Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137372e302f32342d3234203d3e20323633303335.roa
File:                     3137372e32302e3137372e302f32342d3234203d3e20323633303335.roa (raw, json)
Hash identifier:          ohGZC0JFhKKJQiTCC8lUMakWB11fcxwJppSOtNxlK6E=
Subject key identifier:   DD:1F:D2:C8:4B:CB:62:EA:90:FC:7B:32:9A:CC:EC:06:12:74:9B:91
Certificate issuer:       /CN=3811D3CF68BD6E1D457066AF72C5B80697140952
Certificate serial:       4FEE8DED27AC0BC4553B7AE5A0B086BCDFDC7B21
Authority key identifier: 38:11:D3:CF:68:BD:6E:1D:45:70:66:AF:72:C5:B8:06:97:14:09:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137372e302f32342d3234203d3e20323633303335.roa
Signing time:             Thu 05 Jun 2025 13:44:06 +0000
ROA not before:           Thu 05 Jun 2025 13:39:06 +0000
ROA not after:            Thu 04 Jun 2026 13:44:06 +0000
asID:                     263035
IP address blocks:        177.20.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.crl
                          rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ee:8d:ed:27:ac:0b:c4:55:3b:7a:e5:a0:b0:86:bc:df:dc:7b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3811D3CF68BD6E1D457066AF72C5B80697140952
        Validity
            Not Before: Jun  5 13:39:06 2025 GMT
            Not After : Jun  4 13:44:06 2026 GMT
        Subject: CN=DD1FD2C84BCB62EA90FC7B329ACCEC0612749B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:82:23:66:42:38:ec:21:f5:45:bb:31:d8:91:
                    e1:b9:10:f9:cd:8b:37:19:ec:8d:20:56:f1:f1:52:
                    e3:07:34:ca:a6:8c:a7:33:ad:d3:fb:13:7d:83:ab:
                    ff:e6:f4:ec:d6:5d:ac:d6:8f:99:b3:53:d2:a4:f1:
                    02:2f:9b:d0:6b:60:60:da:9e:58:98:11:50:f3:90:
                    b0:2a:dd:52:11:2d:5a:39:ca:f5:d6:e2:b5:87:10:
                    ef:9d:de:3d:de:b8:86:b4:61:8b:55:09:42:c4:38:
                    28:8a:d0:b1:43:b0:ac:6f:89:4b:0e:4e:53:d4:2a:
                    b1:6d:ef:ed:79:0e:c4:30:6f:e5:ab:55:dd:05:96:
                    9e:ea:cd:1b:43:d2:f6:0a:7a:25:17:fd:12:e6:17:
                    ce:0a:c8:e1:fe:ed:ef:02:a8:81:d3:d5:ac:ab:93:
                    62:ca:a5:04:5b:e1:df:db:14:18:6b:47:61:3a:f3:
                    6b:08:bb:1e:80:24:31:d3:1d:ff:4e:e4:c7:9d:38:
                    8a:09:a1:b3:34:72:8f:c1:fa:05:77:7b:19:47:bc:
                    ce:fa:84:34:ab:d3:ee:14:04:52:95:f2:97:3d:37:
                    4f:7b:fb:61:42:6e:5d:04:4c:36:73:5f:86:20:dd:
                    9d:61:62:06:34:3a:07:c0:96:d7:99:28:52:3a:9e:
                    8c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1F:D2:C8:4B:CB:62:EA:90:FC:7B:32:9A:CC:EC:06:12:74:9B:91
            X509v3 Authority Key Identifier:
                keyid:38:11:D3:CF:68:BD:6E:1D:45:70:66:AF:72:C5:B8:06:97:14:09:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137372e302f32342d3234203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:0e:42:2a:44:9d:fd:bf:7f:22:df:00:83:2b:1a:dc:13:ec:
         64:34:7f:ac:d6:89:2d:eb:f4:06:b8:f4:d5:15:28:9c:d7:15:
         a3:d8:58:57:3f:34:1e:9a:cd:28:4d:7e:9a:71:89:cb:02:1f:
         5e:df:de:ab:69:90:52:bc:89:e1:2f:df:c7:6b:80:76:4d:90:
         ed:40:00:56:52:83:80:80:98:33:72:69:f2:77:d2:3d:ad:96:
         66:9c:6c:71:8a:ba:65:68:92:20:3f:f7:3d:b1:b5:80:a7:d0:
         2c:e3:15:9f:9a:b5:0a:7b:c7:f3:b2:10:fc:6c:a8:9b:0f:3e:
         35:64:45:41:eb:95:a7:30:96:e9:12:73:14:60:79:c0:69:87:
         8b:e6:33:16:89:f2:16:b0:c2:42:fa:0d:47:a8:68:87:bd:92:
         f4:4f:2e:a9:4e:dd:3b:10:3f:22:42:af:ad:78:33:33:52:c1:
         fe:9d:a3:ea:90:83:f4:f1:af:70:b4:46:a1:f8:c7:c2:d2:96:
         e5:9b:13:09:7e:e0:9f:b2:26:85:7a:d4:83:16:cb:48:dc:de:
         e2:b0:49:90:8a:64:8b:50:2b:2b:5f:68:11:5d:75:f6:37:14:
         30:89:ce:96:a5:fa:b4:be:bf:53:04:6f:fa:15:33:8c:23:a5:
         26:6b:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:50:53 2025 by rpki-client