Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e39362e302f32302d3234203d3e203238313436.roa
File:                     3137372e37352e39362e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          lYRs0HpIqAnClM4HBhSG0YkduhXbrzXzJ5tgnj9LKVg=
Subject key identifier:   02:BC:E8:7A:71:28:18:FA:5C:AB:FD:A0:C1:DA:27:02:4C:C0:EE:89
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       4F91E05E5DFB864C1835AA3AB6C43DCE57271BE6
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e39362e302f32302d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:59:14 +0000
ROA not before:           Mon 12 May 2025 12:54:14 +0000
ROA not after:            Mon 11 May 2026 12:59:14 +0000
asID:                     28146
IP address blocks:        177.75.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:91:e0:5e:5d:fb:86:4c:18:35:aa:3a:b6:c4:3d:ce:57:27:1b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:54:14 2025 GMT
            Not After : May 11 12:59:14 2026 GMT
        Subject: CN=02BCE87A712818FA5CABFDA0C1DA27024CC0EE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f0:be:5f:a1:f0:da:50:8e:6b:dc:5e:a3:1e:
                    a3:d4:62:62:2a:13:44:23:cf:d7:db:98:db:57:62:
                    e6:b1:e9:f8:b3:cc:eb:77:b7:fd:79:ea:98:db:fd:
                    45:7c:e2:65:36:48:25:0a:3a:ab:bf:12:2b:77:f1:
                    f1:39:7d:3b:d9:61:ad:c8:88:cb:97:1f:6f:4f:bb:
                    e0:85:9c:c3:ef:7b:94:09:e7:97:c5:64:17:93:c7:
                    8b:9c:d6:57:4b:b2:d4:39:cf:58:aa:eb:ad:5f:2d:
                    10:a0:ba:e2:a7:55:fe:3b:59:7e:28:5a:70:be:7a:
                    2a:bf:1e:d9:df:7d:dc:b1:85:0e:62:18:8e:de:d4:
                    dd:46:bd:ee:61:53:95:9e:69:92:36:f1:47:5b:21:
                    22:c8:82:ab:d3:be:f0:87:2c:92:7d:c0:02:14:94:
                    c9:5a:40:29:9b:3f:a4:44:7e:c5:78:48:af:ca:ec:
                    77:6a:34:fb:94:69:23:2e:38:21:73:5f:b8:a7:57:
                    90:68:da:22:bb:ac:84:cd:74:46:4f:b0:a3:0a:23:
                    32:8b:2c:59:c9:0b:1c:81:e6:65:50:65:84:1c:b5:
                    5d:d7:94:c7:7b:bc:1f:a0:ac:c7:1d:5b:65:6d:45:
                    d7:4d:f7:6e:5c:99:d2:26:39:69:eb:bf:13:1c:f2:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BC:E8:7A:71:28:18:FA:5C:AB:FD:A0:C1:DA:27:02:4C:C0:EE:89
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e37352e39362e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bb:cd:76:e1:cd:be:32:30:0c:00:b4:5a:ba:78:b6:72:d2:73:
         53:4c:c8:67:2e:da:4a:7a:eb:b0:66:96:67:15:10:d9:12:d5:
         5f:71:81:74:8f:82:e3:3f:81:54:6d:79:45:84:b7:14:cf:04:
         50:a6:6f:84:11:d8:02:23:6f:74:39:ce:09:5e:be:3d:48:7e:
         ce:50:98:82:f6:49:2c:4b:bf:5e:7c:5a:68:13:35:85:3f:0b:
         63:e3:5f:c1:ff:4a:47:4d:0b:6f:3a:eb:fc:51:cb:f4:69:f7:
         19:c4:04:df:68:12:1e:c8:98:41:8a:a1:5e:98:c5:f6:8e:00:
         89:57:25:bc:b1:bf:92:91:2c:96:c3:ce:85:ea:01:45:b1:8e:
         a9:9b:ab:e1:ae:03:b5:65:7a:1b:2d:a0:01:1e:5a:7a:58:7f:
         b3:ac:12:d0:66:f0:77:35:e1:60:7b:f7:30:95:f2:60:38:c6:
         25:10:81:dc:c6:57:03:47:8c:59:11:b1:96:ba:18:22:00:c9:
         ad:08:3d:59:14:c6:68:41:7d:45:6b:45:1b:58:73:b1:8f:47:
         4f:98:fb:c5:a2:15:5d:3f:03:be:55:7e:26:79:f8:6a:59:44:
         1f:95:29:70:94:6c:8a:2a:1f:7c:27:4b:c6:cc:12:b6:15:b0:
         89:f7:b9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:30:13 2025 by rpki-client