Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/3138392e37362e38302e302f32302d3332203d3e203532393037.roa
File:                     3138392e37362e38302e302f32302d3332203d3e203532393037.roa (raw, json)
Hash identifier:          6c6mDcPYXB4oPvgXQB4l1szMktTN+aR0Iigx33qgj6w=
Subject key identifier:   71:6F:06:15:BD:46:16:E4:30:9D:9B:D6:2A:90:8B:73:4C:8D:33:8C
Certificate issuer:       /CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
Certificate serial:       4623FB9FF4468F546D69A1614AA28D1D8D19E5F5
Authority key identifier: 85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/3138392e37362e38302e302f32302d3332203d3e203532393037.roa
Signing time:             Thu 06 Mar 2025 03:59:16 +0000
ROA not before:           Thu 06 Mar 2025 03:54:16 +0000
ROA not after:            Thu 05 Mar 2026 03:59:16 +0000
asID:                     52907
IP address blocks:        189.76.80.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl
                          rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:23:fb:9f:f4:46:8f:54:6d:69:a1:61:4a:a2:8d:1d:8d:19:e5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
        Validity
            Not Before: Mar  6 03:54:16 2025 GMT
            Not After : Mar  5 03:59:16 2026 GMT
        Subject: CN=716F0615BD4616E4309D9BD62A908B734C8D338C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:c1:cd:d2:6e:c8:29:9f:d8:74:71:78:8f:
                    b4:db:e6:87:23:1a:6d:8b:d6:f7:d6:1b:e7:3d:27:
                    0b:50:94:3d:f7:68:66:f2:40:c2:70:be:c3:15:ca:
                    f2:68:eb:44:ee:4a:48:f3:a9:ce:11:88:47:ed:19:
                    27:cc:24:c9:81:9e:e3:85:5f:9c:0b:e8:48:0d:9b:
                    89:16:61:40:7a:a4:be:d1:a2:6e:f7:be:a8:74:cf:
                    c8:a2:c0:08:cb:dc:d9:7b:a7:be:8b:75:a4:3c:55:
                    4e:db:6d:28:aa:8f:d2:49:1a:d5:ac:5c:91:50:a9:
                    1a:cb:36:96:cd:fd:95:40:26:46:cf:1c:a4:a5:76:
                    10:ba:31:53:fc:5d:4d:d5:b6:7b:48:3e:75:dd:23:
                    c1:7c:33:c3:d7:16:e8:16:07:2d:5d:2f:d2:b8:9b:
                    d6:b5:34:a0:b1:68:60:71:9f:64:56:19:f1:50:76:
                    82:b4:34:fe:20:02:46:ac:32:96:72:9d:fb:d7:7e:
                    e6:ee:32:48:7f:da:39:1d:62:ce:d6:9d:55:19:76:
                    e0:7a:3c:87:ea:ad:d4:63:02:d1:e3:0c:b0:ed:62:
                    0e:92:8e:d4:5a:32:0f:00:9d:ee:44:7e:d3:02:bc:
                    2c:07:8c:50:12:7c:6d:51:66:f2:89:38:55:24:b6:
                    12:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6F:06:15:BD:46:16:E4:30:9D:9B:D6:2A:90:8B:73:4C:8D:33:8C
            X509v3 Authority Key Identifier:
                keyid:85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/3138392e37362e38302e302f32302d3332203d3e203532393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:22:aa:98:51:f8:63:f1:92:c9:f8:7b:a5:98:da:93:eb:6b:
         5d:5d:ee:ce:dc:03:b5:4c:44:7e:6f:f4:b0:61:37:1c:8a:d3:
         62:b1:6c:67:a2:d7:c8:32:a6:ae:6f:44:a2:3a:56:54:e1:e3:
         c2:14:2b:89:c8:63:07:73:44:0a:af:26:08:08:4f:8b:c6:85:
         02:d6:94:f8:77:33:67:a5:9b:0f:1e:11:cd:86:61:81:a5:9a:
         1b:ce:b9:36:62:1d:e7:d1:e1:c0:4e:80:79:c5:48:68:3c:b3:
         6a:dd:7b:fe:2e:88:0c:f8:df:9e:36:99:37:d0:dc:87:72:a9:
         ae:50:89:4c:1b:de:93:cf:a7:31:4a:7f:89:43:20:da:9b:83:
         7e:72:d1:1a:a0:00:1a:ba:c7:1e:cb:e4:c7:b1:a0:a9:5c:b2:
         30:73:7b:5b:9c:d6:e1:43:6d:27:7c:c5:21:c4:65:b5:4f:d2:
         2b:fd:4e:d6:db:a9:3f:72:08:c5:44:0f:65:e5:a2:51:3b:24:
         b0:65:d8:7b:0e:1f:3a:ba:e1:4f:ea:cf:11:fd:76:2e:9a:0e:
         4a:8a:08:fd:c1:bf:97:bc:52:a7:89:12:f8:5a:14:ac:77:44:
         97:4b:fb:34:0b:ff:93:79:c6:e5:b7:6b:34:d5:f4:bb:78:dd:
         da:38:76:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:50:24 2025 by rpki-client