Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e3132382e302f32302d3234203d3e203238313436.roa
File:                     3137372e37352e3132382e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          2QQCWUyqZdo0qUOObL5FM4K7dAJaYhXJgK5x0+Z4hBw=
Subject key identifier:   F3:C7:07:4E:D3:92:9F:08:DA:59:6D:05:BF:F0:97:14:08:22:F3:AE
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       55CA09B1E529F9242537EB2B8C98B11C3A659586
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e3132382e302f32302d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 13:02:48 +0000
ROA not before:           Mon 12 May 2025 12:57:48 +0000
ROA not after:            Mon 11 May 2026 13:02:48 +0000
asID:                     28146
IP address blocks:        177.75.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ca:09:b1:e5:29:f9:24:25:37:eb:2b:8c:98:b1:1c:3a:65:95:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:57:48 2025 GMT
            Not After : May 11 13:02:48 2026 GMT
        Subject: CN=F3C7074ED3929F08DA596D05BFF097140822F3AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:f6:e1:51:fb:9d:19:20:03:d1:dd:81:e6:
                    2e:de:3b:e6:07:9a:d5:60:3b:57:38:8d:df:01:4f:
                    52:b1:41:f4:9a:e7:1f:36:64:ba:f3:d0:93:13:fc:
                    26:42:f9:e6:fc:cc:b8:36:01:57:e5:43:74:da:f1:
                    db:e8:8c:02:67:48:28:f8:37:d0:42:c1:e1:2e:3e:
                    1a:d0:1a:aa:e6:21:92:3a:ef:62:ad:e7:35:7a:ed:
                    43:fe:db:1a:7d:21:3d:4b:3c:01:db:32:52:6f:84:
                    12:ca:a3:f5:2b:75:c1:54:b7:89:b8:19:56:df:4b:
                    c3:e0:e5:9e:df:4c:96:5a:02:15:f5:74:6e:7d:c8:
                    2d:ed:79:fb:92:72:b1:75:67:77:d1:0c:c6:23:bb:
                    d2:0b:a6:8b:2a:03:a6:db:e2:ca:02:1e:64:e3:ea:
                    64:72:fc:87:06:85:9e:27:a6:03:a8:e0:de:51:9a:
                    1c:07:6a:ab:bb:3d:3a:da:a8:7c:34:a8:d4:53:4e:
                    b3:0e:b7:f5:50:3c:89:42:68:4c:04:49:53:a2:2b:
                    c3:57:26:7b:f2:bb:1d:9e:fc:90:82:c0:18:1e:e9:
                    30:bc:4c:ba:30:6a:05:73:81:01:76:d4:7a:d2:85:
                    02:fb:a2:fa:57:94:c9:b2:7c:f1:9e:7c:ea:2a:5f:
                    e4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C7:07:4E:D3:92:9F:08:DA:59:6D:05:BF:F0:97:14:08:22:F3:AE
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e3132382e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:6b:32:5f:e0:bd:55:03:e1:e5:c5:86:4c:d2:44:4b:55:9c:
         8a:8a:58:b1:67:a5:72:c8:46:8b:8b:69:7b:48:8d:f0:9d:15:
         66:ff:d8:b8:0f:b4:68:a1:d1:51:4d:c0:1c:94:d9:29:63:af:
         c0:46:31:4b:02:10:a2:b3:e2:90:e9:61:99:2d:4c:2e:1e:2b:
         cb:bd:dc:6d:30:02:b0:8d:57:90:5e:25:b0:be:d4:c9:c6:ed:
         04:d7:9a:4a:82:33:90:10:83:dc:fc:37:2c:9b:4b:3c:b1:91:
         05:66:d2:f0:3c:fe:5e:02:8e:36:43:26:69:48:59:70:8d:ea:
         0b:21:34:61:9e:26:81:53:d3:06:48:ed:af:c1:ca:a6:35:33:
         72:1a:b1:b3:04:18:8f:94:bd:8e:84:2e:d3:d8:ab:86:41:bc:
         fe:99:af:ef:c4:b4:84:c8:c4:fd:ed:65:e0:13:3f:9c:7b:e0:
         5b:d3:b6:f0:86:2d:ac:ca:c0:8b:f1:ac:c0:8a:6f:d6:fd:37:
         53:79:61:be:74:c4:e1:16:b3:27:79:e2:db:85:18:e9:18:c4:
         4f:3c:0a:0c:f6:16:0b:fd:68:4b:15:2b:f0:62:95:33:f2:a8:
         c1:0c:30:76:40:12:ae:1b:f5:82:d2:b2:4d:94:79:f5:10:a8:
         9a:2a:1e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:19:49 2025 by rpki-client