Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa
File:                     3137372e33392e3135362e302f32332d3233203d3e203532373732.roa (raw, json)
Hash identifier:          Won+0reunCyjZ3K2A4bz7m8vsjQ3hleS3JThxpv7Ky8=
Subject key identifier:   A5:33:DA:1F:4B:E1:31:B6:9F:8C:AC:8C:0B:21:04:51:C9:44:0A:E2
Certificate issuer:       /CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
Certificate serial:       CB0DA16CCC552A21D00AAFC66C523E9BB8414E
Authority key identifier: 32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa
Signing time:             Fri 14 Feb 2025 17:47:40 +0000
ROA not before:           Fri 14 Feb 2025 17:42:40 +0000
ROA not after:            Fri 13 Feb 2026 17:47:40 +0000
asID:                     52772
IP address blocks:        177.39.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 01:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cb:0d:a1:6c:cc:55:2a:21:d0:0a:af:c6:6c:52:3e:9b:b8:41:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
        Validity
            Not Before: Feb 14 17:42:40 2025 GMT
            Not After : Feb 13 17:47:40 2026 GMT
        Subject: CN=A533DA1F4BE131B69F8CAC8C0B210451C9440AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3e:6e:f2:17:f7:ba:37:4f:23:f7:d7:8d:ef:
                    7e:a1:9b:e0:4f:92:f7:5c:a0:50:a6:91:d5:01:76:
                    79:60:30:db:48:69:86:70:bc:5f:90:44:57:ed:a2:
                    61:1b:12:ea:92:0b:33:e5:e0:cd:4b:e3:98:69:7b:
                    57:20:b6:f5:cf:5c:ac:92:1e:85:6d:c5:86:91:51:
                    b0:86:67:74:93:20:a6:b6:18:12:c4:4a:d1:dd:23:
                    41:81:47:6d:0e:37:3f:52:3e:31:b9:12:2c:1d:6f:
                    36:c2:d7:a8:d9:d8:4a:6b:3b:e7:b6:7e:6a:68:db:
                    8d:95:20:0c:f6:33:0d:cd:77:f7:3e:a9:7e:95:2d:
                    bd:71:06:35:bf:33:6d:6c:dc:c3:ab:08:14:f1:7c:
                    85:38:2a:93:46:44:03:06:f7:0e:d0:f0:ea:a9:e2:
                    35:05:6f:8a:86:14:98:eb:8b:ff:5b:ab:e7:75:42:
                    18:10:39:54:d7:0f:24:b5:97:96:a8:01:41:8c:04:
                    a6:a4:f4:8c:94:a4:3c:57:8e:17:08:13:1f:97:e6:
                    84:b1:cb:41:6d:40:9d:33:2c:ac:41:23:2a:ff:8f:
                    eb:40:42:d5:cd:0c:8d:64:00:9f:6d:69:d1:11:f1:
                    35:84:6d:98:fe:bc:bc:c0:06:02:c7:56:42:db:fd:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:33:DA:1F:4B:E1:31:B6:9F:8C:AC:8C:0B:21:04:51:C9:44:0A:E2
            X509v3 Authority Key Identifier:
                keyid:32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32332d3233203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:87:c4:02:90:85:1b:70:a8:9b:cf:3c:f2:d2:2c:95:c4:4c:
         d1:3b:7b:8f:63:2b:96:4b:79:a2:db:5b:95:ae:f5:9e:de:de:
         27:3c:87:4c:5d:76:91:f9:af:06:39:22:c9:1a:cd:7f:92:f4:
         d8:55:69:3c:06:04:90:12:b7:73:59:ca:92:a9:6c:4d:1e:74:
         bb:41:cf:4a:06:db:bb:a1:42:c2:75:13:ae:5b:d9:99:18:44:
         d5:60:2c:9a:d9:23:f6:fe:88:d5:67:cf:fa:ea:87:2a:db:c2:
         61:1f:83:af:33:c0:34:f0:f1:30:f4:14:c4:e4:45:95:c7:7f:
         3c:cb:30:a4:5c:47:2b:ec:58:df:b7:44:56:9d:dc:1c:97:d6:
         bd:08:d3:27:b8:c9:2b:ca:1a:3e:95:7a:3c:54:f0:36:b4:6e:
         4f:ff:d1:19:25:7b:df:d6:e5:01:48:04:c4:89:dd:8e:4c:a7:
         77:04:6d:71:59:47:ac:c6:0e:8e:61:30:ef:e6:f1:5e:86:51:
         f0:29:f5:79:f8:96:7c:1f:2d:b0:57:11:d3:d4:c4:d8:a3:1c:
         42:af:be:9d:e7:0d:52:d7:36:86:fc:7b:11:24:65:2a:47:9f:
         6d:f7:55:8e:1f:b6:6a:1a:c6:0b:48:f2:dc:a6:95:e6:e5:ec:
         4b:27:8d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:30:56 2025 by rpki-client