Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137362e302f32302d3234203d3e203238333036.roa
File:                     3137372e39312e3137362e302f32302d3234203d3e203238333036.roa (raw, json)
Hash identifier:          k0Qp9OBBCyIDuweYwGmVIOMPBaMos5/4z4jDIiRZNq4=
Subject key identifier:   68:3E:34:6B:8F:00:84:1B:3F:A2:A6:70:D6:44:F1:4F:73:25:76:17
Certificate issuer:       /CN=00398394BC116D8D01BE15C08D06060EF5755D29
Certificate serial:       59BC4DFE4B2045458E6D1817F9F3EE8AEBBE9539
Authority key identifier: 00:39:83:94:BC:11:6D:8D:01:BE:15:C0:8D:06:06:0E:F5:75:5D:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137362e302f32302d3234203d3e203238333036.roa
Signing time:             Tue 11 Feb 2025 02:54:30 +0000
ROA not before:           Tue 11 Feb 2025 02:49:30 +0000
ROA not after:            Tue 10 Feb 2026 02:54:30 +0000
asID:                     28306
IP address blocks:        177.91.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bc:4d:fe:4b:20:45:45:8e:6d:18:17:f9:f3:ee:8a:eb:be:95:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00398394BC116D8D01BE15C08D06060EF5755D29
        Validity
            Not Before: Feb 11 02:49:30 2025 GMT
            Not After : Feb 10 02:54:30 2026 GMT
        Subject: CN=683E346B8F00841B3FA2A670D644F14F73257617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:24:03:7e:3f:49:f8:ce:96:fd:d2:1a:81:fa:
                    a5:fe:7b:2e:e7:b5:23:9e:d3:a5:92:30:4b:e8:2c:
                    7c:16:e1:d5:f0:5e:f5:49:1b:a4:98:09:b5:97:8d:
                    43:61:7d:65:0c:6f:05:16:ff:2a:d9:61:c1:77:39:
                    10:32:25:55:a3:4e:bf:e3:be:d0:60:62:82:25:f1:
                    80:a3:70:df:8d:b0:e5:57:11:44:11:89:b2:20:80:
                    52:fd:a4:39:bf:23:d8:21:44:17:f4:63:65:6e:33:
                    79:66:c3:d8:ce:f6:e6:5f:85:01:c8:17:88:67:9a:
                    48:fd:c3:45:1b:67:36:54:7c:94:6b:b1:50:37:01:
                    6c:74:f1:a4:34:0d:67:85:40:04:55:e2:29:7b:3b:
                    dc:09:04:d0:33:ca:16:16:fc:bc:73:9e:8e:b8:e8:
                    92:b2:2b:bc:e3:a6:52:45:99:b5:2b:99:43:52:af:
                    f6:af:14:4d:1a:dc:8e:04:d1:5b:3e:4d:92:6d:6a:
                    c7:bc:24:a4:3e:57:0a:9c:37:fd:7e:80:8a:0e:4a:
                    54:1c:4d:eb:d2:a2:f3:0a:1c:e8:43:59:15:c1:55:
                    67:97:d8:d2:d5:96:f0:f8:d1:44:2a:34:14:3b:a9:
                    90:20:a9:73:0f:15:29:48:8f:90:43:77:bc:30:d8:
                    9a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3E:34:6B:8F:00:84:1B:3F:A2:A6:70:D6:44:F1:4F:73:25:76:17
            X509v3 Authority Key Identifier:
                keyid:00:39:83:94:BC:11:6D:8D:01:BE:15:C0:8D:06:06:0E:F5:75:5D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3137362e302f32302d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:9b:0b:3b:c5:80:1c:60:30:cc:92:7c:c3:9a:56:10:5e:78:
         b9:37:6d:f8:0c:65:f4:9a:ba:d0:d1:5c:67:4b:e5:bb:12:f5:
         34:e0:1c:1e:a5:9c:6c:d1:e5:80:66:3d:f0:5d:dc:34:3b:f0:
         88:b4:1f:c1:d0:9b:80:eb:57:9a:4b:b8:99:34:59:59:a5:f3:
         46:ef:b1:c4:d8:2b:5e:66:6b:2a:48:e0:8e:17:a2:d3:f6:c4:
         c3:5d:da:f2:9c:88:11:38:c2:d8:c5:3b:b1:57:44:24:cf:6d:
         1e:37:7f:53:4b:76:5f:71:b6:44:b5:e4:f9:1e:5f:66:f2:ff:
         00:d3:0f:06:8a:e2:23:60:37:5f:2a:63:e5:48:7f:df:a9:6c:
         5b:a4:31:6f:d4:15:97:8e:9c:63:11:9f:54:05:61:b1:0c:b7:
         fd:58:2d:76:32:9b:e7:c5:db:08:f0:de:fb:44:22:12:ae:e4:
         53:fc:06:96:a6:55:97:a3:c9:35:20:6a:94:2e:bf:da:67:db:
         13:e9:1a:98:32:97:05:d5:fa:9b:6e:e0:6f:27:5d:28:dc:d5:
         82:8a:f0:ac:7a:42:f7:bc:a3:bc:8b:96:2b:17:16:8b:01:59:
         59:b4:46:83:03:a7:37:7e:0c:7b:6e:57:9d:e6:aa:28:ba:9d:
         68:bf:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:30 2025 by rpki-client