQf8/O0yqjvcwKgTHnTl+Ku4DNYpzB3lja0kJo=
Subject key identifier:   9C:4A:0A:9D:87:77:8C:E6:92:1C:2D:69:C9:4A:E3:2E:FE:97:F3:7A
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       5FC15AEFD00090D40847162AD069D481F77EBA54
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133352e302f32342d3234203d3e20323632343234.roa
Signing time:             Wed 16 Apr 2025 14:25:43 +0000
ROA not before:           Wed 16 Apr 2025 14:20:43 +0000
ROA not after:            Wed 15 Apr 2026 14:25:43 +0000
asID:                     262424
IP address blocks:        177.44.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 00:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c1:5a:ef:d0:00:90:d4:08:47:16:2a:d0:69:d4:81:f7:7e:ba:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: Apr 16 14:20:43 2025 GMT
            Not After : Apr 15 14:25:43 2026 GMT
        Subject: CN=9C4A0A9D87778CE6921C2D69C94AE32EFE97F37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:12:fd:a0:b8:87:50:9e:04:f4:3c:13:b1:
                    31:55:81:e1:ba:6a:af:7c:93:fe:75:f8:65:23:ab:
                    f5:aa:ab:0a:cd:b4:cd:3d:ac:41:c6:b4:05:df:ab:
                    5f:4e:f2:bc:c3:af:a2:fd:78:98:b9:3e:77:0c:f3:
                    90:3e:70:20:00:cf:97:80:08:74:a4:60:6e:ab:92:
                    6f:2a:72:1b:73:45:48:c1:4b:0e:37:88:ba:13:34:
                    03:31:92:ac:6a:11:8c:2a:27:97:78:7a:a3:97:11:
                    58:4e:5d:e3:40:d2:6a:a8:7a:97:d0:90:d7:9e:c4:
                    1f:b8:66:e9:b6:c5:74:6d:4d:09:7b:4c:35:77:41:
                    c3:7c:d2:46:09:35:08:d2:e8:c1:41:47:2d:78:7a:
                    70:ca:6d:0c:ea:28:1d:fa:13:8b:5d:31:fc:74:1c:
                    5c:7c:d8:36:28:43:d4:09:c1:d2:06:42:58:42:f1:
                    18:a6:5a:b7:5a:4e:dc:c2:1d:00:74:8c:e1:92:9f:
                    86:70:40:b7:49:0f:73:d1:51:d2:ab:f4:ed:ae:72:
                    50:4e:f5:2e:26:e8:18:e6:ec:47:06:54:9e:c7:2c:
                    79:fc:21:ef:dc:cd:fe:2f:21:a0:45:bf:24:1e:4e:
                    ae:ef:b8:7f:21:d1:38:b6:85:c7:36:0a:61:5f:9e:
                    56:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4A:0A:9D:87:77:8C:E6:92:1C:2D:69:C9:4A:E3:2E:FE:97:F3:7A
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133352e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:f7:2e:77:9f:3c:24:94:60:75:e3:1e:f8:16:c4:68:00:2c:
         37:34:75:ba:86:f6:c1:34:24:ba:e1:0f:7d:6a:73:da:b7:7a:
         44:3b:47:e8:88:bb:df:99:f2:5b:29:34:7b:a4:10:07:d1:be:
         54:56:ce:1a:60:61:24:a3:78:ec:23:e8:54:9d:8c:19:60:da:
         35:e1:c6:49:8c:b6:ba:ef:02:28:bb:a5:8c:5b:dd:62:d2:d2:
         a0:75:bd:bf:18:e8:bf:07:5b:8a:32:cb:35:a1:19:e3:d2:f3:
         ab:a0:3b:21:12:15:82:64:cc:0e:60:c5:49:f3:71:ed:c1:68:
         5c:f6:08:bc:f5:31:a3:32:d1:f1:2f:4b:66:c0:73:89:71:cd:
         f3:77:c1:7a:dd:07:6e:c8:ff:8b:01:ea:00:9f:76:36:34:c2:
         c8:c2:6d:6b:9f:47:5c:d4:63:ab:94:07:0f:77:0a:20:a0:9a:
         1b:86:f8:bc:38:dd:5f:5f:72:0a:80:25:ba:40:56:bb:bc:e8:
         bd:75:d4:80:27:61:a5:2b:13:ea:fb:78:19:27:4b:0e:b1:a0:
         eb:e6:42:71:53:31:7a:e3:7f:4c:ee:16:2b:2b:b1:4e:28:23:
         ae:41:16:d3:04:e9:cf:78:a6:c9:ad:9e:a9:8a:92:23:5f:df:
         8a:5e:bd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:17:06 2025 by rpki-client