Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e322e302f32342d3234203d3e20323632363432.roa
File:                     3137372e38372e322e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          7VHvGIeDI/Qjt6BQ41dTtU4SYRE4aCw+5Q4jshgFPS4=
Subject key identifier:   11:22:15:96:C6:ED:0F:14:0E:66:7F:C0:B9:2F:00:5F:F1:8E:30:54
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       2D79ECC2DAA55CAA2F3D3ACA972C3A138ABD3968
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e322e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 06 Mar 2025 03:50:00 +0000
ROA not before:           Thu 06 Mar 2025 03:45:00 +0000
ROA not after:            Thu 05 Mar 2026 03:50:00 +0000
asID:                     262642
IP address blocks:        177.87.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:79:ec:c2:da:a5:5c:aa:2f:3d:3a:ca:97:2c:3a:13:8a:bd:39:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Mar  6 03:45:00 2025 GMT
            Not After : Mar  5 03:50:00 2026 GMT
        Subject: CN=11221596C6ED0F140E667FC0B92F005FF18E3054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bb:c8:f7:9a:5b:f3:20:98:ab:8a:87:44:98:
                    a0:f9:d8:65:48:25:7a:a4:4e:e9:1a:63:40:57:e4:
                    3b:0d:a2:50:a1:5d:1b:9c:16:c8:1e:33:e5:af:1a:
                    b7:b8:94:26:6e:7d:ab:08:b6:78:79:cb:a3:3e:0c:
                    a0:a5:07:1b:a3:ed:2f:ab:82:d8:44:a3:0b:6d:0e:
                    4a:9e:62:a1:2a:a8:a4:51:58:8e:a9:52:a3:1b:49:
                    3f:87:09:ea:33:f2:22:f8:a2:3f:08:5f:8c:f7:77:
                    55:07:f8:1d:63:4a:ee:31:0f:63:7f:5f:fb:3d:83:
                    ed:e1:a0:5a:03:42:17:7c:21:7f:79:f6:41:70:07:
                    c0:70:fe:09:c8:39:82:95:42:09:98:64:eb:7b:9c:
                    a4:fd:12:21:f7:38:28:eb:5b:e5:68:bc:22:c6:8d:
                    95:01:a4:73:29:89:0e:43:e8:d8:7a:c0:02:6f:23:
                    94:25:21:91:81:a0:ee:ea:2b:ac:77:e9:60:f5:64:
                    e2:6b:d2:bf:29:19:6e:e7:f8:73:f2:e5:a3:ec:c0:
                    60:4f:ad:33:d0:b7:e6:dc:dc:b6:a5:18:b6:b9:d2:
                    3c:02:82:f7:0c:32:3d:5e:9f:9b:a9:47:94:c9:33:
                    f6:37:32:58:8f:5c:3b:a6:8a:f8:de:62:5b:18:17:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:22:15:96:C6:ED:0F:14:0E:66:7F:C0:B9:2F:00:5F:F1:8E:30:54
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e322e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:07:e1:4c:4d:2d:c9:73:f2:b7:81:99:4e:92:12:47:29:aa:
         e9:82:ad:6d:92:40:2a:a0:c2:98:6b:55:51:7a:30:96:37:ac:
         2a:a5:2d:57:d9:29:e7:9e:62:cd:6b:f7:ec:ed:4a:55:8b:0e:
         8b:87:b9:24:c2:dd:d1:0b:2f:a4:37:08:42:c3:e8:17:39:98:
         da:80:83:53:dc:57:87:c7:e3:2b:59:2f:f8:e0:a4:ea:2b:da:
         b8:85:af:cc:7f:32:8a:96:a2:19:cc:5a:14:82:49:e0:91:49:
         aa:bb:24:ee:76:dd:30:e2:63:30:35:88:f3:40:0e:48:3d:cd:
         48:84:8f:14:06:dc:63:d8:a9:7a:34:0a:b5:d4:38:4f:91:48:
         62:ab:16:a7:f5:08:bc:be:4b:77:89:6b:98:dc:5b:3e:98:2f:
         71:4e:c0:53:d4:be:c9:c7:e0:cc:60:0e:3f:fb:0e:13:c1:63:
         d4:74:5a:4d:0b:f3:40:50:9e:68:84:85:3f:c9:61:b4:5a:88:
         73:1b:04:d7:74:18:ce:43:73:58:31:aa:2f:ff:0a:dd:6a:03:
         7b:74:31:80:0f:bb:d2:40:4e:1a:c0:28:b0:28:c1:6a:d8:2c:
         c8:bf:cd:94:76:a2:87:8c:4f:7f:c5:7c:17:b9:a7:4a:b2:6f:
         07:25:46:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:26:23 2025 by rpki-client