Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38342e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          mpEsIux+k//nfmeAplf7EWd1qMYOvjLpC15BCKj6Y1k=
Subject key identifier:   70:BC:13:C7:A4:0F:D4:A1:93:1F:7C:B1:C1:2B:36:1F:F2:E6:A6:6B
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       275487658020EFC3F02E37D3EDC5F50493637F20
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 13:01:31 +0000
ROA not before:           Thu 05 Dec 2024 12:56:31 +0000
ROA not after:            Thu 04 Dec 2025 13:01:31 +0000
asID:                     53047
IP address blocks:        177.101.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 06:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:54:87:65:80:20:ef:c3:f0:2e:37:d3:ed:c5:f5:04:93:63:7f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 12:56:31 2024 GMT
            Not After : Dec  4 13:01:31 2025 GMT
        Subject: CN=70BC13C7A40FD4A1931F7CB1C12B361FF2E6A66B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:3b:c5:cb:4a:de:9a:4c:c5:42:59:03:6d:
                    ec:bc:48:73:1a:f9:fc:9e:e4:bd:29:08:12:8d:9f:
                    f5:af:76:4f:a4:6e:84:69:ae:a6:dc:07:ef:d2:26:
                    0c:9a:b1:03:dd:51:59:5d:7c:72:d9:8c:f2:c7:30:
                    04:3a:d2:b7:2c:8f:22:cf:03:ae:4a:b4:03:65:96:
                    fe:d4:4a:80:06:fc:9d:2d:d7:cf:39:45:24:db:5b:
                    31:b4:ca:f1:92:30:19:40:e3:e9:b2:44:56:2d:72:
                    a7:a5:7f:bb:75:f9:8a:f9:3e:17:8b:24:b5:f7:9b:
                    f5:0a:99:8d:83:af:f4:38:4d:5e:4d:5a:ab:52:24:
                    c5:0a:34:cd:bb:63:ac:b8:7b:34:f1:c9:73:fd:f9:
                    fa:da:76:ac:d7:30:ef:fb:ef:42:97:20:d8:72:5f:
                    1d:a3:21:b3:6d:5a:7c:28:ac:f1:e1:64:c5:fe:88:
                    94:66:6d:c7:10:df:19:22:69:ae:5c:9b:8f:e4:7d:
                    db:b0:d3:ed:a4:c3:f5:7a:c4:7f:74:f5:a3:22:e8:
                    b3:a3:1b:9d:8a:e7:ee:59:74:cc:db:63:ec:4a:0a:
                    37:27:7f:a1:51:1b:2e:ff:28:65:74:96:66:15:68:
                    02:8a:63:0b:c7:2b:a7:12:4f:01:92:9a:4a:05:37:
                    fd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BC:13:C7:A4:0F:D4:A1:93:1F:7C:B1:C1:2B:36:1F:F2:E6:A6:6B
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:e1:1c:a3:c9:68:b2:37:39:a2:69:61:e5:19:ad:13:88:f7:
         0c:97:80:7f:93:7c:18:ee:8a:de:ca:b7:a0:f4:2e:a0:69:d1:
         d5:34:ed:f1:f5:69:45:24:11:ff:ca:dd:a5:e7:ef:08:ae:8c:
         97:8e:a4:0d:92:96:19:80:9e:67:60:b1:f1:88:20:cb:14:50:
         2b:d0:e2:9c:6f:5a:ed:8a:48:d9:f2:41:fc:62:c7:6a:35:d0:
         a3:95:a8:35:98:14:78:50:3e:3d:31:80:96:3f:90:bc:b7:14:
         ad:41:37:84:be:5c:5f:de:54:bd:82:f3:6a:42:d4:72:c2:c4:
         c7:d3:cc:67:41:30:56:f1:63:b9:ef:ec:7e:3b:12:fd:99:2b:
         82:6c:b9:ac:97:ca:5f:ad:57:bd:81:44:e8:a4:a4:2e:2d:a1:
         c2:5c:27:87:3b:af:f9:3e:d4:13:ec:6d:8f:bf:2b:4e:9a:01:
         2e:92:84:3d:40:7c:1c:b4:fd:5c:80:0d:20:05:96:d9:23:c4:
         c9:76:05:5e:17:8b:4d:cd:3d:79:70:8e:a9:b6:76:7e:33:41:
         77:c9:54:96:36:df:46:a3:11:9d:1f:1f:40:06:4f:2e:84:79:
         d5:71:a0:0e:b6:4f:77:67:9a:a6:39:e1:a6:2a:c7:c5:27:64:
         2d:aa:e0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:31:54 2025 by rpki-client