Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/3137372e32322e3137362e302f32312d3234203d3e203533313637.roa
File:                     3137372e32322e3137362e302f32312d3234203d3e203533313637.roa (raw, json)
Hash identifier:          7ioeuoE3VyBQZE+gU1dUreUU8Jz+mJdCuM/vgq96Sr4=
Subject key identifier:   B0:AC:80:F8:CA:04:E8:4E:AE:49:73:3C:1E:06:26:F8:18:41:20:80
Certificate issuer:       /CN=B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4
Certificate serial:       61CA098E53C3A05E7BCD4EDEB9FEF0A12A050A7D
Authority key identifier: B7:A0:4B:6E:71:FC:9D:EC:92:4E:3D:35:36:A1:EE:0B:27:01:E5:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/3137372e32322e3137362e302f32312d3234203d3e203533313637.roa
Signing time:             Wed 05 Mar 2025 20:03:38 +0000
ROA not before:           Wed 05 Mar 2025 19:58:38 +0000
ROA not after:            Wed 04 Mar 2026 20:03:38 +0000
asID:                     53167
IP address blocks:        177.22.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.crl
                          rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 09:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ca:09:8e:53:c3:a0:5e:7b:cd:4e:de:b9:fe:f0:a1:2a:05:0a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4
        Validity
            Not Before: Mar  5 19:58:38 2025 GMT
            Not After : Mar  4 20:03:38 2026 GMT
        Subject: CN=B0AC80F8CA04E84EAE49733C1E0626F818412080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:e0:74:15:21:5b:83:8b:3b:cd:b5:6b:0c:
                    b7:04:7e:21:a4:d1:3f:d6:64:82:74:0c:94:5a:1d:
                    f6:ce:1c:f7:14:56:c0:bf:93:eb:72:e1:e3:27:b3:
                    a0:1b:05:7c:c2:9e:55:b1:ba:20:6c:4e:8b:d7:d7:
                    13:52:1d:e6:d6:66:c4:71:ea:99:e9:84:7e:41:c7:
                    40:1e:42:49:ea:38:9c:fd:2a:f8:e2:e5:52:2d:c4:
                    a6:a5:a2:b5:d7:a4:53:ac:bb:46:56:09:98:ac:6c:
                    54:c4:c0:b0:67:a2:21:34:67:dd:42:f7:3e:cd:cd:
                    f3:c6:2d:30:1b:ea:62:ee:98:3b:08:d2:74:05:2b:
                    bf:b7:47:fe:6a:af:57:ce:c4:a9:6c:59:18:0a:c8:
                    1f:83:ab:87:6d:46:fb:66:2e:9b:0c:1e:c8:42:d5:
                    48:5b:0d:9c:7a:7f:5d:80:ff:23:bc:c1:f1:5f:bf:
                    ec:8e:c5:2d:30:2e:51:b0:87:48:93:83:c9:6b:1d:
                    67:61:73:a1:38:25:0a:09:8d:60:48:ac:6c:eb:ea:
                    6a:7b:d9:93:0f:69:ae:a6:28:bc:67:a6:fc:56:54:
                    f3:e4:45:22:ab:9b:fc:1c:ca:ec:bf:95:b4:7e:4f:
                    ff:15:79:c9:29:44:7b:f1:aa:f3:26:1f:19:39:2a:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:80:F8:CA:04:E8:4E:AE:49:73:3C:1E:06:26:F8:18:41:20:80
            X509v3 Authority Key Identifier:
                keyid:B7:A0:4B:6E:71:FC:9D:EC:92:4E:3D:35:36:A1:EE:0B:27:01:E5:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/3137372e32322e3137362e302f32312d3234203d3e203533313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:48:77:86:1f:de:e5:57:b2:4a:9f:6a:21:e4:d7:8c:4e:1c:
         19:32:c3:0d:3d:f9:3c:1d:31:b8:25:e0:99:ee:42:cc:79:a9:
         46:59:df:b5:5d:61:bd:a8:08:5a:02:c0:f2:5d:73:77:a4:9d:
         94:79:8d:7d:f4:f3:91:9c:93:7f:e6:ba:e6:d5:ae:df:e6:6f:
         a1:57:f6:94:34:57:8d:27:c9:14:0c:85:11:5b:80:b5:2d:41:
         43:23:e5:11:12:9b:46:9f:d1:e8:b2:00:34:d4:95:73:ec:f4:
         ad:9f:54:73:5b:3b:cf:c8:d1:4e:19:7f:64:dc:ca:55:6c:13:
         4d:44:ed:d4:65:a8:a3:ad:1a:21:9d:70:0c:23:69:33:70:7d:
         8b:1a:aa:b1:a1:ba:20:5c:57:9d:e5:59:76:8f:49:9e:97:cd:
         89:e5:fd:1e:d3:db:75:27:05:be:87:10:a2:ba:65:d7:be:31:
         d9:31:8b:41:a6:76:92:68:82:d5:dc:e6:f8:39:e3:ec:13:b8:
         d8:31:72:e5:76:40:af:60:d9:08:41:d3:90:b4:e0:9b:37:63:
         23:12:d5:44:17:bb:69:f4:a6:41:5b:dc:6b:da:d1:26:28:88:
         f4:9a:ff:9e:ae:a5:b5:73:0b:6d:3c:f6:db:84:68:c0:55:51:
         57:91:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:34:59 2025 by rpki-client