Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/3137392e34382e31342e302f32332d3233203d3e20323731313630.roa
File:                     3137392e34382e31342e302f32332d3233203d3e20323731313630.roa (raw, json)
Hash identifier:          Ck0jPPfwVnJ7yIjXh5w3w6LjDjZUSDneN0x/3hVn1AI=
Subject key identifier:   34:D8:EA:46:C4:FF:5F:B7:1A:8D:8F:65:6E:7B:E7:32:0B:07:57:E3
Certificate issuer:       /CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
Certificate serial:       15AD83EA2D5F0129C58C52A3205A796AD66977E5
Authority key identifier: D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/3137392e34382e31342e302f32332d3233203d3e20323731313630.roa
Signing time:             Mon 14 Apr 2025 19:04:34 +0000
ROA not before:           Mon 14 Apr 2025 18:59:34 +0000
ROA not after:            Mon 13 Apr 2026 19:04:34 +0000
asID:                     271160
IP address blocks:        179.48.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl
                          rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ad:83:ea:2d:5f:01:29:c5:8c:52:a3:20:5a:79:6a:d6:69:77:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
        Validity
            Not Before: Apr 14 18:59:34 2025 GMT
            Not After : Apr 13 19:04:34 2026 GMT
        Subject: CN=34D8EA46C4FF5FB71A8D8F656E7BE7320B0757E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:0d:d5:2d:9d:95:0c:db:e0:8e:b5:b9:68:
                    9a:09:4b:f0:e6:9b:c6:72:c5:a0:2c:c0:91:1f:f3:
                    8b:be:75:e0:b4:f3:eb:86:04:2d:ab:f0:c5:47:92:
                    52:36:92:9c:7d:19:c1:f2:d8:a4:f5:28:a4:b0:f0:
                    55:34:f8:33:1e:05:cd:e6:db:2d:cb:1e:ec:da:1b:
                    5e:c2:54:4b:28:a9:2c:70:71:03:8c:cd:1c:df:66:
                    83:54:d0:83:a8:d6:a3:ed:5b:8b:c8:f6:7e:08:2f:
                    c0:e8:5e:97:e6:e9:66:ff:9f:35:9d:d9:c5:ec:99:
                    d4:bd:d5:22:fd:4e:5a:50:83:60:e1:39:bf:4d:02:
                    44:32:c7:63:be:e2:62:af:5a:dd:7f:0d:90:b0:a8:
                    62:28:39:cb:99:39:4c:bd:3f:d9:1d:e3:16:e4:a6:
                    a2:1e:b5:02:3f:19:ba:c1:ba:56:16:50:7f:74:21:
                    22:49:df:ab:61:02:26:ec:8f:11:33:80:c5:c5:04:
                    c0:ac:9b:aa:b3:97:de:9e:e5:7e:fd:71:13:c8:93:
                    80:09:56:ad:62:f0:76:cb:1c:3f:51:30:b8:d9:77:
                    ac:12:58:d9:77:5a:ac:38:3e:98:1d:55:0b:02:2b:
                    ed:6a:08:e0:e4:00:ff:c8:ff:8d:42:20:ac:43:72:
                    ba:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D8:EA:46:C4:FF:5F:B7:1A:8D:8F:65:6E:7B:E7:32:0B:07:57:E3
            X509v3 Authority Key Identifier:
                keyid:D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/3137392e34382e31342e302f32332d3233203d3e20323731313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:30:a0:41:ab:77:83:51:79:de:01:b6:2c:f2:6c:2f:29:9a:
         41:cc:17:1f:e0:b2:ad:17:96:e4:f1:d8:16:5d:84:4a:96:26:
         fd:0d:ac:f5:ca:1b:a3:18:94:79:ee:11:96:18:77:33:20:6f:
         0d:a3:22:8f:cb:ae:2d:17:71:ed:7e:21:bb:1d:ad:4b:c2:eb:
         54:e0:0a:08:5e:b2:d7:20:f5:34:1b:0c:63:47:c0:48:63:b1:
         89:25:73:7d:3c:c9:2d:09:c2:e6:e9:55:1d:44:e9:46:52:b4:
         74:39:40:8d:ef:0c:58:68:b7:b8:a8:dd:0e:65:5a:61:40:d1:
         27:1f:a0:cb:b7:6f:67:9f:33:fe:f9:28:95:3b:12:da:81:20:
         07:c7:be:44:41:8e:d4:82:fc:49:21:3b:0f:fc:33:dc:b5:70:
         a7:42:32:c7:c0:08:85:15:fc:70:b6:2a:54:5a:51:58:cb:d6:
         d8:4f:eb:92:ca:b2:e2:cf:eb:f8:ef:0b:f0:59:6a:51:27:5d:
         b6:ef:47:e9:4a:ad:23:29:9b:bf:3f:07:ec:10:81:8e:aa:28:
         2f:37:48:32:78:6e:3c:29:cb:0a:bb:c7:a1:67:7c:b7:47:19:
         7d:01:34:80:fe:af:82:8e:63:7d:4b:ce:1d:f1:e3:6f:0f:22:
         a3:61:9f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:50:31 2025 by rpki-client