Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/3137372e37332e38362e302f32332d3233203d3e203532373030.roa
File:                     3137372e37332e38362e302f32332d3233203d3e203532373030.roa (raw, json)
Hash identifier:          3T54jvLMdk8gSt2gFBZ7QUtfw7YpROcZZXWKxlm/U10=
Subject key identifier:   D5:81:F5:6B:F8:6B:95:4A:5B:D0:9A:F0:75:15:B1:5A:1D:97:44:2E
Certificate issuer:       /CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
Certificate serial:       1F91ADF38467756AE3B12297B1358CBF1041ECAA
Authority key identifier: 23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/3137372e37332e38362e302f32332d3233203d3e203532373030.roa
Signing time:             Thu 07 Nov 2024 18:18:59 +0000
ROA not before:           Thu 07 Nov 2024 18:13:59 +0000
ROA not after:            Thu 06 Nov 2025 18:18:59 +0000
asID:                     52700
IP address blocks:        177.73.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 09:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:91:ad:f3:84:67:75:6a:e3:b1:22:97:b1:35:8c:bf:10:41:ec:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23B77CF7BD1F94F72A6C0808569C4F51A9BA389A
        Validity
            Not Before: Nov  7 18:13:59 2024 GMT
            Not After : Nov  6 18:18:59 2025 GMT
        Subject: CN=D581F56BF86B954A5BD09AF07515B15A1D97442E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:12:4c:63:ab:d2:b7:78:dd:3b:93:b7:fa:d0:
                    d7:56:c9:d8:3a:ac:37:1e:cf:db:5c:88:7b:f0:0c:
                    d2:8e:28:55:f1:0b:d0:2c:7c:09:32:01:51:41:c5:
                    ad:52:b2:21:f7:c9:16:c8:0e:02:7c:6e:d3:05:2c:
                    2c:f2:4f:28:48:f1:54:c9:64:2f:7e:0e:0a:48:8b:
                    c5:01:5c:c2:d4:2a:98:05:81:00:f9:5e:77:1f:b3:
                    cf:a4:dc:c7:68:b2:b7:a5:cd:95:3e:46:53:a5:02:
                    7e:fa:76:da:96:4c:f4:e7:17:17:b1:bd:d6:14:5c:
                    cb:30:99:75:01:a3:a0:c1:82:80:6f:51:f5:17:54:
                    65:f8:8d:1c:7e:1f:c2:72:f9:eb:9a:f7:99:7e:6f:
                    18:02:60:0b:af:15:3e:87:46:23:82:4a:0c:95:74:
                    c1:e3:34:92:db:51:a1:10:97:cd:f7:ac:a2:4d:8f:
                    01:17:b9:de:d2:fe:8f:bf:3e:59:16:b5:1e:de:b8:
                    8d:72:6f:77:c4:98:7c:35:dd:8a:12:59:13:d1:b3:
                    ef:7e:5d:f6:7b:d0:d3:1d:86:12:9a:bf:81:45:b2:
                    3f:24:aa:ef:99:ae:8d:be:bf:bd:3b:c1:36:6f:25:
                    42:82:1f:c1:27:46:8b:81:d4:9d:97:51:f3:2e:66:
                    36:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:81:F5:6B:F8:6B:95:4A:5B:D0:9A:F0:75:15:B1:5A:1D:97:44:2E
            X509v3 Authority Key Identifier:
                keyid:23:B7:7C:F7:BD:1F:94:F7:2A:6C:08:08:56:9C:4F:51:A9:BA:38:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23B77CF7BD1F94F72A6C0808569C4F51A9BA389A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/2/3137372e37332e38362e302f32332d3233203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:6c:e0:5c:a7:92:48:78:35:fd:23:84:a1:a2:2e:69:ae:ce:
         70:90:b2:ad:bb:3c:eb:dd:ed:3d:ae:3d:04:df:72:12:bf:05:
         ff:ed:f6:33:93:1e:79:2e:77:de:8a:cd:4e:ba:d9:10:5f:c5:
         5e:47:0f:67:b5:43:36:81:20:65:e1:99:f9:63:91:9c:f6:4b:
         ff:c5:a0:08:26:80:30:99:3d:81:da:3a:0e:37:7b:03:f3:c4:
         21:f4:29:1f:df:10:9b:c6:18:b5:a0:49:0a:d3:14:10:a2:d0:
         56:57:55:d1:6c:c9:c3:82:6a:a6:bd:08:0a:4c:26:f3:ed:fe:
         ca:6e:93:1c:c5:ea:23:13:f7:43:13:21:ba:49:60:44:32:73:
         d7:c6:91:ce:5b:a2:e5:2a:f8:f6:39:80:f7:f5:0c:a2:f8:64:
         55:bc:1f:9d:f0:6e:dd:c1:5f:f5:ba:75:dc:83:f7:55:e1:cc:
         f8:ae:67:3a:dd:bc:41:97:12:00:58:fc:c0:10:5c:99:e2:a4:
         fb:82:0f:8c:8f:bd:eb:ac:9f:8c:fd:b2:1b:18:40:7d:88:5a:
         d1:c8:65:8c:d0:1e:10:5a:c0:29:03:0f:14:c0:ff:25:cb:a5:
         41:5b:14:d5:37:cd:97:b6:8c:a6:61:e1:34:92:df:5b:44:fe:
         85:5c:55:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:46:59 2025 by rpki-client