Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e3135342e39362e302f32302d3234203d3e20323632363838.roa
File:                     3137372e3135342e39362e302f32302d3234203d3e20323632363838.roa (raw, json)
Hash identifier:          BLtlqvwQs63OQH/T4dVeU1kbNzLhkh54vTqtxQFieoE=
Subject key identifier:   01:A3:71:C2:5B:2E:B4:1B:6B:B9:25:7C:43:12:74:15:FA:A8:09:FB
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       18CFEF3A0E7471EBADB5AE81AB7AB57378832F18
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e3135342e39362e302f32302d3234203d3e20323632363838.roa
Signing time:             Mon 12 May 2025 13:01:53 +0000
ROA not before:           Mon 12 May 2025 12:56:53 +0000
ROA not after:            Mon 11 May 2026 13:01:53 +0000
asID:                     262688
IP address blocks:        177.154.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 07:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cf:ef:3a:0e:74:71:eb:ad:b5:ae:81:ab:7a:b5:73:78:83:2f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:56:53 2025 GMT
            Not After : May 11 13:01:53 2026 GMT
        Subject: CN=01A371C25B2EB41B6BB9257C43127415FAA809FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:53:80:b3:18:ed:5a:81:ab:b5:f6:84:e3:
                    97:42:eb:cc:e5:40:75:fa:3f:11:5d:fd:12:cd:0f:
                    01:68:58:29:bb:4a:b6:d2:96:d0:f7:5e:56:37:b8:
                    d1:3b:d3:65:a2:ba:39:15:78:92:12:c5:f1:e1:24:
                    a3:b8:d5:62:e4:1f:f5:1e:64:61:9f:d1:54:6b:28:
                    35:a6:b1:7a:aa:4e:9f:8a:dd:5e:d7:39:cf:60:5b:
                    62:4d:a0:c0:58:2a:b7:83:0c:40:cc:f4:c2:b1:6f:
                    81:d0:e9:ed:8c:5f:f6:26:cc:38:c1:6c:7d:95:e3:
                    03:63:6d:64:64:1a:09:5c:f1:7b:d7:bf:4c:38:73:
                    08:6a:4c:9b:45:f7:08:33:e9:b0:ea:c2:76:58:25:
                    a0:ce:f1:80:e4:2a:34:e5:b2:ce:c3:34:25:42:51:
                    a9:be:3d:0e:d1:ad:bb:85:e5:2d:27:e5:0e:cf:bb:
                    2f:57:99:0e:90:8f:38:5a:b9:01:72:38:a2:e0:35:
                    3e:5b:d1:d6:63:d4:f1:bc:04:a8:f7:5b:43:bc:20:
                    10:72:cd:79:79:0d:a4:da:04:52:34:7d:f9:2f:ab:
                    4d:5d:38:07:4d:ac:0c:dd:ff:57:b0:7a:36:ef:e4:
                    37:47:8b:6f:0a:6c:06:82:74:41:94:43:cf:5f:b7:
                    7e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A3:71:C2:5B:2E:B4:1B:6B:B9:25:7C:43:12:74:15:FA:A8:09:FB
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e3135342e39362e302f32302d3234203d3e20323632363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:1b:b7:67:3a:23:90:a7:48:43:f6:9f:53:4e:b4:a0:d4:fb:
         87:d6:d4:ce:aa:f4:34:a0:fd:71:3b:cb:93:2c:77:d2:41:6b:
         5c:2b:a9:5c:7e:96:17:dc:44:33:0b:e5:9d:c9:35:08:da:79:
         6c:7f:01:05:70:9c:be:74:0f:2b:f7:31:f9:d6:8d:89:e7:9c:
         27:21:bd:0a:5e:84:8c:b3:86:78:c0:71:4f:86:5e:fe:60:28:
         a9:ed:75:85:4b:96:2e:f6:c3:0b:b2:d3:76:f3:4d:a5:d1:92:
         87:b5:f3:3d:6b:ac:95:a5:2b:d2:85:83:48:a8:c7:09:c7:83:
         c6:db:a3:b8:e8:ee:f1:e2:ed:7c:47:76:5f:57:67:dd:93:c6:
         a9:f0:db:97:09:88:7f:07:2d:39:43:cc:88:07:6d:fb:99:15:
         30:f7:d1:cb:e5:fb:d1:d6:e6:d2:67:35:d1:26:33:2b:85:0e:
         ac:c1:c0:30:d6:d2:f1:1d:6a:2a:50:32:41:47:aa:3c:f8:53:
         e7:15:a2:6a:55:21:4c:23:f7:4b:00:63:26:78:22:4f:e3:6a:
         ed:b4:fd:99:36:d1:88:01:f4:62:a1:22:df:77:b1:a7:6f:db:
         56:9c:45:79:5d:fe:14:5b:7c:16:ea:7e:d9:89:70:55:11:99:
         90:bc:be:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:54:45 2025 by rpki-client