Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32302d3230203d3e20323632333133.roa
File:                     3137372e3130352e3232342e302f32302d3230203d3e20323632333133.roa (raw, json)
Hash identifier:          YJpdzvhbunkh4G5o+dJdBocsvD31v0HG43fBz3T/sMI=
Subject key identifier:   B9:3D:87:90:B0:A0:61:E8:96:F9:9C:A1:30:D7:DF:BB:0A:10:85:7B
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       3A4A0698D9064C7A3179AE657E82BBF7A4803FE8
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32302d3230203d3e20323632333133.roa
Signing time:             Wed 05 Mar 2025 22:00:26 +0000
ROA not before:           Wed 05 Mar 2025 21:55:26 +0000
ROA not after:            Wed 04 Mar 2026 22:00:26 +0000
asID:                     262313
IP address blocks:        177.105.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 00:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4a:06:98:d9:06:4c:7a:31:79:ae:65:7e:82:bb:f7:a4:80:3f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Mar  5 21:55:26 2025 GMT
            Not After : Mar  4 22:00:26 2026 GMT
        Subject: CN=B93D8790B0A061E896F99CA130D7DFBB0A10857B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:af:96:0b:bb:55:7b:2c:17:e8:23:b6:65:
                    54:f1:7f:6f:80:1b:33:0b:61:f6:18:80:44:62:6f:
                    fd:2d:30:7a:2c:6d:ec:77:a7:59:db:1d:eb:ab:3e:
                    13:bb:d8:c2:86:f4:c4:0e:06:14:2c:de:f1:1b:bd:
                    10:28:1c:b6:fe:59:7b:04:c0:f5:e1:fb:c5:77:43:
                    f0:05:cf:6d:3d:63:a2:5c:c9:b0:24:85:21:f5:8c:
                    76:56:27:3c:d1:db:07:43:e7:15:2b:83:7f:d2:dd:
                    f6:d8:84:ce:e6:4d:14:7d:49:e5:0d:38:e8:8f:ff:
                    85:f0:68:70:94:a9:b6:38:8a:13:36:b5:60:cd:d2:
                    f8:75:19:60:7d:6f:f1:30:be:f8:bd:13:59:bf:57:
                    71:67:96:02:ca:8a:5e:dd:3f:ac:4b:61:5d:31:3c:
                    08:21:d4:58:46:8f:04:8a:88:c2:35:f4:ca:0a:35:
                    98:e8:cf:af:13:35:c3:61:f6:45:f6:fc:41:c3:b9:
                    f1:b2:f1:d1:ef:b2:69:b8:ef:27:e4:e6:a6:e1:05:
                    6d:c9:61:9f:21:75:ab:cc:52:4d:e5:fa:0e:db:0b:
                    e2:27:e1:1d:a6:72:a5:00:c8:cf:83:2e:45:87:43:
                    5a:f3:ae:f2:fa:4c:0c:33:9b:fd:32:e3:54:e9:b9:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3D:87:90:B0:A0:61:E8:96:F9:9C:A1:30:D7:DF:BB:0A:10:85:7B
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32302d3230203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:d9:11:f4:47:28:ef:7c:38:72:e8:56:ba:71:55:db:17:c8:
         51:4e:41:50:10:ab:9f:de:c6:02:48:bd:2b:dd:ae:07:a4:88:
         4a:2e:6c:de:a3:59:9c:2c:77:25:08:d7:1f:2d:69:2d:29:55:
         09:cb:97:86:6a:82:8e:67:16:1a:7f:2e:76:fb:8a:a2:73:36:
         b2:2e:98:fc:98:89:1e:c0:61:4b:e7:25:59:b7:b3:45:63:a3:
         5b:01:a9:13:2a:a2:a7:7b:9d:54:8e:87:08:ae:47:cc:b7:9f:
         51:17:fe:57:d5:4a:cf:7e:15:05:81:8d:a0:b1:80:f4:e2:ad:
         b3:6d:d1:28:dc:cb:f9:39:af:cb:e3:b2:7c:db:6b:50:23:e9:
         b7:43:47:67:8a:e9:87:aa:ce:ac:21:55:9c:cb:77:8b:fc:1a:
         9d:6b:71:22:95:a0:17:0a:96:58:3a:14:fd:c1:76:00:f5:e4:
         76:bd:bd:fa:74:64:57:1b:a0:e9:ab:63:f0:d9:c7:56:4f:d3:
         78:19:44:c3:16:f2:07:69:69:f2:19:d1:3f:82:f4:a8:c1:54:
         e8:9c:fa:a8:43:cd:51:50:2a:7c:74:b9:ca:30:dd:06:a7:62:
         5c:a7:d3:43:61:7e:09:42:a2:01:56:de:16:7d:c3:cd:51:08:
         ff:f8:b3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:38 2025 by rpki-client