Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa
File:                     3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa (raw, json)
Hash identifier:          v+g2C8tGU/+DEkP1JBEKGJ+X+HxZTCKhoMBNQi6IsuA=
Subject key identifier:   7A:44:30:B9:80:24:99:7E:BF:B5:78:2B:76:BD:1B:60:25:22:D9:85
Certificate issuer:       /CN=F149F6074E69BD8DF1483B6F1B74571591827C7E
Certificate serial:       32BFDE14BBC540E5E9980A0EFBE06E3FAA26E008
Authority key identifier: F1:49:F6:07:4E:69:BD:8D:F1:48:3B:6F:1B:74:57:15:91:82:7C:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149F6074E69BD8DF1483B6F1B74571591827C7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa
Signing time:             Thu 06 Mar 2025 18:32:20 +0000
ROA not before:           Thu 06 Mar 2025 18:27:20 +0000
ROA not after:            Thu 05 Mar 2026 18:32:20 +0000
asID:                     28665
IP address blocks:        177.136.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.crl
                          rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149F6074E69BD8DF1483B6F1B74571591827C7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:bf:de:14:bb:c5:40:e5:e9:98:0a:0e:fb:e0:6e:3f:aa:26:e0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F149F6074E69BD8DF1483B6F1B74571591827C7E
        Validity
            Not Before: Mar  6 18:27:20 2025 GMT
            Not After : Mar  5 18:32:20 2026 GMT
        Subject: CN=7A4430B98024997EBFB5782B76BD1B602522D985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:4d:aa:61:80:d5:e0:52:a3:2c:e4:83:d4:
                    b4:23:4a:a5:b1:c3:e6:6a:f3:8a:7f:22:22:d6:16:
                    a8:aa:af:3c:f9:70:6c:d4:54:64:3e:9c:a0:2e:a7:
                    3a:79:64:d8:16:17:d4:fc:f3:cd:a1:69:54:51:71:
                    17:d9:33:ad:6e:1e:f0:fc:7b:ae:11:8c:bf:d6:d8:
                    68:d7:eb:40:af:57:ba:28:c3:a3:28:a4:a6:66:25:
                    70:70:0a:46:eb:a7:be:d9:41:12:1c:31:cb:e7:d8:
                    78:80:4e:dd:db:3e:1b:d6:f7:e4:b3:69:70:f1:5b:
                    44:83:19:b3:85:41:d7:ea:b3:9b:a7:75:c9:90:e1:
                    f5:e8:84:fa:d7:54:1c:b4:41:16:61:03:1d:56:21:
                    f4:65:c1:3a:e6:87:56:c3:ef:75:ca:ba:b2:d3:ff:
                    8b:e9:d0:d9:ee:1b:ee:bf:46:99:dc:3d:56:4f:28:
                    7d:f6:9f:08:2c:44:b1:94:da:d2:c6:fe:60:24:b6:
                    c7:c0:57:68:59:74:a7:f9:78:99:21:42:6c:dd:57:
                    7e:34:b4:12:75:26:13:4d:a5:38:c5:1a:59:52:29:
                    c8:2f:dc:f9:68:10:d9:cd:ec:1c:61:cc:ec:eb:ed:
                    83:a8:18:1e:cc:c3:d0:6f:90:62:53:40:d6:34:e4:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:44:30:B9:80:24:99:7E:BF:B5:78:2B:76:BD:1B:60:25:22:D9:85
            X509v3 Authority Key Identifier:
                keyid:F1:49:F6:07:4E:69:BD:8D:F1:48:3B:6F:1B:74:57:15:91:82:7C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149F6074E69BD8DF1483B6F1B74571591827C7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:02:72:4c:e4:0b:10:ce:c0:6d:f4:25:83:74:a4:63:5f:88:
         f2:8a:73:89:b4:07:5f:a1:5c:13:66:3f:cb:c9:c6:5b:fd:77:
         ac:61:17:40:29:dd:7b:2f:2d:1c:ec:16:2b:78:0f:c4:bc:30:
         de:0b:ee:8e:01:03:1b:c6:a8:f3:9c:e5:e0:84:06:2f:52:0e:
         66:21:a4:36:8c:08:88:53:ad:b4:7e:c4:a0:b8:74:b7:8d:92:
         96:f6:0b:07:54:32:9a:41:83:86:f6:4d:a1:ff:31:1f:a6:ab:
         c6:fb:c2:bc:8b:d3:ad:86:37:1a:d1:0b:17:7b:18:7b:93:63:
         34:c3:ea:8a:04:06:ff:d5:d9:4d:44:aa:39:0e:d8:1b:72:6a:
         fa:24:f6:83:08:68:1c:60:4f:63:a5:7e:f5:53:e6:b7:c4:14:
         68:f5:7c:3c:60:f0:bb:39:75:e7:ca:8c:6f:87:32:be:cc:12:
         e5:e2:b6:fe:a9:53:d5:4a:b9:e1:e4:8d:41:58:ca:a4:85:65:
         cc:a0:1e:3f:f0:7a:d5:4e:d7:82:fd:63:a6:52:84:6f:81:3d:
         0c:e1:fa:10:47:f8:54:81:78:4f:93:60:5c:50:34:33:d7:b2:
         30:d0:53:35:22:9c:b4:f3:aa:be:98:a1:2e:1a:02:8f:2b:72:
         48:ef:99:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:42:00 2025 by rpki-client