Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/3137372e32322e3230382e302f32302d3234203d3e203631383732.roa
File:                     3137372e32322e3230382e302f32302d3234203d3e203631383732.roa (raw, json)
Hash identifier:          Ff7NxA9f2NFen6Fa/2ff2j5YwONNZaeQShwc44r8Cz8=
Subject key identifier:   55:D3:9F:8B:F1:64:89:48:68:40:BF:3F:5A:C5:1E:4E:DB:CF:8E:10
Certificate issuer:       /CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15
Certificate serial:       1CCA90B3222735783A0E649BF95CD619CF76B49B
Authority key identifier: 0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/3137372e32322e3230382e302f32302d3234203d3e203631383732.roa
Signing time:             Wed 12 Feb 2025 20:18:47 +0000
ROA not before:           Wed 12 Feb 2025 20:13:47 +0000
ROA not after:            Wed 11 Feb 2026 20:18:47 +0000
asID:                     61872
IP address blocks:        177.22.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl
                          rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ca:90:b3:22:27:35:78:3a:0e:64:9b:f9:5c:d6:19:cf:76:b4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15
        Validity
            Not Before: Feb 12 20:13:47 2025 GMT
            Not After : Feb 11 20:18:47 2026 GMT
        Subject: CN=55D39F8BF16489486840BF3F5AC51E4EDBCF8E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:6f:0f:da:0c:0c:4d:37:5c:29:7b:8a:0b:
                    e1:ad:95:38:62:08:de:f9:9c:31:09:85:b5:8d:76:
                    3f:fb:67:57:18:5d:2a:eb:b2:b1:c4:0e:d3:2b:7c:
                    32:a6:1c:28:ce:34:21:a5:32:4f:6c:ac:4e:7c:d9:
                    84:9f:c1:8d:17:49:5b:4a:4d:ef:58:18:b0:1e:ca:
                    ee:df:d2:93:ce:bf:a2:55:e8:42:5c:57:f7:73:a1:
                    11:ae:8d:a6:7e:ea:59:e9:6f:b3:67:f8:9c:43:43:
                    f4:25:92:8e:6c:bb:ef:fb:0b:fc:b1:df:7c:a7:c6:
                    9f:97:5a:b4:ec:b0:4a:91:65:62:0e:78:05:b7:55:
                    e3:7c:a2:2e:ef:b5:6c:bc:cc:49:b8:ca:83:b9:33:
                    c9:e3:fc:6d:e8:84:36:e8:f1:c5:2b:e0:85:9f:1f:
                    ca:6c:c7:a6:a0:a4:3e:3f:a0:2a:13:6f:5e:49:f2:
                    35:46:df:53:a3:6a:2c:3e:d9:1f:fa:26:bb:2d:c8:
                    2c:78:bb:c7:31:7e:28:dc:48:4f:f6:8b:5d:e2:57:
                    09:3f:97:4e:f4:eb:77:17:42:43:3b:5e:f2:7f:82:
                    73:79:e7:b2:a3:69:55:66:5c:9a:a6:44:96:62:ea:
                    b1:41:e6:03:89:bd:13:b5:cf:76:45:b3:7f:e7:41:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D3:9F:8B:F1:64:89:48:68:40:BF:3F:5A:C5:1E:4E:DB:CF:8E:10
            X509v3 Authority Key Identifier:
                keyid:0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/3137372e32322e3230382e302f32302d3234203d3e203631383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:c4:c6:a5:1e:8f:b0:9f:58:49:5c:e9:02:f6:64:e2:ae:00:
         70:75:16:21:b0:93:6c:27:2f:f9:4a:ed:29:f5:93:50:e1:56:
         eb:56:24:67:71:d1:10:2c:b4:54:01:a8:03:e1:8f:86:fb:ed:
         c3:fe:0f:59:8c:f8:6f:c7:7f:17:70:a4:c7:0d:37:29:4c:2a:
         f1:1f:e8:fe:21:5f:14:7c:68:1c:5a:7e:e8:2e:ec:b8:52:d4:
         de:94:24:cd:bf:68:f6:68:68:41:2b:db:73:7b:41:9c:19:a2:
         1c:c0:ce:c5:7d:da:35:42:a3:a8:cd:7d:50:80:41:77:b2:4a:
         4e:4c:e0:c9:2f:1f:bd:f2:b7:f4:9a:b6:57:58:b4:eb:af:16:
         61:3b:55:38:5d:7b:98:4e:ea:3b:d7:5a:1a:5e:fe:97:16:49:
         54:69:be:52:d8:e4:dd:44:63:be:38:6a:2a:98:19:b8:5f:29:
         be:d4:cc:08:60:9c:67:af:40:f9:45:a1:f9:2d:eb:41:d4:bc:
         4f:42:32:6c:be:40:74:55:1a:3e:40:88:e7:dd:db:e2:15:a5:
         6f:40:d2:5a:7d:f3:eb:24:72:30:9b:d4:66:be:35:93:03:08:
         66:05:70:14:c1:59:dd:72:f2:01:fd:99:75:2d:32:b6:18:3f:
         f5:a5:13:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:00:32 2025 by rpki-client