Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230372e302f32342d3234203d3e203532373830.roa
File:                     3137372e33392e3230372e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          KMAz/9lOc1Mt1WLZ5+Z95IlnkqwWgMp0cO9Td0/PIvY=
Subject key identifier:   31:9B:31:2D:E4:78:A3:70:F0:BA:B5:67:56:05:66:CD:8D:0D:98:23
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       27595E79F10EE37DA04A96EB62539F61551B5F8B
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230372e302f32342d3234203d3e203532373830.roa
Signing time:             Thu 06 Mar 2025 15:33:24 +0000
ROA not before:           Thu 06 Mar 2025 15:28:24 +0000
ROA not after:            Thu 05 Mar 2026 15:33:24 +0000
asID:                     52780
IP address blocks:        177.39.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:59:5e:79:f1:0e:e3:7d:a0:4a:96:eb:62:53:9f:61:55:1b:5f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Mar  6 15:28:24 2025 GMT
            Not After : Mar  5 15:33:24 2026 GMT
        Subject: CN=319B312DE478A370F0BAB567560566CD8D0D9823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:67:cd:9e:4c:bc:1f:c5:33:dc:90:1d:e2:21:
                    d4:49:93:33:c0:cb:62:6c:9b:83:08:e6:9f:d3:e0:
                    4f:81:89:08:97:ba:50:c0:87:08:77:c6:5f:8f:d3:
                    a1:71:b8:76:dd:6d:39:08:0e:ca:eb:16:d0:ad:4d:
                    82:65:da:3c:74:4d:e9:8e:98:22:dd:c7:4d:62:ef:
                    fe:12:99:4e:0e:7d:52:49:b7:04:67:d7:15:1b:ae:
                    b3:0c:01:44:3e:1e:55:d8:03:84:3a:fa:3a:9e:0d:
                    37:f9:60:20:27:e0:c2:3e:01:22:3b:b0:d6:98:a7:
                    4c:93:3f:5d:6b:12:60:c2:ce:cc:8e:d8:15:f9:14:
                    f4:da:e0:40:f1:29:e9:98:bd:6c:dd:7d:69:9a:f4:
                    92:d7:b0:42:e7:e8:f8:4b:f8:ea:7d:b9:18:09:bc:
                    e4:ec:4f:be:05:56:c5:d1:48:72:ba:c4:f9:ee:36:
                    46:a3:56:8e:ee:4f:d1:53:eb:ac:ec:18:b9:52:d6:
                    da:cb:c5:a8:b3:23:bd:76:7c:12:27:da:38:54:d4:
                    3f:7c:9c:a7:81:4f:27:41:76:42:5f:d6:9e:64:5c:
                    9a:12:aa:48:2f:ea:bd:62:41:9f:14:52:c4:ac:58:
                    06:f4:7e:0f:8b:83:c4:b4:95:50:23:f7:0b:ae:8f:
                    5a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9B:31:2D:E4:78:A3:70:F0:BA:B5:67:56:05:66:CD:8D:0D:98:23
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230372e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:9b:64:80:33:b3:cc:3a:96:f1:21:83:fa:77:19:1c:3f:b3:
         bf:1a:10:a5:40:66:56:88:6c:45:fe:4e:12:aa:25:0a:4c:4f:
         c5:34:47:2a:26:2e:3e:2f:b2:7d:d2:7d:ad:71:4b:31:d0:34:
         af:58:8e:b5:29:5d:96:13:73:99:d6:80:01:74:19:6d:9c:ba:
         7a:0e:26:df:87:db:4f:eb:7f:86:78:e9:82:db:50:f2:2f:50:
         47:58:df:95:3e:0d:ea:de:fb:31:eb:06:9d:95:1b:66:d4:0b:
         12:3b:87:4e:6c:3c:94:67:b4:4c:cd:41:f1:19:47:46:a0:70:
         71:56:1b:0a:88:62:96:9b:d2:04:e5:5b:7d:46:97:4a:3f:04:
         1d:28:1d:40:16:fa:8c:09:5d:e3:75:d9:87:06:7d:1a:70:1d:
         e5:26:d5:a2:46:cc:8f:98:e8:78:e6:ce:32:2b:0d:56:b8:d7:
         87:58:c8:a3:28:2c:60:1b:5c:e3:bb:b4:cf:62:4d:53:13:e3:
         81:96:96:28:39:02:7f:50:b5:6c:2b:ac:9c:d4:3e:40:d7:ae:
         08:42:e2:e3:df:34:0b:a4:93:f2:44:dd:05:f5:a2:75:de:4b:
         92:38:93:c7:96:dd:af:79:f9:99:19:20:3b:18:b9:5f:d1:be:
         96:7d:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:22:49 2025 by rpki-client