Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e3134342e302f32302d3234203d3e203238313436.roa
File:                     3137372e37352e3134342e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          vLP+VgJCFxtuUzPJ9RwXv2FC0bpVBjRd0gpNSnOIFuU=
Subject key identifier:   40:9E:0E:B6:87:AD:DB:4A:B7:44:33:FD:D6:44:75:44:FF:74:37:80
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       046AAC25FC412C71F6AF8E6DB831AB22584075A3
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e3134342e302f32302d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:52:59 +0000
ROA not before:           Mon 12 May 2025 12:47:59 +0000
ROA not after:            Mon 11 May 2026 12:52:59 +0000
asID:                     28146
IP address blocks:        177.75.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 03:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6a:ac:25:fc:41:2c:71:f6:af:8e:6d:b8:31:ab:22:58:40:75:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:47:59 2025 GMT
            Not After : May 11 12:52:59 2026 GMT
        Subject: CN=409E0EB687ADDB4AB74433FDD6447544FF743780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:53:22:6c:b5:b2:37:9a:37:fc:31:05:37:
                    58:67:96:9f:6d:6b:93:20:4c:29:de:cb:82:5a:ba:
                    2a:01:1c:b2:f8:48:e8:17:75:b9:d1:3a:e8:13:3f:
                    f4:ff:cb:51:f6:80:a3:d0:15:94:cd:92:44:fe:3b:
                    a2:e4:f8:41:7f:d3:66:de:6f:a8:d4:42:f0:df:b9:
                    68:d5:32:eb:c7:2a:85:13:40:ae:bb:43:d0:77:10:
                    d5:42:80:a5:11:c8:2c:74:ec:41:3a:2c:48:65:09:
                    5a:0b:64:92:d7:7c:45:35:a8:1a:2f:35:2a:67:aa:
                    0b:54:f3:fc:a9:71:47:95:8f:b7:9a:81:46:59:91:
                    7b:d6:5c:22:fa:07:ef:a9:cd:f2:a6:af:3e:73:bb:
                    85:c3:e2:16:e7:81:f4:34:dc:92:88:bc:6c:d5:86:
                    06:38:b5:d1:ed:40:00:f1:33:c0:dd:f1:ab:c6:4b:
                    ef:c7:c7:5e:68:43:49:bb:14:b8:dd:1b:56:57:b8:
                    4e:2f:16:51:d1:4d:68:6a:aa:56:18:2b:74:19:3a:
                    76:cc:49:ef:d9:d3:b3:57:3f:04:69:f1:f9:c5:a0:
                    74:5a:e8:84:b1:22:88:1e:ff:bf:dc:32:a5:99:e6:
                    22:96:1a:25:ec:34:22:ce:f8:2b:ed:ea:a6:d9:21:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9E:0E:B6:87:AD:DB:4A:B7:44:33:FD:D6:44:75:44:FF:74:37:80
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e3134342e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:57:d9:65:00:d2:0b:bf:a8:9d:e2:d2:ce:fc:da:cb:8a:14:
         1c:42:bc:a1:c0:6a:73:2c:f3:d6:c7:a7:da:4c:cd:52:27:b6:
         d3:3a:41:69:f6:a7:75:6d:a9:db:3f:b8:2a:f7:9c:50:03:a7:
         ae:8d:58:7a:a1:95:55:07:3d:dc:ed:6d:ca:20:f8:70:71:b7:
         f4:ca:ab:c6:08:95:09:00:f2:05:15:ad:21:40:5a:33:59:38:
         77:13:75:39:c2:fd:9c:ba:90:5d:49:8e:7d:13:04:c2:62:23:
         31:54:c1:3f:87:2f:28:8b:ab:c5:a6:4e:e0:07:41:d0:49:33:
         17:d5:16:c5:2b:d1:f7:39:c3:3c:56:3c:4c:81:df:c5:4f:68:
         2a:87:40:ec:df:84:ab:a7:25:f7:d0:eb:61:8f:ac:4d:56:5d:
         e1:e7:dc:43:e7:06:b1:60:fa:4a:7d:76:00:42:e2:5a:e7:59:
         e0:eb:cd:41:c9:5d:e0:4e:4a:31:f8:28:5a:1d:a4:cf:91:68:
         db:7e:4b:67:0b:a3:08:88:bb:a9:f3:5d:c8:71:52:3c:15:43:
         1f:4a:65:06:f1:f7:4e:6b:d7:5f:72:ac:65:8d:a2:14:ee:fc:
         05:a0:69:3d:c0:27:b4:e7:d0:85:5d:ba:5d:cb:83:cf:c6:be:
         b5:33:00:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:39:36 2025 by rpki-client