Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35352e302f32342d3234203d3e20323632353033.roa
File:                     3137372e39312e35352e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          TtLln4fgEje910Jx98YpPHe+ANjJkf68Xj48wpLtR/Q=
Subject key identifier:   2B:74:F4:D6:3A:04:B6:8C:E9:70:24:18:DC:41:C7:EB:1F:EC:F8:09
Certificate issuer:       /CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
Certificate serial:       54D67F4F8A239D1616F4D1D4903EF681896446DD
Authority key identifier: 91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35352e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 01 Apr 2025 15:16:02 +0000
ROA not before:           Tue 01 Apr 2025 15:11:02 +0000
ROA not after:            Tue 31 Mar 2026 15:16:02 +0000
asID:                     262503
IP address blocks:        177.91.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 10:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d6:7f:4f:8a:23:9d:16:16:f4:d1:d4:90:3e:f6:81:89:64:46:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
        Validity
            Not Before: Apr  1 15:11:02 2025 GMT
            Not After : Mar 31 15:16:02 2026 GMT
        Subject: CN=2B74F4D63A04B68CE9702418DC41C7EB1FECF809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:92:64:b4:b1:8e:0b:72:46:5f:15:11:19:
                    3f:53:2b:b5:7e:20:f5:91:68:3c:63:c9:c4:72:b8:
                    a4:54:58:be:bb:6b:72:30:63:2b:06:8c:d2:56:c6:
                    40:1c:4b:7c:a4:b8:33:b4:3b:19:3a:f6:68:64:77:
                    1e:74:43:09:fd:8a:d8:e8:63:89:26:81:2c:3b:e2:
                    25:55:3d:26:7f:bf:21:8a:47:e1:92:ba:a1:02:f1:
                    ae:a5:19:41:0c:37:88:e7:bb:7b:ac:d3:f3:58:30:
                    0b:7a:5f:e2:32:b0:98:59:cb:e5:05:1d:b1:a2:df:
                    51:b9:ec:35:fe:7a:a0:11:e4:08:67:c6:0d:cf:cf:
                    1d:0e:69:01:22:b7:fc:b5:a9:4b:6e:d0:b9:ec:87:
                    ae:e9:68:62:95:9f:fe:ab:c2:5b:2e:59:5c:da:e1:
                    26:77:50:51:d3:63:09:d3:76:c1:d8:11:60:97:97:
                    ae:68:c0:9e:9f:e4:33:38:55:68:b9:52:41:aa:80:
                    95:bb:2d:42:0e:0a:4b:48:83:df:b8:8e:0e:0f:92:
                    6a:34:09:41:fb:b1:fa:65:db:8b:45:b4:25:7d:8e:
                    88:66:e8:6d:e8:46:36:62:4c:7b:6c:99:7d:31:16:
                    1a:88:a2:59:61:04:74:7c:a5:43:50:49:e3:70:00:
                    0d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:74:F4:D6:3A:04:B6:8C:E9:70:24:18:DC:41:C7:EB:1F:EC:F8:09
            X509v3 Authority Key Identifier:
                keyid:91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35352e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:af:ea:32:eb:ae:d4:b9:61:36:4a:fa:c1:94:53:44:8e:2f:
         23:d5:65:6d:4d:6f:05:eb:df:e7:e0:f7:29:7d:56:6f:a2:f9:
         83:4b:a5:cb:d9:67:2b:7d:d4:27:35:2f:75:17:40:05:bb:74:
         36:b6:0a:ff:71:b3:40:67:35:1c:e7:46:14:f1:c2:79:02:06:
         55:6d:10:60:c7:28:b3:25:3c:ae:61:02:26:33:42:c1:cc:2b:
         3b:62:d0:9a:30:d2:3e:71:c7:65:20:31:59:fb:f5:6a:6f:11:
         30:6a:82:83:97:92:82:93:67:5c:62:3e:ed:b4:0b:83:9e:2f:
         80:39:05:bd:ea:ed:74:c5:b8:61:0a:3d:df:20:5c:ed:03:62:
         a5:1e:24:4d:4b:ae:72:47:9d:80:43:d8:04:77:9b:88:d9:85:
         67:d4:b6:44:7a:fc:c6:6a:d9:68:91:c7:99:c9:9e:b4:bb:7b:
         53:cc:38:74:dd:c0:0b:10:ce:b9:be:78:69:9b:8f:62:df:1a:
         6d:6e:42:75:17:20:35:d3:55:4d:b0:d6:ef:a9:b1:19:0b:97:
         5e:c6:1b:a9:15:36:e0:8d:ab:dc:c7:77:f1:0a:93:ac:bf:09:
         63:a8:09:cf:95:ef:da:44:77:52:31:7e:22:bc:24:d4:ba:cb:
         9d:e4:bc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:55:32 2025 by rpki-client