Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38352e3233342e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38352e3233342e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          6t0xDr8vyQwuJDuvRxw8/2bgFcrqWmJSI9g8X4ALkt8=
Subject key identifier:   7F:4C:C7:35:BE:FE:50:A4:99:DE:C8:98:E4:4D:0B:A9:34:31:2E:57
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       66C2CEC5FF1EAF56ADB3F9A7B992380A1B0B00AE
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38352e3233342e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:35:56 +0000
ROA not before:           Wed 05 Mar 2025 20:30:56 +0000
ROA not after:            Wed 04 Mar 2026 20:35:56 +0000
asID:                     262617
IP address blocks:        177.85.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 14:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c2:ce:c5:ff:1e:af:56:ad:b3:f9:a7:b9:92:38:0a:1b:0b:00:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:30:56 2025 GMT
            Not After : Mar  4 20:35:56 2026 GMT
        Subject: CN=7F4CC735BEFE50A499DEC898E44D0BA934312E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:c6:10:d1:12:0c:86:5a:19:c2:41:13:91:
                    50:d3:04:b1:15:34:41:cb:c8:ab:27:55:0a:c1:8e:
                    b8:e3:64:66:6b:bb:2e:c9:ac:3b:16:cd:9e:dc:e2:
                    35:63:a8:52:81:5d:b8:6d:2b:33:3b:a2:ea:31:3e:
                    c1:1c:64:36:f8:7b:61:08:33:d2:7f:22:0b:59:d8:
                    cd:68:07:92:c4:c1:1a:16:e6:1b:ca:3d:9e:52:b7:
                    01:f5:b3:97:23:17:b3:7f:35:6e:f4:a8:dd:ef:fd:
                    b0:f1:4d:f4:c1:ab:89:56:be:66:8e:8a:35:11:dc:
                    66:e6:ed:88:42:5f:e9:07:fb:5c:3b:35:7c:62:93:
                    36:7f:30:d9:62:d6:b8:7a:a6:fa:61:9f:65:0e:e5:
                    7d:88:88:38:6d:4d:1f:6e:7c:c6:11:d1:f4:81:11:
                    4a:b9:bf:7c:fd:86:00:a5:5d:ba:9e:84:02:26:81:
                    50:c8:40:cc:67:d2:a6:00:62:b8:d7:25:67:00:b6:
                    25:40:ca:4d:d7:f9:63:e3:0a:5e:4b:11:24:be:17:
                    4b:b8:e4:30:74:f5:68:46:bb:e1:32:e5:29:7b:69:
                    3e:8c:5f:2e:21:91:66:28:1f:51:a5:07:d2:bb:91:
                    9d:7b:78:19:87:24:e3:25:61:7b:e3:f7:48:a3:3c:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4C:C7:35:BE:FE:50:A4:99:DE:C8:98:E4:4D:0B:A9:34:31:2E:57
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38352e3233342e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:57:9f:51:aa:c7:ca:6d:09:53:e9:df:51:8f:b5:15:6b:f2:
         2f:6a:19:eb:fc:db:44:e2:2a:3d:0e:96:bc:f4:2b:22:0d:80:
         3c:57:78:d8:40:9e:1a:a5:13:1b:c6:d9:a6:25:49:a3:d3:33:
         7e:c1:f9:4d:9f:43:87:54:b0:9d:63:94:50:a9:87:32:ca:06:
         6b:8a:70:d3:78:32:03:5c:c5:5f:a9:51:7e:11:f1:ac:b2:a9:
         c7:a8:d8:e2:f0:26:23:c1:ac:d0:ab:b3:7a:4c:51:f5:83:d2:
         4c:db:22:cc:c1:13:95:df:43:99:83:f6:2a:f0:17:4a:98:00:
         a0:b8:3e:c0:51:b5:21:3c:89:dc:cd:e7:3f:00:65:4f:f2:f6:
         58:12:3f:bc:03:c0:99:8e:25:2a:54:c0:8f:00:c9:88:5c:5b:
         b4:9f:ca:3a:5b:f4:08:33:02:26:db:72:4f:81:ee:ec:4b:d5:
         ad:35:7b:82:a8:41:15:55:49:58:ce:54:b1:a6:f5:06:5d:25:
         d8:da:68:c2:d0:12:e9:4d:bf:30:1b:ef:5e:0d:d3:8a:50:77:
         b2:4f:35:a1:ab:e8:a1:47:9b:94:8b:49:6c:91:19:7a:7f:c5:
         0a:23:ac:8e:3d:f5:45:b7:6d:c0:3e:4b:ea:83:89:fc:bb:ca:
         e8:02:ec:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:35:52 2025 by rpki-client