Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa
File:                     3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa (raw, json)
Hash identifier:          CDVybznQUICv+97JC1NTzuzJDlRwjzfxqO4x+j+8S9U=
Subject key identifier:   B4:4E:92:D9:85:79:72:D1:E9:01:67:57:B1:FF:7E:C4:F8:E8:D3:CB
Certificate issuer:       /CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
Certificate serial:       6FC5FC9FD72658FB764A51FF0473D31FD64C3C35
Authority key identifier: 7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     52604
IP address blocks:        177.124.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl
                          rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c5:fc:9f:d7:26:58:fb:76:4a:51:ff:04:73:d3:1f:d6:4c:3c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=B44E92D9857972D1E9016757B1FF7EC4F8E8D3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:e3:e9:47:d3:81:d6:5b:39:5b:de:28:ff:
                    a8:4b:25:4d:71:99:22:19:1b:33:02:e4:f8:12:69:
                    d7:e6:5c:88:c7:44:7f:7e:02:54:bc:79:70:df:9e:
                    fb:4d:2a:dd:11:30:68:72:c9:82:cb:8e:f9:88:4f:
                    4e:72:0b:5a:70:6f:1d:0b:04:81:2f:93:70:e2:35:
                    2c:8e:c3:41:82:8c:fd:64:97:92:cb:36:c8:78:a3:
                    14:ff:c8:17:0a:80:3e:12:0f:cf:4e:ce:ac:70:78:
                    46:d0:4c:fb:6d:73:17:7a:46:e1:02:7a:e9:3a:9f:
                    56:d1:a1:30:02:d0:45:47:dc:5b:e8:0e:48:41:b5:
                    da:e2:5c:6e:aa:1f:a9:54:71:c0:d0:eb:3f:10:46:
                    14:bd:20:b9:b4:41:7d:0f:25:fd:e2:a1:40:da:52:
                    88:b2:8e:86:2b:55:47:41:db:0d:91:32:35:31:3d:
                    23:fd:ed:a0:3d:2f:5d:fc:46:e2:04:c0:88:51:77:
                    26:82:11:00:3c:84:0d:f9:58:17:ae:46:e1:c7:dc:
                    b7:b2:d7:f3:5c:1c:dc:69:c6:dc:c4:c4:62:11:ae:
                    88:be:51:a1:c4:7e:09:d5:52:ba:0e:dd:7f:76:1f:
                    e6:37:8b:3a:f0:09:cb:41:dc:93:76:33:b5:35:e2:
                    12:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4E:92:D9:85:79:72:D1:E9:01:67:57:B1:FF:7E:C4:F8:E8:D3:CB
            X509v3 Authority Key Identifier:
                keyid:7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:5f:db:34:2d:42:a4:30:9f:85:23:d3:46:b2:43:73:6f:0b:
         07:ed:07:b5:fc:64:9c:3d:16:f0:1e:08:ad:e5:9f:e3:f6:9b:
         2d:c3:d3:d2:c2:98:d6:64:b2:58:05:9b:d3:3b:d2:e4:2e:bf:
         c7:7b:03:f9:d7:29:17:bf:ea:b7:99:45:4c:74:88:c2:14:d9:
         d6:19:a6:cc:92:af:51:44:79:77:59:67:a3:8d:a2:18:03:22:
         bd:e3:71:53:1a:ee:9c:83:35:c2:da:93:d5:36:17:e0:10:d3:
         10:99:34:c7:af:e8:4d:ea:8e:6f:b2:9f:df:ba:4c:f9:42:dc:
         1d:f0:d8:60:b5:5e:23:df:87:75:4a:5a:08:54:26:f6:04:a2:
         1c:16:3b:e7:3d:5a:7a:23:fc:ed:9f:34:2e:c8:7f:1a:37:47:
         ab:81:0b:92:b3:63:57:7a:5b:5f:f4:8f:21:de:ba:73:89:fb:
         1c:0e:8e:d8:10:d0:02:ec:42:21:b7:8c:66:62:50:b6:a6:d8:
         2c:5e:12:96:4a:1f:13:ab:d0:2f:70:91:b2:f0:f8:30:ed:f9:
         0d:dd:cb:37:76:57:6d:56:42:e3:71:e0:14:f6:77:e3:85:ae:
         e4:1b:e1:88:0c:2c:7c:06:e9:76:e9:40:81:2a:78:c8:8a:9c:
         05:9d:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:49:05 2025 by rpki-client