Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3134342e302f32302d3234203d3e20323632353035.roa
File:                     3137372e35352e3134342e302f32302d3234203d3e20323632353035.roa (raw, json)
Hash identifier:          fBFx9Pj4RsEwznU8gZNPzGsVsIpe7iiJ+5JVqxbfics=
Subject key identifier:   ED:D3:3D:14:7E:1A:F8:C1:09:FF:DC:66:14:DC:38:81:14:F7:31:E0
Certificate issuer:       /CN=2E32AC81A60DECBD55792A2594C40A5D7742559E
Certificate serial:       447437306C4DE5F581F71D35B4E93D0DECDF2312
Authority key identifier: 2E:32:AC:81:A6:0D:EC:BD:55:79:2A:25:94:C4:0A:5D:77:42:55:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3134342e302f32302d3234203d3e20323632353035.roa
Signing time:             Mon 15 Jul 2024 19:22:00 +0000
ROA not before:           Mon 15 Jul 2024 19:17:00 +0000
ROA not after:            Mon 14 Jul 2025 19:22:00 +0000
asID:                     262505
IP address blocks:        177.55.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.crl
                          rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:74:37:30:6c:4d:e5:f5:81:f7:1d:35:b4:e9:3d:0d:ec:df:23:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E32AC81A60DECBD55792A2594C40A5D7742559E
        Validity
            Not Before: Jul 15 19:17:00 2024 GMT
            Not After : Jul 14 19:22:00 2025 GMT
        Subject: CN=EDD33D147E1AF8C109FFDC6614DC388114F731E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:1d:c8:4c:a2:ca:92:fa:ae:b4:d7:49:77:
                    b2:bd:20:4f:3e:35:4c:2f:e5:86:32:df:bc:3c:7f:
                    f4:f5:cb:68:76:c8:83:f4:25:14:95:93:35:e7:6c:
                    3a:b1:d9:ef:22:90:b7:fa:d0:cf:35:99:0c:07:83:
                    5b:bc:d9:58:83:9c:ed:a4:69:e7:25:4b:42:8c:87:
                    34:1b:2e:e2:d9:bb:d9:25:4a:75:c6:81:f8:e1:69:
                    62:b8:56:06:56:88:92:9c:e7:8b:c1:48:9b:3c:c6:
                    60:81:3f:4b:4b:3d:5e:4e:17:b1:b8:d6:de:67:8b:
                    4e:b6:e9:c8:c7:75:6c:8d:e4:85:a0:43:40:60:90:
                    e5:10:13:60:53:37:b9:e5:93:13:60:0e:b1:8b:0f:
                    77:27:91:d7:56:8b:12:99:7b:17:8b:d8:3c:28:71:
                    d9:ba:bb:6e:37:3c:78:43:cb:cf:fc:73:b5:b1:55:
                    9b:1b:a4:9c:d5:80:95:de:1f:b0:22:26:56:2a:f7:
                    6c:9b:a2:f3:e0:52:3a:15:7b:fb:5e:1b:ba:bc:9b:
                    30:81:ea:b4:61:a4:2b:b9:36:d4:b2:c6:97:d3:8e:
                    2c:46:db:c3:9d:c8:46:ae:b0:b8:4c:bd:38:ea:58:
                    8f:33:aa:99:ef:15:f9:a9:25:53:26:16:bc:c9:71:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D3:3D:14:7E:1A:F8:C1:09:FF:DC:66:14:DC:38:81:14:F7:31:E0
            X509v3 Authority Key Identifier:
                keyid:2E:32:AC:81:A6:0D:EC:BD:55:79:2A:25:94:C4:0A:5D:77:42:55:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/3137372e35352e3134342e302f32302d3234203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:55:eb:2f:67:32:29:b4:1e:66:07:bd:fb:0a:ea:af:73:26:
         52:ba:e4:3d:93:ad:2c:17:61:45:9f:29:89:08:c9:da:1b:f0:
         f5:1b:ec:ec:67:01:e2:14:f0:48:5f:44:6c:fa:53:fb:d5:c7:
         02:22:29:47:85:02:c6:97:c1:7b:a0:88:7b:07:52:ec:56:ee:
         08:98:42:46:44:23:79:18:74:41:21:9e:92:ec:76:c7:52:0f:
         07:a2:f7:9e:97:bc:c9:fc:6d:64:28:e2:83:67:e9:69:18:2e:
         80:46:a6:8e:6d:2e:95:f8:37:da:50:a0:59:3c:23:4e:fb:15:
         f9:e2:d6:76:33:5c:aa:1c:01:e0:93:63:1c:52:e2:78:3e:2a:
         64:71:9b:37:38:86:a2:ad:70:4b:8e:f3:30:13:02:33:36:e2:
         a6:2b:58:f5:e4:da:b8:33:d5:eb:4e:e0:42:58:f5:bc:72:fd:
         65:ca:b2:2d:27:a3:6e:76:d1:87:70:11:b1:a2:41:20:85:05:
         76:95:34:e5:af:22:cf:2f:3d:ff:5a:f8:86:a4:57:4e:1b:f2:
         73:27:51:d9:42:4c:9e:52:81:b7:9a:e7:21:8a:58:1a:8f:51:
         27:d0:83:56:8e:4c:80:ca:68:72:3c:bd:42:00:0f:87:77:cc:
         2c:08:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:52 2025 by rpki-client