Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233362e302f32322d3232203d3e203533303338.roa
File:                     3137372e37332e3233362e302f32322d3232203d3e203533303338.roa (raw, json)
Hash identifier:          71q0y/IZ588f3Se4t8DolJuCXWgSFG2yIzsD3Zg3DeQ=
Subject key identifier:   07:34:C9:26:71:51:71:AA:CB:C5:5E:BC:68:50:00:51:A4:3D:A6:E8
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       46030E6D27AEA1321F65CB0C4A5A53EFED4902D8
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233362e302f32322d3232203d3e203533303338.roa
Signing time:             Mon 02 Dec 2024 04:42:36 +0000
ROA not before:           Mon 02 Dec 2024 04:37:36 +0000
ROA not after:            Mon 01 Dec 2025 04:42:36 +0000
asID:                     53038
IP address blocks:        177.73.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:03:0e:6d:27:ae:a1:32:1f:65:cb:0c:4a:5a:53:ef:ed:49:02:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Dec  2 04:37:36 2024 GMT
            Not After : Dec  1 04:42:36 2025 GMT
        Subject: CN=0734C926715171AACBC55EBC68500051A43DA6E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d0:7f:11:a7:78:58:a1:fa:05:75:84:72:7e:
                    fb:9d:af:94:a3:25:a1:95:58:25:b4:00:dc:4c:8a:
                    50:c5:1c:67:40:d7:83:9e:d8:05:8e:f7:32:b7:ea:
                    04:98:45:5a:9e:af:6e:17:f4:a7:95:73:d3:18:9d:
                    ff:ff:c5:7a:3d:2d:d8:52:72:b7:74:3e:02:f3:23:
                    98:60:42:ea:a0:92:27:39:40:35:bc:c6:d8:ff:60:
                    89:64:4b:7d:21:7d:89:16:48:0f:1a:c1:41:60:de:
                    5e:32:13:9b:15:a7:b6:c0:d9:9c:e0:97:79:d9:b6:
                    48:09:34:de:71:d0:5d:59:8a:4c:e6:99:60:63:2e:
                    0b:90:a4:c9:86:11:e5:71:54:27:ac:d7:00:0b:9a:
                    4a:05:dd:12:98:9b:a0:86:a2:0a:a6:01:83:8b:24:
                    a4:38:b3:24:df:78:a1:f1:83:a4:ca:76:c0:4b:85:
                    28:70:e8:d2:6b:b3:a2:51:87:9e:dc:81:d3:32:9e:
                    11:ec:70:69:ae:d5:d9:92:b5:a5:12:e2:dd:e9:87:
                    6c:4d:de:80:bf:69:24:6f:16:32:6d:7c:cb:fd:e0:
                    fb:a9:22:d8:88:37:54:48:15:19:9b:85:01:4c:8f:
                    49:52:d0:c6:f2:ed:a5:be:75:37:52:f8:51:0e:ea:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:34:C9:26:71:51:71:AA:CB:C5:5E:BC:68:50:00:51:A4:3D:A6:E8
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233362e302f32322d3232203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:24:b5:77:ff:42:9e:87:4b:c2:41:ea:38:aa:fd:76:7b:6b:
         d0:a0:31:6d:02:74:37:6a:ca:97:21:31:0c:9b:ad:46:9a:c1:
         28:95:54:85:fb:6b:80:c3:23:2c:61:3c:3d:6b:ea:dd:06:50:
         42:72:f7:e6:b5:45:2a:d0:ac:85:58:5f:1f:cc:99:06:3e:ab:
         38:ec:a8:fd:b7:73:a9:c0:1a:8b:04:cb:77:37:4d:48:74:d5:
         71:4a:7e:d2:95:ff:72:68:c6:c5:f0:29:a6:08:1e:11:2c:fd:
         14:f4:b0:66:5b:2f:04:7d:ea:8b:a7:80:36:37:5e:d4:ff:5b:
         0b:f3:34:a3:fc:93:06:64:5d:f9:c7:76:39:66:2a:31:ca:bd:
         bf:63:a3:44:58:2b:03:05:f5:e6:8c:e7:6c:0e:38:5b:97:7f:
         56:13:17:08:0c:3e:56:ba:41:a3:41:da:d9:a0:c6:57:63:d0:
         57:d7:73:3b:94:89:75:81:b7:94:88:d0:67:68:8a:e1:b8:98:
         0f:57:90:19:4f:ed:0f:90:41:37:aa:d9:db:f5:16:f1:20:71:
         80:1b:80:9d:6b:6e:9f:01:2a:d4:15:59:70:a3:bf:9d:03:6f:
         be:e7:3d:9a:35:ba:46:d9:b8:7d:c5:c6:a4:17:ef:1e:62:e2:
         19:c4:b1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:17:51 2025 by rpki-client