Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233342e302f32342d3234203d3e20323632333133.roa
File:                     3137372e3130352e3233342e302f32342d3234203d3e20323632333133.roa (raw, json)
Hash identifier:          R2VEWH/VhzrHYdFYqaiikq5MmTIvGOKfwlXxapQENEA=
Subject key identifier:   29:9B:B3:24:1E:B3:67:F9:86:2A:C1:98:A6:06:EE:77:1E:52:4F:81
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       68D67572051DFC61E775A1FC97E9E630A0D28E17
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233342e302f32342d3234203d3e20323632333133.roa
Signing time:             Wed 05 Mar 2025 22:00:26 +0000
ROA not before:           Wed 05 Mar 2025 21:55:26 +0000
ROA not after:            Wed 04 Mar 2026 22:00:26 +0000
asID:                     262313
IP address blocks:        177.105.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 01:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d6:75:72:05:1d:fc:61:e7:75:a1:fc:97:e9:e6:30:a0:d2:8e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Mar  5 21:55:26 2025 GMT
            Not After : Mar  4 22:00:26 2026 GMT
        Subject: CN=299BB3241EB367F9862AC198A606EE771E524F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:9d:de:0b:f6:b4:5a:58:a7:d3:83:39:18:
                    ef:e4:26:96:29:5b:12:c0:94:1e:f0:d5:c2:a3:2f:
                    74:e3:26:79:de:fa:89:00:6f:19:fa:fb:60:5d:2f:
                    9b:85:17:5d:d2:0c:71:12:5f:0c:dd:20:66:9a:74:
                    e1:0a:c5:06:83:d5:22:48:0e:45:3b:6f:0f:47:e5:
                    15:a0:af:03:4d:66:cf:58:c1:75:e3:12:56:da:56:
                    f2:57:45:30:3b:40:6a:b1:5f:e4:90:91:0f:23:41:
                    05:b5:47:89:87:ac:ea:37:10:e7:2a:9e:82:76:11:
                    b7:4d:e8:6f:8a:de:1b:a5:5e:b5:ef:77:f0:9d:34:
                    05:58:65:6c:0a:6f:56:0d:c3:47:50:04:81:c2:a2:
                    d0:dc:28:fa:6c:d5:33:a8:e0:ae:b7:51:4a:1b:30:
                    c7:98:f2:ac:ad:f9:7c:75:9e:30:20:68:76:6f:51:
                    21:1b:4c:d3:3e:6d:4c:b1:ff:1f:33:c8:66:57:9e:
                    c3:08:b9:61:1c:a6:0d:70:fb:e9:33:27:93:03:3e:
                    08:6b:f5:2b:9d:17:97:50:40:d1:59:66:1d:4a:83:
                    9e:bb:a2:cd:51:da:f4:50:40:e4:1b:f5:3f:21:33:
                    ae:13:95:72:cd:4c:aa:59:b3:78:af:f4:07:58:84:
                    5a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9B:B3:24:1E:B3:67:F9:86:2A:C1:98:A6:06:EE:77:1E:52:4F:81
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233342e302f32342d3234203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:7e:b7:68:ce:28:40:dd:7d:99:f6:e1:fa:40:d9:b2:c0:12:
         9a:fa:be:1a:2c:19:ac:d9:0e:08:6f:4e:7f:4a:d5:63:48:56:
         21:ab:98:8d:51:88:f2:82:f7:51:a5:ec:65:83:c2:6a:d4:37:
         5c:37:93:11:a8:26:23:d1:08:f2:4d:f1:bb:fc:9b:7a:67:40:
         11:7e:98:6a:0e:32:74:64:ac:b9:c7:8b:d3:85:9e:37:1e:df:
         d3:6d:31:33:65:dd:e0:21:70:cd:63:34:f9:20:ea:60:08:21:
         90:e0:b9:ed:73:3b:9c:f3:d6:3a:df:e4:41:a8:78:b3:95:50:
         a1:8e:51:20:35:99:14:ae:02:d0:8f:6d:f5:a1:6d:2e:ef:d9:
         3f:fa:14:ce:94:8c:3c:61:1c:26:98:77:63:94:3a:b2:6c:f4:
         05:97:d0:5a:3f:94:2c:d7:26:08:72:59:f7:c4:0b:76:53:e2:
         ba:8d:70:78:b2:37:68:26:83:f0:8d:fd:bd:82:8e:d6:09:a7:
         bc:e2:02:41:21:e1:e8:81:82:2f:26:98:69:d1:87:3a:d3:be:
         ed:14:fe:0d:4f:bf:89:62:00:b6:c0:a9:aa:7b:38:82:f1:11:
         0e:2d:cf:72:0e:3c:59:c2:44:1e:0a:a2:fc:d1:2e:a3:3e:f3:
         bc:bc:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:22:47 2025 by rpki-client