Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/3137372e33392e3133392e302f32342d3234203d3e20323632343330.roa
File:                     3137372e33392e3133392e302f32342d3234203d3e20323632343330.roa (raw, json)
Hash identifier:          Vpt2lSSGQZ+zqcZFwvwSQntN1abmi/oLWyJMDj5FYY0=
Subject key identifier:   D0:DE:86:EA:85:3C:62:DE:9B:AB:CD:74:9E:EB:4C:7F:3C:BF:AA:2D
Certificate issuer:       /CN=D968B6511EF07778C01FA7FFE031522476B79B01
Certificate serial:       1D7EB5314F2E65B8167AE439CA215CFB0B3CFA00
Authority key identifier: D9:68:B6:51:1E:F0:77:78:C0:1F:A7:FF:E0:31:52:24:76:B7:9B:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D968B6511EF07778C01FA7FFE031522476B79B01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/3137372e33392e3133392e302f32342d3234203d3e20323632343330.roa
Signing time:             Wed 18 Dec 2024 14:16:09 +0000
ROA not before:           Wed 18 Dec 2024 14:11:09 +0000
ROA not after:            Wed 17 Dec 2025 14:16:09 +0000
asID:                     262430
IP address blocks:        177.39.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.crl
                          rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D968B6511EF07778C01FA7FFE031522476B79B01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 05:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7e:b5:31:4f:2e:65:b8:16:7a:e4:39:ca:21:5c:fb:0b:3c:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D968B6511EF07778C01FA7FFE031522476B79B01
        Validity
            Not Before: Dec 18 14:11:09 2024 GMT
            Not After : Dec 17 14:16:09 2025 GMT
        Subject: CN=D0DE86EA853C62DE9BABCD749EEB4C7F3CBFAA2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:69:bc:be:b4:1a:d2:4a:62:f3:a6:c4:b4:8d:
                    ed:14:02:ce:c1:56:a8:d4:38:46:85:74:28:79:2f:
                    fe:60:25:8e:dd:46:d3:0d:82:e5:d5:46:28:ae:80:
                    58:a8:ef:7d:d5:c1:d0:5f:e2:f7:61:95:ba:08:e3:
                    5c:a5:9f:d0:23:0d:b7:ef:d0:00:76:60:d1:71:23:
                    a3:13:69:7e:77:5f:de:6d:62:11:75:c1:10:11:02:
                    96:5b:28:56:ee:89:da:a7:41:be:8b:89:47:fe:68:
                    b6:a8:72:10:94:66:aa:63:a1:74:3f:f6:2c:87:81:
                    84:ef:b7:da:3e:9d:29:67:24:96:fb:26:94:f3:62:
                    1d:93:8d:b4:78:e0:fd:f3:8a:5c:1a:03:70:44:76:
                    b2:ca:05:09:13:11:4a:bb:6f:3e:76:3f:62:59:a2:
                    0d:0d:d2:55:e3:a8:40:54:5d:a7:82:7d:6e:20:2d:
                    d9:53:15:55:33:76:f9:9c:46:e9:d1:6e:c2:66:ad:
                    26:2a:63:67:65:18:4f:7d:d3:98:2c:d6:71:81:8a:
                    b9:e5:0d:5b:ad:5d:25:44:15:52:3d:5f:e0:0b:d1:
                    67:a8:83:bd:05:01:6c:38:85:f3:aa:7c:5d:39:28:
                    10:e0:3a:42:40:d3:97:62:8c:71:ce:d0:b7:d4:f4:
                    ef:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DE:86:EA:85:3C:62:DE:9B:AB:CD:74:9E:EB:4C:7F:3C:BF:AA:2D
            X509v3 Authority Key Identifier:
                keyid:D9:68:B6:51:1E:F0:77:78:C0:1F:A7:FF:E0:31:52:24:76:B7:9B:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/D968B6511EF07778C01FA7FFE031522476B79B01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D968B6511EF07778C01FA7FFE031522476B79B01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/3137372e33392e3133392e302f32342d3234203d3e20323632343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:15:42:bc:e2:43:1d:7a:b3:c1:f2:c2:1c:a1:74:15:68:3c:
         93:92:dc:3b:8f:49:75:e5:e0:10:3d:b6:19:b0:ba:c5:4e:4b:
         a9:47:b5:70:05:fb:fe:05:90:2a:d0:cc:08:5f:a0:1b:4a:44:
         07:7c:de:6b:82:36:2e:d0:28:84:78:ae:79:39:1c:8b:77:c8:
         e6:f2:b3:93:08:47:7a:83:1d:ad:18:3e:81:5a:f3:bc:02:c3:
         ee:3e:dc:a1:57:59:8c:f9:f6:e7:cf:a6:ed:3b:97:e0:c3:4b:
         8e:ec:93:6d:38:77:11:71:23:25:b5:f9:0e:eb:dc:58:76:b0:
         2f:1f:af:b8:fc:94:90:5b:f5:8d:3b:ef:f7:e2:2a:ab:61:23:
         5a:8b:e9:b1:29:82:8b:83:ac:9f:3c:a6:85:e3:22:46:f7:2f:
         3b:88:13:50:80:51:5c:89:fc:df:d5:c6:99:3a:c8:d2:ba:1a:
         06:e6:24:01:97:b0:e4:25:bf:6f:4e:5f:b9:8e:e2:74:70:f4:
         d7:07:e5:60:69:b1:35:ee:1c:d3:a5:36:f7:46:61:ce:a4:3d:
         b3:50:88:7f:a6:d7:f9:00:41:50:d0:c3:02:75:95:10:6f:ea:
         d2:5d:12:8c:28:85:c5:8b:27:85:3d:cf:b2:93:eb:c4:6d:99:
         d1:a5:26:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:30:18 2025 by rpki-client