Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa
File:                     3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa (raw, json)
Hash identifier:          wyF0GJjDX5YnWfr20u0CwT3kDZX//zWud8hjzCmqbF4=
Subject key identifier:   80:61:C2:9B:2B:56:E7:E9:27:86:F6:22:D5:48:5E:F6:AA:57:F4:54
Certificate issuer:       /CN=A5455EE25C6FEB15A12789F15E975474289CE800
Certificate serial:       79F39F4BFECB61F07E76A9877C9C20FB8645F369
Authority key identifier: A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa
Signing time:             Thu 06 Mar 2025 09:00:37 +0000
ROA not before:           Thu 06 Mar 2025 08:55:37 +0000
ROA not after:            Thu 05 Mar 2026 09:00:37 +0000
asID:                     262343
IP address blocks:        177.126.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl
                          rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f3:9f:4b:fe:cb:61:f0:7e:76:a9:87:7c:9c:20:fb:86:45:f3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5455EE25C6FEB15A12789F15E975474289CE800
        Validity
            Not Before: Mar  6 08:55:37 2025 GMT
            Not After : Mar  5 09:00:37 2026 GMT
        Subject: CN=8061C29B2B56E7E92786F622D5485EF6AA57F454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:9a:c7:b2:3b:ed:c3:28:63:7a:fa:0b:77:
                    5a:67:e7:92:6b:a4:44:91:b9:00:2f:0b:cb:5a:96:
                    d8:db:15:f6:ef:5e:b6:74:90:ca:0a:e5:ae:ed:e9:
                    97:cd:ff:b1:29:8c:69:44:1c:65:35:f5:e3:cd:ad:
                    df:11:fa:39:2e:ed:26:d1:c0:d4:cc:b8:18:fa:cc:
                    3b:4e:40:7e:7e:2b:17:27:25:87:57:5a:36:01:16:
                    bc:74:72:57:d0:84:86:6c:59:63:84:6b:4c:af:89:
                    a8:75:f5:33:55:05:6d:a0:71:bd:1b:24:ce:61:63:
                    6e:09:e6:ad:2f:01:84:ae:c3:e5:a8:ed:c2:af:68:
                    d6:bf:52:df:71:2e:8d:72:b7:7c:c2:2f:9e:1c:b4:
                    fb:f3:fe:ae:34:28:a7:e0:9d:65:38:72:3d:d8:55:
                    5c:d7:ea:e3:f9:20:ad:57:ad:a3:ce:98:11:02:30:
                    35:55:4f:1d:a6:29:40:39:8d:3a:aa:9c:4d:85:96:
                    9b:b6:fe:56:c2:b8:23:4c:56:7e:cf:09:ba:4b:5c:
                    50:80:4f:4e:21:92:42:6f:29:c7:ef:f7:60:68:ae:
                    ae:b5:be:b7:d8:9c:cb:e6:44:4d:1a:be:67:db:e1:
                    12:f3:25:21:b4:e3:2a:0b:f4:8a:37:da:5e:72:98:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:61:C2:9B:2B:56:E7:E9:27:86:F6:22:D5:48:5E:F6:AA:57:F4:54
            X509v3 Authority Key Identifier:
                keyid:A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:fe:30:86:1f:78:7d:29:62:7a:7c:49:23:b2:2f:51:d1:be:
         3a:86:29:4f:21:e7:3b:fd:36:e0:84:0d:bf:e6:a8:f6:09:52:
         75:6e:b0:b3:ed:47:c2:ef:1e:fd:79:78:44:93:5e:4a:6b:3f:
         76:e7:f9:97:e0:6e:27:d2:9f:b2:bb:5d:ae:8d:84:0c:45:dd:
         a2:91:86:2a:d0:e9:a9:0a:92:15:f3:b6:d9:8d:c2:40:5a:4b:
         e4:a3:6d:73:47:5a:58:86:29:b2:23:94:a2:63:88:ab:d6:98:
         8f:1d:95:c3:e8:81:4f:9e:7f:31:d5:e5:cc:ca:2f:4c:7b:e9:
         17:51:70:ee:f2:0e:f8:fb:72:cd:49:47:4e:bf:4a:8d:4c:aa:
         1f:90:ae:61:0f:b7:db:4f:dd:95:34:d4:ad:1d:eb:3d:b2:08:
         3b:a5:2a:6a:90:0a:06:f0:f3:38:55:3f:c7:bd:10:77:7b:53:
         b6:47:e5:6f:7b:19:3e:69:47:21:8b:f2:22:08:dc:ca:8d:e4:
         61:4c:43:7f:0b:db:30:59:4a:33:4c:0e:92:04:1e:ee:7f:78:
         08:a4:c8:20:6a:95:4e:6a:df:54:0d:6e:6b:f7:eb:9c:df:b5:
         68:56:0e:d0:a7:6b:13:f0:0b:1d:54:cf:6b:03:01:73:e7:8e:
         e6:5b:ff:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:28:32 2025 by rpki-client