Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/3137372e33392e3133382e302f32342d3234203d3e20323632343330.roa
File:                     3137372e33392e3133382e302f32342d3234203d3e20323632343330.roa (raw, json)
Hash identifier:          Als/7Mh8bNibakh3eLi2jwPgshDdg8AAeramgxjF7NI=
Subject key identifier:   D5:CE:6A:5D:9E:60:2E:3A:CB:8F:CC:90:10:74:1B:AC:FB:B0:FB:78
Certificate issuer:       /CN=D968B6511EF07778C01FA7FFE031522476B79B01
Certificate serial:       0C25DB14E529224EF032C638BBAA8AB451A80C98
Authority key identifier: D9:68:B6:51:1E:F0:77:78:C0:1F:A7:FF:E0:31:52:24:76:B7:9B:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D968B6511EF07778C01FA7FFE031522476B79B01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/3137372e33392e3133382e302f32342d3234203d3e20323632343330.roa
Signing time:             Wed 18 Dec 2024 14:16:06 +0000
ROA not before:           Wed 18 Dec 2024 14:11:06 +0000
ROA not after:            Wed 17 Dec 2025 14:16:06 +0000
asID:                     262430
IP address blocks:        177.39.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.crl
                          rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D968B6511EF07778C01FA7FFE031522476B79B01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 05:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:25:db:14:e5:29:22:4e:f0:32:c6:38:bb:aa:8a:b4:51:a8:0c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D968B6511EF07778C01FA7FFE031522476B79B01
        Validity
            Not Before: Dec 18 14:11:06 2024 GMT
            Not After : Dec 17 14:16:06 2025 GMT
        Subject: CN=D5CE6A5D9E602E3ACB8FCC9010741BACFBB0FB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:24:3f:00:32:35:72:0b:5a:47:c6:1d:63:
                    b8:bc:83:15:16:7d:3c:92:fd:13:f5:2f:0c:ec:35:
                    8f:8c:fb:c4:13:d2:01:f5:b9:a4:a5:5b:4c:55:eb:
                    cc:8c:04:ac:cf:ce:3d:91:58:2e:6a:74:51:c4:1b:
                    39:30:dd:cf:e1:7e:bf:f1:bd:ec:24:c7:1e:9a:62:
                    74:fa:a5:19:e6:53:79:c9:1b:27:7f:ee:18:11:6f:
                    df:7c:0c:01:0b:8a:e9:fe:79:f8:73:47:c8:52:00:
                    09:48:6c:ab:bd:3e:89:ff:dd:39:a3:c0:57:b7:85:
                    e0:72:48:1d:c0:f3:16:0e:17:10:bb:8b:92:56:ca:
                    d5:4e:31:f6:ec:56:72:f5:61:99:ac:b0:24:45:00:
                    3a:28:c7:cd:24:49:8e:dc:de:05:2a:ce:c4:89:f2:
                    df:eb:f9:0d:c5:09:a7:be:ec:eb:d0:f0:55:4e:ba:
                    b3:a8:21:72:d9:5c:71:35:be:50:c0:c4:8d:8a:a4:
                    69:90:3a:c7:61:1f:f0:60:e9:13:8b:41:08:5d:85:
                    c9:90:47:13:57:37:ce:74:86:f4:86:8a:a2:17:24:
                    2b:39:1a:4a:ae:bd:36:7c:33:a6:2a:98:ce:4b:29:
                    b1:28:96:13:6a:92:12:45:e2:1c:b4:c3:e1:f2:77:
                    15:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CE:6A:5D:9E:60:2E:3A:CB:8F:CC:90:10:74:1B:AC:FB:B0:FB:78
            X509v3 Authority Key Identifier:
                keyid:D9:68:B6:51:1E:F0:77:78:C0:1F:A7:FF:E0:31:52:24:76:B7:9B:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D968B6511EF07778C01FA7FFE031522476B79B01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/3137372e33392e3133382e302f32342d3234203d3e20323632343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:39:67:a3:f5:66:a3:85:84:21:7e:5e:81:3e:c3:05:ae:82:
         ca:91:20:4b:c2:d5:ea:f2:7d:b1:59:bf:95:8d:ba:0b:40:d0:
         54:b4:e3:02:20:b2:b0:15:86:e8:68:93:74:68:00:09:26:3e:
         1e:41:1a:af:d5:ee:3c:30:d4:2f:0f:07:a5:92:e1:7d:3f:99:
         f3:82:06:6e:65:24:ca:99:87:71:70:94:13:79:1c:f1:8e:85:
         ec:17:e8:e6:83:66:a8:4b:05:a2:c0:36:91:25:7a:e7:d9:d5:
         08:52:c6:e7:f3:a7:1e:a4:73:4b:ab:61:0d:60:9c:b3:45:ff:
         b4:3f:fc:e4:20:1a:24:4f:7c:cb:40:6b:57:04:73:9c:b9:61:
         34:9c:4a:f8:30:62:c4:cc:ed:ef:57:3c:41:07:93:58:38:b6:
         d5:4e:d2:3c:73:f6:31:46:8b:6a:f0:5c:01:d6:81:2e:a9:9f:
         e0:ef:1e:d6:2c:ad:75:17:f1:d0:0e:04:a2:ba:24:2a:26:97:
         e0:fa:14:43:a3:21:6a:29:6f:41:1f:a5:7b:d2:87:1d:b7:e7:
         e0:e9:49:e1:a6:42:54:4a:98:57:f9:d4:b8:0d:c8:e8:a5:00:
         fb:d7:b5:45:ed:fc:0d:32:a1:fa:33:60:3b:e2:1e:2d:28:36:
         cb:1b:72:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:30:18 2025 by rpki-client