Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e322e302f32332d3233203d3e20323632363432.roa
File:                     3137372e38372e322e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          f+Jnep5IXI8NsIx0984Zm7PWaNp9reRf3mRcwUGM0e0=
Subject key identifier:   4C:BC:7C:0B:CE:AA:AF:8A:0D:35:9A:7C:4A:2C:26:CF:49:4D:D4:2C
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       1D021D4B60DCA23D43DB53EBDB83A8E61AD9634B
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e322e302f32332d3233203d3e20323632363432.roa
Signing time:             Thu 06 Mar 2025 03:49:57 +0000
ROA not before:           Thu 06 Mar 2025 03:44:57 +0000
ROA not after:            Thu 05 Mar 2026 03:49:57 +0000
asID:                     262642
IP address blocks:        177.87.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:02:1d:4b:60:dc:a2:3d:43:db:53:eb:db:83:a8:e6:1a:d9:63:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Mar  6 03:44:57 2025 GMT
            Not After : Mar  5 03:49:57 2026 GMT
        Subject: CN=4CBC7C0BCEAAAF8A0D359A7C4A2C26CF494DD42C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6e:29:89:a3:9a:37:4a:e2:78:42:85:ef:56:
                    95:1f:82:bf:ca:96:be:0d:c1:58:a0:34:cf:28:2d:
                    f0:3c:fe:ee:16:78:74:6e:58:4e:ae:d5:5d:7c:9b:
                    7b:a8:08:22:82:1c:da:3a:d8:b6:e9:82:65:99:24:
                    8c:d0:3b:fb:ca:66:06:92:0d:34:b1:f2:d5:91:ac:
                    5b:b2:a8:93:29:68:85:95:e7:06:d7:7b:5a:23:da:
                    86:a4:c5:1b:c3:cb:d1:81:2b:ad:78:95:c6:13:4b:
                    86:07:05:bf:59:43:92:f2:83:35:fd:c1:23:19:9e:
                    24:74:12:f5:15:d0:9d:85:c1:4d:31:07:05:4c:30:
                    05:1c:6a:fa:b2:20:20:a8:cc:37:57:ab:7b:06:04:
                    07:71:68:d2:f5:c4:96:ef:9f:9a:92:3c:7c:ca:0a:
                    75:2a:ff:51:52:7c:dc:e5:a8:4e:6e:e5:4f:aa:2a:
                    3f:6a:e5:f4:6c:3f:0b:f7:36:3e:93:ff:9d:40:00:
                    cd:52:09:a3:8e:b3:99:82:eb:b1:13:ad:7b:33:5f:
                    ea:d1:e1:ed:83:fb:94:ec:28:42:73:e9:eb:b7:34:
                    79:36:52:74:78:2a:aa:d9:54:2f:0e:c4:52:8a:e4:
                    c5:9a:ec:55:8c:0a:df:b5:5e:3b:fe:f2:a9:2c:b4:
                    67:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BC:7C:0B:CE:AA:AF:8A:0D:35:9A:7C:4A:2C:26:CF:49:4D:D4:2C
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e322e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:32:f9:75:90:a0:0c:15:ca:55:d4:83:99:b9:27:25:93:23:
         fc:a2:ac:62:5c:f8:92:41:d5:42:b7:f5:b6:b7:2c:0e:69:f6:
         be:ea:94:bd:d7:8d:e1:49:f4:72:9d:c6:f9:f6:b1:e9:07:80:
         e5:52:08:48:d6:01:04:14:1a:3d:51:af:c9:aa:1e:0a:1d:1a:
         61:bc:c6:a7:ae:bb:8b:90:f1:49:12:23:59:91:f6:d2:9a:f4:
         03:c4:be:b7:99:5b:1f:6e:db:96:04:06:de:dc:8e:20:98:42:
         61:14:71:b4:5e:d7:ec:b8:b7:df:33:c9:7f:fc:7a:f4:9a:2f:
         23:d1:59:34:2d:c5:e9:42:72:07:6b:53:d5:8a:e6:b0:ff:45:
         46:48:e0:16:cd:6e:bd:ff:77:cd:18:aa:98:e0:3f:e6:5a:fb:
         af:8c:94:b0:47:96:06:d0:7b:2e:6a:d2:04:6d:14:09:49:ae:
         97:e8:e2:cf:9f:cd:ea:c4:40:3a:52:51:96:d0:14:4b:e4:f8:
         7d:2b:0f:74:7b:24:91:4e:d5:c9:56:4e:51:89:90:90:4f:46:
         8d:c6:73:5f:1e:d9:1b:1b:fb:10:42:af:af:d8:e4:05:78:0d:
         e1:5e:7a:4c:12:32:ba:0e:34:9c:14:09:c9:03:4c:ca:fa:b2:
         cb:43:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:12 2025 by rpki-client