Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa
File:                     3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa (raw, json)
Hash identifier:          p9856q7w7GJN6flH1gL4ZOGuJX2vtNFTqkg5+jMeg9s=
Subject key identifier:   A7:FB:85:1E:9A:26:8B:98:ED:C0:88:DA:09:41:2C:E8:D4:80:FB:68
Certificate issuer:       /CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
Certificate serial:       3644AD90B2955A80F3FDC5A03D79B728F2468759
Authority key identifier: DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa
Signing time:             Thu 06 Mar 2025 09:10:22 +0000
ROA not before:           Thu 06 Mar 2025 09:05:22 +0000
ROA not after:            Thu 05 Mar 2026 09:10:22 +0000
asID:                     262374
IP address blocks:        177.128.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.crl
                          rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 22:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:44:ad:90:b2:95:5a:80:f3:fd:c5:a0:3d:79:b7:28:f2:46:87:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
        Validity
            Not Before: Mar  6 09:05:22 2025 GMT
            Not After : Mar  5 09:10:22 2026 GMT
        Subject: CN=A7FB851E9A268B98EDC088DA09412CE8D480FB68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:07:bb:9d:e2:a3:58:60:07:c5:d9:03:f6:fe:
                    22:77:7d:f4:55:ed:07:b8:00:63:42:59:f9:2a:bd:
                    b9:e8:92:70:6e:4f:a8:bd:a5:25:36:85:32:d3:c4:
                    78:50:1b:09:e3:d7:0e:6a:b3:a6:fd:76:53:5c:8b:
                    4e:1b:51:25:c7:47:81:4c:6b:31:7d:17:7a:e7:b0:
                    b7:8b:6c:80:7c:89:f9:91:02:fa:b6:28:67:93:13:
                    1b:d4:7a:24:47:a6:96:d8:0b:5b:cd:7d:7e:89:1d:
                    6e:eb:9e:44:3d:3e:d3:dd:d2:36:43:6e:70:df:a6:
                    c5:86:85:86:70:1f:f6:f7:ac:66:d0:8c:a6:30:7b:
                    1c:7d:46:06:96:af:b0:f5:8b:f4:0c:ed:a2:3c:f2:
                    d3:9a:a0:a2:c9:40:d1:27:70:e9:6a:11:fc:dd:99:
                    5e:03:b3:dd:b7:e8:ae:29:6c:4d:fb:94:ef:7e:4a:
                    0d:e3:0f:54:78:d1:4d:6b:26:2d:61:b3:ab:42:9a:
                    e5:25:fb:3e:71:db:cd:18:3f:ad:af:2a:25:76:da:
                    41:07:25:cf:b3:50:98:10:03:e7:e0:de:15:8c:fa:
                    61:1f:8c:e4:23:e6:4a:12:0c:62:60:73:f6:e6:f7:
                    aa:28:3e:11:ea:a4:b2:97:6b:f1:ac:28:f7:16:bf:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FB:85:1E:9A:26:8B:98:ED:C0:88:DA:09:41:2C:E8:D4:80:FB:68
            X509v3 Authority Key Identifier:
                keyid:DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:10:c2:41:17:43:5e:13:42:34:0c:4b:3b:05:2d:08:ba:0c:
         80:7a:e4:28:90:10:1b:d6:f5:86:5b:46:50:db:b8:e5:d2:93:
         9f:ad:a8:67:f0:ee:19:85:93:52:68:b2:f9:03:18:1f:6c:2f:
         74:e4:2d:36:60:b0:8f:63:4a:da:72:a1:be:ae:45:34:e3:76:
         c9:c7:c1:f4:9b:4f:22:5b:78:62:58:f2:92:00:72:c3:52:62:
         48:7b:f5:21:a6:28:89:ef:ce:29:2b:8e:9e:69:61:02:a1:05:
         07:5e:b7:68:fe:aa:87:c6:a7:96:e7:45:37:cb:04:62:52:ab:
         60:fd:08:e6:8f:6a:2a:ce:86:e1:f3:d4:44:2d:a5:39:77:1e:
         97:c4:60:9e:d1:6f:df:86:fa:b8:76:6a:c8:62:03:5d:15:33:
         e6:4e:15:9a:dd:58:53:6f:75:4d:25:66:86:9d:12:96:17:ee:
         b2:94:32:b1:a9:49:bf:ab:89:dd:43:ce:bf:cc:b4:cb:3b:1c:
         31:4d:88:05:98:fa:3d:9f:80:2b:4c:bb:d0:9d:29:df:6c:9b:
         29:a6:0e:0e:3b:b6:91:5b:4e:ea:f8:8c:c1:f3:bc:0a:92:da:
         03:11:83:c1:24:55:85:74:72:9c:b7:64:c1:42:d1:12:f4:c9:
         51:d4:72:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:58:46 2025 by rpki-client