Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/3137372e35342e3136302e302f31392d3332203d3e203532393931.roa
File:                     3137372e35342e3136302e302f31392d3332203d3e203532393931.roa (raw, json)
Hash identifier:          GRHtAw8IRXyDj2utvNYmAUBYsDsFFQzi1ziAHF/4w6I=
Subject key identifier:   5E:39:DE:97:82:00:F9:71:7F:21:84:18:DB:8B:34:27:E9:3D:1E:B8
Certificate issuer:       /CN=1A38A38646592073E79DD636D868C5FD813E2EAB
Certificate serial:       05B3312B771E34D30E24B33EA025D7875AF1C641
Authority key identifier: 1A:38:A3:86:46:59:20:73:E7:9D:D6:36:D8:68:C5:FD:81:3E:2E:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/3137372e35342e3136302e302f31392d3332203d3e203532393931.roa
Signing time:             Mon 12 May 2025 16:18:07 +0000
ROA not before:           Mon 12 May 2025 16:13:07 +0000
ROA not after:            Mon 11 May 2026 16:18:07 +0000
asID:                     52991
IP address blocks:        177.54.160.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.crl
                          rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 21:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b3:31:2b:77:1e:34:d3:0e:24:b3:3e:a0:25:d7:87:5a:f1:c6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A38A38646592073E79DD636D868C5FD813E2EAB
        Validity
            Not Before: May 12 16:13:07 2025 GMT
            Not After : May 11 16:18:07 2026 GMT
        Subject: CN=5E39DE978200F9717F218418DB8B3427E93D1EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5b:8e:d6:46:47:47:93:92:a4:7a:56:88:52:
                    e2:af:87:8d:6d:eb:f6:aa:55:bb:2f:5d:76:b1:88:
                    52:1a:49:bb:f4:da:ab:0a:a6:d2:1a:c8:cd:75:58:
                    16:be:81:0b:a8:5d:78:fa:54:8a:44:00:fe:60:e2:
                    ac:e3:07:42:07:a0:9f:24:d5:72:07:21:f3:9a:25:
                    29:50:24:46:14:11:99:42:0a:c9:83:3a:3a:51:53:
                    98:28:49:5a:bb:b2:e4:44:cd:9d:64:33:4f:91:cb:
                    33:dc:d8:90:a1:13:d8:91:77:ac:da:29:4e:bd:8d:
                    50:c2:73:82:7b:76:1f:b7:ae:98:85:6a:d4:c7:12:
                    0d:e1:3d:30:f8:db:62:30:a9:75:24:21:8f:ca:b6:
                    91:57:ff:e5:32:f3:b6:8a:2a:96:a6:b9:1b:31:53:
                    33:1b:2c:a5:f6:e7:c1:92:bc:b2:dd:dc:b4:fe:1a:
                    7f:45:be:dd:dc:d5:1a:73:e6:ed:fe:58:88:db:38:
                    62:fb:67:70:e6:e8:92:ff:38:50:2e:f4:1f:e0:b9:
                    9f:34:39:72:d4:f1:16:79:0a:af:00:ae:2e:24:35:
                    5f:d5:f5:e7:21:ef:02:82:dd:9c:43:99:de:e2:d5:
                    86:12:f5:49:87:b0:7a:ad:e3:2a:77:0d:7e:a4:15:
                    b8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:39:DE:97:82:00:F9:71:7F:21:84:18:DB:8B:34:27:E9:3D:1E:B8
            X509v3 Authority Key Identifier:
                keyid:1A:38:A3:86:46:59:20:73:E7:9D:D6:36:D8:68:C5:FD:81:3E:2E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/1A38A38646592073E79DD636D868C5FD813E2EAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A38A38646592073E79DD636D868C5FD813E2EAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G4kkojCdvjNFT3wtpqhnjTzGa6MHSxwWz11DjiXhyzy/0/3137372e35342e3136302e302f31392d3332203d3e203532393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:83:cc:65:0b:18:1c:8d:9a:fd:29:f5:59:46:9e:30:74:e2:
         dc:7e:42:93:aa:59:33:ad:4b:a4:58:e5:2d:67:68:17:51:43:
         96:ff:2c:95:9c:82:77:8d:3e:94:dc:15:8a:6e:e0:90:3c:f3:
         a8:49:c6:37:80:d3:ec:72:6f:cd:85:2a:06:77:7f:1e:d0:fb:
         c3:ed:ea:d0:8c:04:5c:6d:3e:5c:48:21:42:e1:0f:f8:36:32:
         0f:8e:04:62:4a:7a:6b:a9:6e:c5:3a:08:2b:57:cb:de:ca:99:
         54:13:20:c4:9b:1b:1a:86:15:0b:3a:9a:a7:66:52:92:d7:8b:
         e6:55:a4:85:ba:e2:ee:b1:05:47:51:fb:3a:cd:f5:13:af:eb:
         fd:c4:72:37:30:b6:4c:1d:64:e1:6c:ef:cf:11:f6:a1:44:5a:
         96:e7:c9:e4:e0:37:ac:37:f7:57:00:0e:3a:72:e4:34:fc:26:
         51:c4:a0:91:ac:ce:14:37:13:6c:28:cf:27:ed:72:77:c6:6b:
         16:d3:df:1a:c2:c5:d4:6f:35:c9:09:fb:e2:53:af:e3:72:88:
         c9:8b:29:b6:56:21:82:12:90:47:c4:78:10:56:4c:63:51:f9:
         a6:b4:1b:80:d1:64:66:f5:b1:95:05:49:ac:3d:37:74:34:33:
         43:9f:8e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:46:42 2025 by rpki-client