Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230342e302f32332d3233203d3e203532373830.roa
File:                     3137372e33392e3230342e302f32332d3233203d3e203532373830.roa (raw, json)
Hash identifier:          cS0TB+SUgeExmVCVNtOfpAwib6+iomwhPkWWEIWgySY=
Subject key identifier:   2C:15:3D:7B:49:0E:0F:15:AF:59:71:34:70:C4:30:D4:4D:F8:10:85
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       6242B1D13479AD6706D8ED88B29E35DB81620359
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230342e302f32332d3233203d3e203532373830.roa
Signing time:             Thu 06 Mar 2025 15:33:23 +0000
ROA not before:           Thu 06 Mar 2025 15:28:23 +0000
ROA not after:            Thu 05 Mar 2026 15:33:23 +0000
asID:                     52780
IP address blocks:        177.39.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 13:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:42:b1:d1:34:79:ad:67:06:d8:ed:88:b2:9e:35:db:81:62:03:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Mar  6 15:28:23 2025 GMT
            Not After : Mar  5 15:33:23 2026 GMT
        Subject: CN=2C153D7B490E0F15AF59713470C430D44DF81085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:0e:81:c4:59:97:1a:11:d1:1c:3a:f3:d7:
                    b8:97:f4:5b:70:d6:53:db:af:01:0a:95:76:db:9b:
                    32:bf:51:5a:d2:82:2f:82:54:a7:61:6c:d1:86:2c:
                    dc:d9:a0:62:82:95:7e:ce:db:2e:88:12:aa:c8:ca:
                    41:72:52:8e:c1:6f:2c:5f:57:7e:9d:68:be:59:09:
                    2f:9c:79:63:64:e5:66:dc:ef:e7:84:67:29:22:d3:
                    4f:43:9f:63:35:11:9c:a4:6d:a4:23:d7:18:9b:1e:
                    dc:ee:f4:ff:ca:82:89:7b:ef:2e:6b:be:41:fa:47:
                    9a:78:63:2e:e2:a5:92:2b:43:7b:8d:b2:3c:8d:35:
                    f9:9e:c4:62:da:58:bc:fc:09:a9:d8:34:66:3a:0e:
                    ca:46:b0:f3:e3:0e:65:60:b2:a3:44:c0:83:44:60:
                    ce:be:aa:4f:8c:67:da:31:a3:95:8d:b2:5d:a4:55:
                    42:b2:e7:80:4f:95:83:63:c0:fd:e9:e5:a5:3a:29:
                    9f:0e:3c:2b:6b:f4:1b:ab:9b:f4:ee:3b:f7:65:14:
                    44:aa:f6:c2:15:e7:3a:b8:b5:b3:7a:82:1f:6c:e9:
                    11:10:c2:eb:5d:73:20:c6:65:12:d1:74:b1:51:6a:
                    c4:03:f3:eb:c7:b7:be:3e:dd:db:3f:70:da:b5:e9:
                    86:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:15:3D:7B:49:0E:0F:15:AF:59:71:34:70:C4:30:D4:4D:F8:10:85
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230342e302f32332d3233203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:f4:39:c4:c3:91:df:a8:ca:8c:0a:99:73:1b:6d:1f:58:8f:
         bf:a0:b1:d5:68:69:55:e2:c4:05:c1:a2:bb:51:93:d0:06:a7:
         df:2e:f3:93:9b:3e:97:06:16:51:e0:c7:1c:d7:b2:78:db:7e:
         64:9d:60:0a:29:e9:e4:3e:ad:97:93:a0:d9:e6:71:fa:b3:a6:
         b6:f1:23:89:38:5b:0a:b4:1a:11:48:cd:71:4b:89:96:a7:d0:
         be:1a:2f:03:ff:1b:86:4c:82:2f:f9:8d:e8:76:b6:44:f3:18:
         63:f5:3f:29:ed:b2:41:4e:a5:6e:90:59:54:7a:f4:64:1b:f9:
         db:09:a7:64:32:5c:f5:7c:b7:df:22:2e:29:72:6d:28:a2:ca:
         75:02:9a:0e:08:82:54:26:62:b5:8e:b6:ff:5a:62:9e:8c:b3:
         f6:dc:6f:af:97:60:57:50:3a:17:0d:d5:57:bd:79:2e:ba:2f:
         90:17:2a:24:09:75:a0:32:5f:ad:e3:7f:6f:0c:3a:dc:b4:fe:
         df:d2:b6:19:9e:6d:9e:bb:cc:3d:aa:b2:b7:b6:bd:89:4b:86:
         07:21:e4:b4:93:15:db:75:5a:4f:6a:ec:c7:26:29:6d:e7:40:
         b9:28:8d:d3:63:5f:6b:9a:45:cf:38:64:0f:87:0d:7f:55:69:
         c0:3a:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:17:14 2025 by rpki-client