Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37332e3138382e302f32322d3234203d3e203238313436.roa
File:                     3137372e37332e3138382e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          uOaxJH1p2hPOW1oTtKGHZZ8kvW8n7gR3pF9wU+9olqA=
Subject key identifier:   0D:17:0C:13:15:D4:B6:50:34:49:D0:F6:A5:69:F9:77:DF:E5:3B:C5
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       7DB260B64FBFEA0DD5EF3E45FE56299CD3782A42
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37332e3138382e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:57:21 +0000
ROA not before:           Mon 12 May 2025 12:52:21 +0000
ROA not after:            Mon 11 May 2026 12:57:21 +0000
asID:                     28146
IP address blocks:        177.73.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 03:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b2:60:b6:4f:bf:ea:0d:d5:ef:3e:45:fe:56:29:9c:d3:78:2a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:52:21 2025 GMT
            Not After : May 11 12:57:21 2026 GMT
        Subject: CN=0D170C1315D4B6503449D0F6A569F977DFE53BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:23:69:d7:03:f4:cb:49:b7:bd:90:76:b9:9d:
                    20:9a:33:8a:18:ed:7e:77:7c:81:06:cf:36:dd:57:
                    c6:8a:41:99:b7:e2:ed:1a:bc:6f:c8:97:09:0c:71:
                    5c:1a:4c:7a:3b:e9:52:91:dd:b4:6c:ca:d0:df:92:
                    78:75:de:b4:ef:6a:1e:d7:29:99:92:9c:10:ef:dc:
                    9f:9b:1d:18:9c:65:6f:f3:98:c0:17:7c:00:c2:18:
                    10:fd:3a:01:73:48:5b:ad:8b:01:da:9d:ce:2f:9a:
                    79:10:41:2b:b7:e2:2a:ca:3f:a7:c3:2b:99:08:d1:
                    88:66:f1:73:e4:65:37:99:4e:7e:cd:d5:22:47:23:
                    e2:b5:cd:e5:3b:d7:53:ab:84:f3:a8:92:9f:8c:8f:
                    1c:d9:9e:8a:b9:85:6b:3c:29:61:06:07:85:fa:43:
                    a6:86:d5:1a:31:e7:24:0b:4c:6a:14:11:f4:1e:ac:
                    7f:46:6c:a8:02:ba:1a:72:04:f3:df:da:be:13:2b:
                    d1:9d:f1:9d:1c:f8:48:06:0e:d6:b4:b9:b5:a2:99:
                    c9:40:f3:87:8c:31:5d:ba:cf:bc:e0:1f:7e:16:a2:
                    08:49:f2:eb:fb:88:d9:67:67:a8:9e:d1:a8:72:24:
                    0d:74:40:12:ab:5a:35:db:8a:d0:a8:02:f2:f6:17:
                    05:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:17:0C:13:15:D4:B6:50:34:49:D0:F6:A5:69:F9:77:DF:E5:3B:C5
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37332e3138382e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:cf:ba:f3:b0:31:8e:39:04:2c:c3:35:0a:aa:e9:8b:f8:fc:
         16:c5:28:1e:2a:9f:82:75:dd:f2:5d:88:04:5d:9d:40:94:a7:
         19:c7:95:0e:28:0e:50:ba:84:fd:7b:2e:b4:6f:dc:d0:87:fb:
         5e:b0:d4:af:78:12:fc:34:de:92:65:cc:32:83:6f:6f:bf:23:
         88:45:b7:6c:5b:cf:98:ac:cb:f2:96:77:bb:d1:ed:f0:52:d7:
         df:b3:36:7d:fe:ed:ce:04:2b:b2:6d:1a:48:74:ab:fd:20:8a:
         3e:42:c9:84:d9:1b:7a:ff:62:cc:44:0e:d4:47:10:33:63:4f:
         6b:56:7e:e6:9a:d5:bf:f1:61:b6:53:62:0e:43:a8:b3:68:3c:
         20:1e:9a:2d:1a:29:f0:04:62:0b:8e:6e:28:ee:f0:3a:08:d7:
         84:b2:4d:43:ad:43:5a:44:62:cc:44:1b:af:1b:88:14:bf:09:
         c4:70:42:a9:27:62:3d:07:de:63:aa:96:f2:00:67:2e:77:63:
         9a:1e:93:75:80:68:2c:2e:b9:77:b7:b7:b5:74:95:41:6e:0c:
         e4:e8:fb:9a:8e:e7:0a:76:01:60:0e:d1:35:63:1c:9e:bf:fd:
         f9:0a:a3:aa:79:e9:73:b6:85:d1:9f:68:81:ff:1c:91:3e:5e:
         49:ec:08:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:23:50 2025 by rpki-client