Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e39322e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          KO8kkc86nqcnR+55czJb78OGWvUt/q7eKumDeTuab2M=
Subject key identifier:   F7:96:34:4F:93:ED:29:20:42:17:8B:18:76:C3:D8:E9:E1:A0:2C:69
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       79C3FEB259B899A8597288C4E4A8380458F4854F
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 13:05:06 +0000
ROA not before:           Thu 05 Dec 2024 13:00:06 +0000
ROA not after:            Thu 04 Dec 2025 13:05:06 +0000
asID:                     53047
IP address blocks:        177.101.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c3:fe:b2:59:b8:99:a8:59:72:88:c4:e4:a8:38:04:58:f4:85:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 13:00:06 2024 GMT
            Not After : Dec  4 13:05:06 2025 GMT
        Subject: CN=F796344F93ED292042178B1876C3D8E9E1A02C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:97:db:8c:2d:67:ca:07:c9:1e:fc:59:9f:
                    ff:bc:83:17:f0:46:f0:6c:4b:14:ed:ca:51:09:6a:
                    4d:6b:17:6d:e2:cd:82:00:c6:38:d2:9c:ca:1f:10:
                    69:92:1e:5c:a3:8a:72:b3:2f:5d:0f:76:59:71:4b:
                    2b:39:ca:de:a2:76:24:1b:b2:6b:5e:0c:b4:ce:4a:
                    69:e6:be:29:b1:5b:b1:5b:bb:08:fd:38:86:31:f9:
                    1b:3b:bd:fa:67:5e:56:02:2c:2c:78:fd:3f:a9:cd:
                    dc:d0:54:80:4f:05:33:21:ac:3c:1c:88:77:b6:0c:
                    9f:59:6c:35:ae:63:4a:0a:d7:25:3b:17:ba:cf:01:
                    98:fe:29:9e:42:54:6a:2c:01:60:cb:64:bc:00:a6:
                    b5:1f:24:e4:7b:bc:e2:ad:2b:a1:d5:8f:56:9d:9c:
                    33:ee:9e:a3:cc:b3:20:ff:04:41:3d:16:2f:3a:9b:
                    c4:6e:0d:e3:e0:37:81:0d:c3:2f:63:8c:f8:c9:f8:
                    56:94:57:c3:d4:f2:e5:33:09:f3:18:7c:2c:60:ee:
                    42:35:60:d8:82:fe:60:c1:81:ff:cd:45:0a:e2:40:
                    3f:6b:96:cf:d2:f6:a8:26:82:b6:b6:f4:7a:1d:d6:
                    5f:8c:09:18:5b:94:0c:18:45:57:2c:2d:95:7a:fe:
                    d5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:96:34:4F:93:ED:29:20:42:17:8B:18:76:C3:D8:E9:E1:A0:2C:69
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:32:2c:13:61:17:4a:23:93:bd:f5:53:67:18:bd:07:6a:72:
         6c:df:35:d9:98:7a:09:a4:87:bb:ee:ab:f9:16:1f:75:e8:95:
         c1:8a:57:ba:22:f8:c1:61:fd:a2:25:ce:78:f5:98:ba:5b:4f:
         5c:bf:8b:7e:f3:43:9a:86:de:b0:0b:8a:44:74:c0:10:dc:b3:
         de:e4:b1:21:0c:1a:b8:46:4e:24:05:6d:96:8a:fd:3d:4a:2a:
         35:a6:cf:32:cb:fc:26:55:3d:90:a6:5f:b6:30:a7:8a:07:a6:
         48:a5:59:7b:53:d6:9c:85:cb:24:d3:16:27:f5:59:1f:d2:33:
         ca:10:65:8c:2f:2b:4f:1c:f0:22:13:1e:52:3b:cd:28:3b:42:
         9b:a9:8b:91:78:61:02:eb:79:4e:ab:3d:93:fe:c9:68:51:17:
         65:17:56:77:c8:8d:de:af:c7:5e:e8:30:dc:94:fa:d0:fe:f1:
         a9:ba:35:f4:05:34:66:fc:6a:f3:cb:ec:9f:58:d5:dc:77:2a:
         c6:92:5d:c6:79:d3:4b:98:7d:c7:b5:88:6c:fd:c5:2a:91:95:
         7c:07:55:3a:c6:5e:43:86:24:db:16:67:24:40:7a:23:6e:93:
         95:00:d4:7c:ad:8b:82:fa:3c:9e:4a:9c:cc:6a:5b:0f:21:57:
         19:ff:2d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:24 2025 by rpki-client