Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e34342e3137362e302f32312d3234203d3e203533313733.roa
File:                     3137372e34342e3137362e302f32312d3234203d3e203533313733.roa (raw, json)
Hash identifier:          jA15WycUTHeDV3lpHyWiuY9D7bMpgxcW+cTi+VSlaqg=
Subject key identifier:   3B:84:84:43:DD:A0:FC:55:36:C0:64:89:92:74:F8:86:77:28:D6:B3
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       52AA99B1095BD36BB4CD480AA8A5F0DA23D1C25B
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e34342e3137362e302f32312d3234203d3e203533313733.roa
Signing time:             Thu 06 Mar 2025 02:41:59 +0000
ROA not before:           Thu 06 Mar 2025 02:36:59 +0000
ROA not after:            Thu 05 Mar 2026 02:41:59 +0000
asID:                     53173
IP address blocks:        177.44.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:aa:99:b1:09:5b:d3:6b:b4:cd:48:0a:a8:a5:f0:da:23:d1:c2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:59 2025 GMT
            Not After : Mar  5 02:41:59 2026 GMT
        Subject: CN=3B848443DDA0FC5536C064899274F8867728D6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:19:eb:b4:65:71:f3:14:1f:96:ba:09:99:
                    5d:71:08:f1:a2:7a:b6:99:27:e1:1d:65:d2:99:d7:
                    39:47:ba:b0:ab:e9:ed:a9:c5:d2:5e:60:e3:97:81:
                    94:ec:fc:15:e7:ba:1b:d8:15:9f:b6:95:fa:25:5f:
                    63:d1:88:a0:f8:93:71:45:57:bb:df:c1:ee:f2:3c:
                    25:ed:ac:3a:1d:74:23:6c:42:b5:62:29:46:21:96:
                    b8:c8:a3:6e:4a:3e:b5:4f:17:bc:5b:87:a8:62:18:
                    72:bf:cf:73:ee:32:08:2a:b4:84:dd:e6:c1:40:5e:
                    d5:49:fd:a4:c9:2c:46:98:f6:f9:be:0f:a2:b4:49:
                    ba:c7:45:3b:27:10:c5:95:25:5a:de:a9:d1:7e:db:
                    40:29:46:4a:5a:0d:52:a1:54:73:26:8b:1f:56:fa:
                    7c:11:a4:36:ce:e6:bb:9f:97:2b:c9:89:45:09:f1:
                    37:33:58:8c:14:ca:2e:05:2e:5c:f0:78:91:d2:6a:
                    0c:55:e5:d2:b3:cf:94:44:41:d7:41:9b:f1:2a:86:
                    e0:7a:38:a5:a7:46:f1:fc:3b:e4:59:e8:98:90:18:
                    83:f9:ae:5a:27:b7:84:90:1a:3b:36:d7:c1:d4:2f:
                    d4:b9:ab:c5:8d:4a:06:66:ca:df:65:2f:e4:2d:1b:
                    4c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:84:84:43:DD:A0:FC:55:36:C0:64:89:92:74:F8:86:77:28:D6:B3
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e34342e3137362e302f32312d3234203d3e203533313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:71:f0:00:59:61:d4:98:75:50:1a:5b:ce:e3:4f:90:6e:cc:
         2a:7d:59:7d:7f:54:36:71:94:0e:6e:4f:50:4f:68:d2:47:07:
         77:01:98:53:da:b4:5f:18:1d:d2:1a:1a:20:a2:03:cb:d7:4d:
         b9:28:77:57:39:cf:ca:c3:ad:2f:f6:bc:71:a8:6e:e7:1b:96:
         fd:3d:0d:8b:f4:5d:84:24:a7:bd:52:4a:b7:26:33:03:84:ae:
         c1:29:48:ff:38:ac:d0:ad:3d:de:7f:90:76:67:e0:79:fb:78:
         85:37:5b:9b:9a:1f:21:e0:05:41:a0:46:a2:98:df:3a:c1:d3:
         e3:0e:3e:31:ad:a4:86:00:99:f2:21:08:bf:cf:e2:f5:09:83:
         e5:87:42:9d:e4:b8:ea:46:32:89:21:43:3e:31:3e:23:8e:da:
         d7:ce:cc:27:48:67:ab:6c:55:a4:83:9f:f9:4d:1c:21:4c:86:
         6d:c9:b2:50:36:44:6c:a9:dc:fd:be:cb:ff:7c:e7:7b:7e:9e:
         fe:76:03:12:87:2a:0d:65:62:2e:02:d4:3a:3f:e4:3f:3e:d8:
         14:e8:9a:8a:cb:aa:b3:66:ca:e2:eb:fe:6e:3c:ee:cb:95:dc:
         a7:7f:3e:42:a8:37:32:e3:34:e6:f2:bf:83:4c:88:1b:93:b1:
         3a:be:06:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:51:07 2025 by rpki-client