Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e36362e3136342e302f32322d3232203d3e20323733363833.roa
File:                     3137372e36362e3136342e302f32322d3232203d3e20323733363833.roa (raw, json)
Hash identifier:          OXxMOGcpfkne2JmsoEnJZeRbXgCDc7Z611jAf/oyPbw=
Subject key identifier:   CB:5C:F3:8D:47:18:E9:AE:D2:58:1E:EF:6A:0D:0D:79:25:E1:EF:07
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       01164219EEA5092308B5FBFF9ACE411A8385548B
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e36362e3136342e302f32322d3232203d3e20323733363833.roa
Signing time:             Fri 04 Oct 2024 04:16:15 +0000
ROA not before:           Fri 04 Oct 2024 04:11:15 +0000
ROA not after:            Fri 03 Oct 2025 04:16:15 +0000
asID:                     273683
IP address blocks:        177.66.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 17:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:16:42:19:ee:a5:09:23:08:b5:fb:ff:9a:ce:41:1a:83:85:54:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  4 04:11:15 2024 GMT
            Not After : Oct  3 04:16:15 2025 GMT
        Subject: CN=CB5CF38D4718E9AED2581EEF6A0D0D7925E1EF07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a4:d6:4e:0d:32:13:a1:a0:ca:a7:75:a6:80:
                    b5:36:a0:83:8c:d6:7f:3c:a7:3f:d6:56:6a:2b:d0:
                    84:52:3e:57:9e:9c:b1:b1:c3:89:08:88:e0:53:41:
                    9b:92:21:11:8f:c3:dc:3a:ab:3f:ec:7b:33:96:d5:
                    d7:f3:a1:d9:70:b0:76:64:fa:ea:d7:6b:bd:50:6a:
                    b8:4a:b4:57:55:dc:79:b8:75:41:6e:55:c9:89:e2:
                    42:12:ad:2e:11:2c:99:23:dd:ce:08:87:ea:12:6e:
                    33:d6:78:18:65:02:41:fc:92:e9:79:f2:6b:c1:49:
                    f2:97:69:15:03:f4:cd:b1:65:22:09:d9:0c:10:09:
                    d3:90:b8:71:93:cb:e0:62:77:03:0d:11:69:d1:08:
                    fb:fc:b4:e1:fb:2a:05:c5:4e:67:20:5a:b0:bf:6c:
                    80:af:b8:71:0f:e6:f1:4d:e3:e5:b2:53:de:75:84:
                    03:26:df:20:6d:65:8d:cd:3a:46:e0:8f:79:39:0d:
                    da:48:ee:2d:30:f9:8d:52:61:41:22:a8:da:0c:9d:
                    a3:be:ea:61:d1:ca:56:15:78:51:46:4e:ed:d0:01:
                    07:ef:2f:2d:c7:5f:7e:da:54:6d:d5:29:41:47:c9:
                    63:32:50:a4:2e:4a:69:c6:0b:f9:16:cd:b8:87:a0:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5C:F3:8D:47:18:E9:AE:D2:58:1E:EF:6A:0D:0D:79:25:E1:EF:07
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3137372e36362e3136342e302f32322d3232203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:8d:6a:76:3f:3b:cb:f3:e3:df:d6:d6:85:15:78:f3:38:
         ce:13:67:99:92:4e:90:21:b2:37:b8:a1:b2:4f:ac:46:b7:8a:
         83:28:ed:0d:06:a5:d3:10:91:46:fc:ab:36:0d:55:47:3d:27:
         96:24:f1:10:37:99:2a:ab:8b:54:c0:3e:87:02:88:39:e4:50:
         2c:d2:a1:d4:18:60:06:42:d6:94:7a:86:d1:c9:53:90:2a:23:
         66:ce:26:c2:0f:93:bd:9b:1c:2b:cd:4d:33:b1:d1:ae:4b:94:
         a5:2d:4b:f1:1e:90:20:68:48:bd:da:0d:0c:72:4e:1e:72:c3:
         13:76:e0:4b:4a:5b:dc:4a:a0:7c:93:1f:fd:79:f4:28:a0:7f:
         9d:8f:c6:f1:28:e2:a9:a5:a7:4c:be:b7:97:4d:68:1a:08:37:
         34:3c:45:c2:19:85:5c:29:ae:aa:ce:76:c2:55:5a:b3:ad:85:
         06:51:1b:e6:d4:72:d1:af:b5:91:7d:63:98:4d:24:1c:a5:b9:
         f8:65:76:b5:39:8b:37:08:92:90:31:68:15:90:ad:ca:d9:6b:
         11:09:73:7c:be:cf:50:d0:13:b9:7c:80:5c:c0:48:11:02:6e:
         60:ac:9e:35:d2:a0:98:09:73:e2:e9:fc:32:b6:63:14:2b:00:
         a7:29:59:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:22:52 2025 by rpki-client