Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138362e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3138362e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          Zf/eVwdYNdQj0KjFKbVwnY4/lsBAzJ5VZu1IuC7hJvQ=
Subject key identifier:   2F:66:72:AC:C8:C7:E6:04:AC:2F:DB:4A:59:62:72:23:D7:6D:DD:25
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       0C003EC897955AEF851174409061097371D6DCB9
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138362e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:34 +0000
ROA not before:           Mon 02 Dec 2024 04:37:34 +0000
ROA not after:            Mon 01 Dec 2025 04:42:34 +0000
asID:                     53038
IP address blocks:        177.154.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 01:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:00:3e:c8:97:95:5a:ef:85:11:74:40:90:61:09:73:71:d6:dc:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:34 2024 GMT
            Not After : Dec  1 04:42:34 2025 GMT
        Subject: CN=2F6672ACC8C7E604AC2FDB4A59627223D76DDD25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:1f:ee:02:e5:99:fb:90:48:ed:df:5d:1a:
                    2a:50:c1:80:38:84:6d:3f:3b:75:cf:d8:26:6e:69:
                    f7:2e:45:14:68:7e:28:d1:68:ad:a9:7f:a3:8f:0d:
                    e3:40:2d:dc:c4:cb:50:8c:4f:aa:7a:ee:a7:cf:54:
                    e8:03:ed:09:3e:d4:b3:82:97:c7:4a:cc:c8:26:cf:
                    51:19:1f:6d:c0:a2:d2:c2:c6:3b:41:d8:5b:a0:19:
                    85:7d:12:09:ff:cb:df:66:e9:6b:32:a8:a0:96:33:
                    34:00:4a:0d:ea:50:fa:47:2c:8b:27:b6:90:6d:b4:
                    03:c4:f4:94:54:e2:18:71:f4:7e:30:e9:48:91:c1:
                    4d:05:3d:ff:00:c6:35:c0:67:f3:ba:20:68:49:03:
                    70:75:2e:ca:74:ce:a6:a9:ca:af:8c:53:c4:a4:54:
                    f4:10:b2:cb:1a:80:3b:8b:24:c1:35:d1:94:5d:bb:
                    b8:7e:93:b8:68:18:b6:af:41:fe:ba:49:a6:cd:7e:
                    f1:29:33:61:22:ae:a9:ff:2a:4a:b0:f7:46:12:a2:
                    85:a9:4c:27:61:e4:47:44:43:c0:43:88:34:53:02:
                    85:53:5c:47:18:43:e2:70:81:81:c1:0f:1b:02:23:
                    7c:dd:e0:1d:65:a4:a3:44:f0:8f:29:c4:0b:c5:95:
                    b3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:66:72:AC:C8:C7:E6:04:AC:2F:DB:4A:59:62:72:23:D7:6D:DD:25
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138362e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:2e:bf:9d:2b:f3:77:96:9c:1c:3f:37:cc:8a:1d:0d:0e:89:
         f6:d0:c7:d0:c9:00:01:ce:1f:00:09:0e:5f:82:03:49:56:09:
         e8:08:f1:66:7c:40:08:25:20:35:42:37:35:25:00:26:f7:b7:
         ad:61:8a:bd:1d:ff:d5:bd:b2:21:08:02:d4:00:58:fb:e1:83:
         af:93:b7:6a:93:f8:17:78:4c:98:55:e0:00:40:76:a4:34:05:
         35:4b:89:5b:e3:6e:7d:4e:1e:ff:b2:cb:93:a9:eb:f8:0d:9b:
         d2:aa:df:0e:1b:a3:c2:14:ec:f6:18:97:88:69:7a:06:00:36:
         d0:2c:8e:25:6b:5a:0d:99:e3:d6:b4:66:8c:60:f1:ec:70:ff:
         43:e2:8d:c4:65:b4:a4:e3:81:4e:12:0e:de:d3:fa:18:fc:ce:
         0e:a3:54:84:12:b0:3b:40:14:f5:e5:5d:a8:3e:aa:7c:24:22:
         13:bf:d6:f1:9d:c2:4c:1a:aa:77:30:50:fc:4f:e1:71:9b:37:
         2a:ed:1c:57:87:b6:58:04:56:e8:02:14:35:e1:7b:a8:70:63:
         05:44:06:57:bd:7d:73:7d:79:fa:df:4b:ad:41:16:fe:03:f9:
         8d:5c:e0:c8:39:be:de:dd:53:62:e7:96:04:9c:39:09:3a:6d:
         1f:10:51:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:00:12 2025 by rpki-client