Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/3137392e34382e3233322e302f32322d3332203d3e20323731303538.roa
File:                     3137392e34382e3233322e302f32322d3332203d3e20323731303538.roa (raw, json)
Hash identifier:          OcKdtpj4R6w15X5ykKOcL6iJXQmZquMzmKVQFyPkTgg=
Subject key identifier:   D4:31:73:8B:7B:F6:55:6D:38:D0:51:BF:C3:D3:6F:27:EB:C7:A3:F3
Certificate issuer:       /CN=4F55BB313EF4D2A761B4A59758746FD16EEB2639
Certificate serial:       1897EEFFD2E801AE3FFE47E7566D52339524A43A
Authority key identifier: 4F:55:BB:31:3E:F4:D2:A7:61:B4:A5:97:58:74:6F:D1:6E:EB:26:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F55BB313EF4D2A761B4A59758746FD16EEB2639.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/3137392e34382e3233322e302f32322d3332203d3e20323731303538.roa
Signing time:             Wed 12 Feb 2025 14:23:55 +0000
ROA not before:           Wed 12 Feb 2025 14:18:55 +0000
ROA not after:            Wed 11 Feb 2026 14:23:55 +0000
asID:                     271058
IP address blocks:        179.48.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/4F55BB313EF4D2A761B4A59758746FD16EEB2639.crl
                          rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/4F55BB313EF4D2A761B4A59758746FD16EEB2639.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F55BB313EF4D2A761B4A59758746FD16EEB2639.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 08:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:97:ee:ff:d2:e8:01:ae:3f:fe:47:e7:56:6d:52:33:95:24:a4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F55BB313EF4D2A761B4A59758746FD16EEB2639
        Validity
            Not Before: Feb 12 14:18:55 2025 GMT
            Not After : Feb 11 14:23:55 2026 GMT
        Subject: CN=D431738B7BF6556D38D051BFC3D36F27EBC7A3F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0e:ec:c7:90:7c:f0:59:c7:de:a4:09:aa:92:
                    2f:d3:c1:5e:16:c0:6b:14:e3:02:21:c1:48:e3:d1:
                    f2:7d:c6:4c:4d:9a:e7:f0:7c:cb:1d:e8:35:74:ac:
                    dd:f2:dd:72:a0:e8:f5:6d:18:f9:1a:a7:93:09:21:
                    5e:25:8f:3e:39:6c:95:d5:27:d6:d2:e7:e2:6a:1e:
                    0f:fd:03:a2:d1:86:90:20:a0:a7:ab:63:20:79:69:
                    09:15:17:ce:58:02:39:9d:d1:7d:a3:2a:ee:1f:57:
                    e3:36:4e:d6:a3:7a:ad:a5:6d:f7:04:47:f0:d6:e8:
                    0c:f6:4a:13:77:7b:3e:4a:45:d3:c4:6d:1f:e6:a0:
                    37:d5:ed:44:c5:cb:a3:e6:45:ea:19:dc:e6:f9:40:
                    20:bc:44:47:7d:6a:66:5e:36:8c:2b:d3:a3:96:e2:
                    05:08:d7:11:e4:b5:1c:b6:a3:b5:ad:38:d1:8d:d4:
                    e0:8b:a3:7f:86:ee:17:3b:3a:3f:77:c3:44:af:72:
                    e0:69:fc:27:e9:ff:18:ee:5e:74:70:2c:6e:50:d4:
                    a1:65:a2:53:a4:a6:f8:74:e5:b2:65:df:23:92:80:
                    38:39:5d:0d:95:17:84:43:d0:3f:36:8a:8d:1e:1e:
                    37:39:4d:82:93:8e:7b:e5:ab:67:d6:48:97:1f:50:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:31:73:8B:7B:F6:55:6D:38:D0:51:BF:C3:D3:6F:27:EB:C7:A3:F3
            X509v3 Authority Key Identifier:
                keyid:4F:55:BB:31:3E:F4:D2:A7:61:B4:A5:97:58:74:6F:D1:6E:EB:26:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/4F55BB313EF4D2A761B4A59758746FD16EEB2639.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F55BB313EF4D2A761B4A59758746FD16EEB2639.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/3137392e34382e3233322e302f32322d3332203d3e20323731303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:42:81:5e:6c:7a:7d:94:d2:3a:35:4f:e8:d4:e4:32:d7:13:
         01:11:36:a5:b1:2e:f6:dc:1a:35:11:b1:28:01:4a:22:3a:81:
         75:7a:1c:1a:00:b1:fd:ea:a1:0d:02:2f:5a:41:ce:80:d1:25:
         f0:a5:8b:55:9d:c7:80:50:45:c4:26:77:94:ed:29:63:41:93:
         a3:f7:28:95:bd:4b:f6:b0:bb:68:c4:65:7d:1c:0e:0c:c5:00:
         87:f4:3d:55:a1:71:8c:8a:d6:d0:a1:b2:8a:21:a5:41:b3:b4:
         11:ea:df:41:c0:6f:28:be:0e:0a:85:97:90:d0:57:57:d0:85:
         8a:09:77:e6:a8:46:7f:ff:88:cb:f4:03:25:b5:b4:8a:9b:cf:
         8b:98:41:58:9a:30:48:ff:7c:f9:9f:80:56:e0:8f:7f:19:92:
         15:c6:d8:88:e6:b5:b8:5e:89:ea:fc:10:6b:43:95:d8:c4:54:
         dc:c7:18:d4:ea:db:eb:c2:10:48:52:69:63:df:4f:02:68:10:
         5d:e9:ea:b2:7e:01:fe:e4:c5:40:ad:bb:5b:0f:0e:d3:1c:79:
         e1:10:5d:c0:1a:d0:31:9c:83:8d:89:28:8c:fc:4f:75:31:43:
         f2:34:74:8a:c2:a0:d4:bc:39:db:94:7e:dc:e1:47:35:77:ae:
         55:24:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:17:16 2025 by rpki-client