Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3139312e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3139312e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          tJE5CgldMgsbPLJR+NbvxW/79DgM2CEDzEgsZmmDh2Q=
Subject key identifier:   BC:69:27:9E:6A:D5:99:3E:A3:A2:12:D4:0A:D2:81:C6:00:1B:F5:73
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       6E569A5808533B267D26C21814D2C50B1D5AB658
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3139312e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:36 +0000
ROA not before:           Mon 02 Dec 2024 04:37:36 +0000
ROA not after:            Mon 01 Dec 2025 04:42:36 +0000
asID:                     53038
IP address blocks:        177.154.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:56:9a:58:08:53:3b:26:7d:26:c2:18:14:d2:c5:0b:1d:5a:b6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:36 2024 GMT
            Not After : Dec  1 04:42:36 2025 GMT
        Subject: CN=BC69279E6AD5993EA3A212D40AD281C6001BF573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a6:45:62:7c:57:db:b8:59:6c:01:cb:59:e2:
                    d3:3c:c6:ff:cd:e1:2d:d5:d3:17:99:22:e4:62:a7:
                    c1:15:4c:b1:6b:a2:a9:ca:41:06:29:5d:66:81:ad:
                    8d:fa:51:e8:f0:b6:49:6e:32:3b:ad:43:e4:0c:31:
                    76:74:c9:c8:91:5e:3a:6f:25:39:4a:42:b7:02:50:
                    18:5e:a8:6a:8d:3d:76:e1:3f:89:b2:f5:87:0e:e2:
                    29:62:77:96:8d:58:11:44:79:2e:fb:82:81:2e:cb:
                    44:39:a2:55:f1:77:ac:e4:4f:ac:27:b7:9d:fe:07:
                    fb:50:3d:72:73:8d:e0:4d:ee:d9:c9:d2:fe:ad:60:
                    be:fb:95:e0:0f:6c:e7:31:3b:20:6f:b5:b5:35:2a:
                    f8:f2:22:c1:30:82:38:25:f9:33:61:29:0a:a1:6e:
                    82:f0:99:d4:59:40:3d:51:4e:b7:b3:c2:3f:71:55:
                    44:44:0f:cf:b7:df:bb:84:49:d8:62:7d:76:3a:43:
                    b4:00:22:bf:d4:c7:8c:18:84:a9:a7:9d:06:c5:a3:
                    d4:43:d3:27:e8:b6:ec:6d:94:d3:b8:40:bf:bb:bb:
                    b1:4f:0b:a9:da:41:e0:6d:71:b5:59:32:d8:86:a9:
                    b7:27:e7:77:1b:18:fa:f8:f9:05:5f:94:bb:2f:b9:
                    6b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:69:27:9E:6A:D5:99:3E:A3:A2:12:D4:0A:D2:81:C6:00:1B:F5:73
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3139312e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:f8:2c:63:eb:49:b6:cc:e4:f8:6a:74:03:9c:cc:a2:9c:21:
         d0:5c:b8:cc:00:f7:6e:5b:5b:5a:0b:1e:97:68:59:37:aa:e9:
         44:20:34:34:a3:be:98:f5:75:d6:7f:28:c0:37:df:0b:0c:d5:
         0b:4b:52:05:ed:15:6d:61:39:ef:3e:e4:1c:fa:60:9a:85:57:
         f2:9d:b5:85:c1:bd:03:b9:55:44:b9:fe:82:2f:3e:5f:d1:ae:
         46:46:02:17:d8:83:68:a5:1e:93:3a:1c:78:d3:87:e3:f8:f7:
         6d:98:15:3d:ad:bf:af:58:ee:b3:3b:2d:b9:f1:5c:e0:2d:37:
         0c:80:c2:30:0e:10:6a:43:a2:86:b7:36:e2:10:82:d5:22:2c:
         c6:5d:b2:cf:bb:e1:51:a0:6b:74:25:51:52:76:fd:fa:70:9f:
         aa:be:a3:f1:58:4d:b0:9f:37:0c:05:e3:d8:59:4f:f2:02:d4:
         a7:22:a7:38:9e:95:b0:48:8d:46:97:20:53:dc:85:c9:48:5f:
         11:4a:e7:72:da:d4:2a:b8:cf:18:d2:da:fa:be:4a:69:f1:6f:
         13:16:48:36:44:e9:95:d6:1a:41:ec:68:af:59:54:11:1e:c3:
         6a:ae:3a:ca:d9:6f:93:59:5d:4a:9c:d6:49:94:2d:36:d7:a6:
         2b:de:95:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:58:08 2025 by rpki-client