Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133352e302f32342d3234203d3e20323730373832.roa
File:                     3137372e3133312e3133352e302f32342d3234203d3e20323730373832.roa (raw, json)
Hash identifier:          qPn2HODfApm2z7FJ7vwN5T/41/m1nVFP+DJkMxVF5sI=
Subject key identifier:   AF:CD:0C:1F:7C:9B:31:59:50:1F:F5:45:44:F2:98:C5:20:A5:76:58
Certificate issuer:       /CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
Certificate serial:       6BA1E00D0088E4CF3A1BFF0937178A147BCECE85
Authority key identifier: B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133352e302f32342d3234203d3e20323730373832.roa
Signing time:             Tue 24 Sep 2024 18:02:19 +0000
ROA not before:           Tue 24 Sep 2024 17:57:19 +0000
ROA not after:            Tue 23 Sep 2025 18:02:19 +0000
asID:                     270782
IP address blocks:        177.131.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl
                          rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a1:e0:0d:00:88:e4:cf:3a:1b:ff:09:37:17:8a:14:7b:ce:ce:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
        Validity
            Not Before: Sep 24 17:57:19 2024 GMT
            Not After : Sep 23 18:02:19 2025 GMT
        Subject: CN=AFCD0C1F7C9B3159501FF54544F298C520A57658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:38:5b:f7:ce:35:20:ca:61:a4:60:7c:e1:6f:
                    a2:0a:5a:2d:1e:be:e3:7b:8e:ec:ab:fc:b0:ea:9a:
                    4c:b4:dc:f8:1c:7e:7e:70:d7:28:35:7a:49:ef:6a:
                    d9:88:c1:6f:56:3f:93:20:0f:bc:a2:4c:58:20:42:
                    ba:4a:4f:38:ea:a1:1f:35:0f:1c:5d:4f:b2:4c:b1:
                    c5:40:15:3e:89:26:22:0f:0e:05:7f:63:c5:5e:ec:
                    17:76:98:64:ab:b2:b6:bd:ef:7b:71:83:21:c9:2a:
                    3d:e1:9b:1f:ce:6f:db:41:7d:6e:e2:37:a5:b4:60:
                    75:21:6a:12:b8:91:0b:79:cc:9c:17:01:bb:2c:b0:
                    5a:73:7e:1e:28:46:ff:a5:fc:68:66:37:7a:cc:3e:
                    85:ef:59:bf:b8:3c:70:8a:ce:1e:cf:0e:56:81:6e:
                    53:30:59:7e:51:ea:9a:73:0b:ab:5c:2e:29:e1:98:
                    36:61:31:13:7a:a7:27:4d:93:db:72:3a:cd:55:64:
                    18:04:00:57:e5:4a:54:41:5d:e1:fc:78:48:a2:93:
                    c0:83:ca:75:25:d7:5d:1c:b7:4d:ae:fc:03:1f:78:
                    d8:7b:0c:45:21:d7:ae:99:55:ec:60:fe:b1:91:0a:
                    cb:19:9b:d0:10:a9:8b:1d:68:47:54:8d:f1:ab:ed:
                    77:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CD:0C:1F:7C:9B:31:59:50:1F:F5:45:44:F2:98:C5:20:A5:76:58
            X509v3 Authority Key Identifier:
                keyid:B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133352e302f32342d3234203d3e20323730373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:e7:e3:0a:f8:87:b5:df:b0:ea:04:f6:c4:cf:62:25:84:b6:
         b1:d7:92:56:45:22:a0:39:7d:ba:f7:ea:4d:77:49:3c:2e:51:
         ea:12:2b:44:4d:e8:d5:eb:d4:d4:ad:64:05:3a:b0:0a:93:cf:
         82:ac:76:01:e1:d4:91:e2:7c:e4:1b:54:33:46:75:bb:ae:d1:
         21:5b:ef:c6:c8:d5:56:61:22:d5:67:cd:a8:73:bf:c8:44:e4:
         ef:7d:ef:2f:a3:ce:54:f6:3e:e0:92:01:b0:24:cf:29:ed:c4:
         db:7f:ae:ea:e3:75:04:8f:78:90:f3:96:db:0d:8e:cd:3e:9b:
         ad:16:1d:35:8c:56:b4:58:ec:28:3c:bb:0a:7d:44:99:87:fc:
         84:d2:dc:7d:15:7c:41:eb:49:ff:25:86:45:53:0e:b0:37:47:
         9d:fc:4f:61:cf:df:f7:79:81:ee:64:0b:de:14:8f:4c:43:d9:
         49:7c:d4:fe:fe:aa:05:2b:a7:16:45:bd:eb:f2:85:5e:3d:e8:
         c7:85:ce:c7:09:8e:ed:72:57:a4:ac:63:b6:d4:a8:1f:64:72:
         cb:c3:ab:c1:cb:e9:3a:0e:7c:da:90:d4:02:42:a5:91:cb:d8:
         a0:a3:0f:14:27:e2:f7:28:ab:b4:f3:fd:e1:97:59:7a:93:2b:
         a9:a1:24:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:31 2025 by rpki-client