Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e32312e302f32342d3234203d3e203533323235.roa
File:                     3137372e3133372e32312e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          xrfix1QN4QojRY5XwK+GlszRKptE0+8346c4bTXAv+k=
Subject key identifier:   59:18:23:01:A5:D5:35:5E:6B:67:10:D2:BD:12:BF:E6:1F:30:63:56
Certificate issuer:       /CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
Certificate serial:       4F59D06E4E679811F508BC0C5B88161E6AFCA9D2
Authority key identifier: 76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e32312e302f32342d3234203d3e203533323235.roa
Signing time:             Fri 21 Feb 2025 13:56:11 +0000
ROA not before:           Fri 21 Feb 2025 13:51:11 +0000
ROA not after:            Fri 20 Feb 2026 13:56:11 +0000
asID:                     53225
IP address blocks:        177.137.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:59:d0:6e:4e:67:98:11:f5:08:bc:0c:5b:88:16:1e:6a:fc:a9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
        Validity
            Not Before: Feb 21 13:51:11 2025 GMT
            Not After : Feb 20 13:56:11 2026 GMT
        Subject: CN=59182301A5D5355E6B6710D2BD12BFE61F306356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:77:b0:f6:d7:08:68:85:e8:11:67:78:aa:
                    97:f1:4d:87:8d:af:57:e0:9b:02:b5:11:8e:71:20:
                    a6:43:d4:12:1e:27:57:ee:a2:a2:a0:83:de:7d:fa:
                    c9:70:bc:20:2d:c8:74:56:71:ab:63:c8:f4:da:6b:
                    9a:f8:b2:9c:b6:6d:45:45:7c:72:b0:5f:b5:0b:cb:
                    d9:a6:e8:b7:de:a3:98:de:78:f8:54:9e:56:4c:65:
                    ee:3b:b7:a5:de:30:02:ca:f2:86:a0:76:d8:16:46:
                    ba:46:a5:6d:0c:69:6e:5d:b0:40:6d:aa:5a:95:87:
                    cd:ad:d8:b6:ae:8e:63:63:3b:36:bb:8a:ee:0f:fd:
                    16:9f:ff:42:53:d4:24:5e:a8:69:ce:94:4f:40:78:
                    50:47:98:5e:d7:21:bd:af:42:59:47:29:b8:9b:a8:
                    17:92:63:02:41:06:7a:90:e8:ac:c6:7f:c3:bf:f7:
                    88:ac:c0:a3:bc:12:64:c3:0a:1a:6b:65:bd:a1:de:
                    d8:43:0d:ef:f6:ef:b9:a0:d8:be:c7:c8:4c:ff:89:
                    a6:ed:22:2b:a2:49:67:7b:0e:a0:26:ce:ce:50:7a:
                    c1:83:6d:c3:ca:4a:84:9d:c1:84:7a:8c:25:99:6c:
                    5f:25:cd:28:90:36:74:91:85:4a:68:fc:d2:7b:a3:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:18:23:01:A5:D5:35:5E:6B:67:10:D2:BD:12:BF:E6:1F:30:63:56
            X509v3 Authority Key Identifier:
                keyid:76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e32312e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:2c:77:7a:7e:dc:b3:c5:6a:d7:1a:34:cd:86:ba:8c:19:8f:
         01:0c:6d:7e:93:88:79:b5:80:24:00:17:2b:93:ec:77:26:9c:
         d0:46:96:ed:d2:b2:f8:22:98:86:32:fc:00:84:09:b7:aa:8a:
         26:ab:c2:cb:fc:49:82:4d:6d:6d:44:70:bb:1a:78:77:6a:38:
         9f:04:d2:5a:a2:b0:cc:73:d7:c1:e7:8c:29:5f:45:e2:cd:4e:
         f6:56:3d:78:36:99:70:3d:52:cc:28:86:53:ba:f4:b8:3e:f0:
         40:02:1d:df:36:6e:a0:8b:9f:99:2e:84:67:87:de:c5:f2:db:
         5c:07:a9:2f:b8:99:95:28:72:91:5a:24:8a:e8:48:ba:30:35:
         3e:ef:21:88:47:92:9c:78:83:c0:a3:19:78:3c:f7:08:8e:ab:
         ff:3f:e1:57:f9:cf:53:6c:a5:bd:e5:50:71:ce:a3:03:b7:79:
         1d:88:e1:82:4d:eb:f9:13:6d:ce:1f:97:62:f8:5a:6d:37:9e:
         d3:8e:16:3d:69:2c:b5:19:4c:61:42:c6:13:6a:72:f9:76:e6:
         27:55:bf:ec:aa:89:08:1c:91:71:58:58:6b:ac:9b:50:e6:d6:
         68:88:2d:61:37:91:88:6a:e2:9c:bf:c7:9f:ce:d6:f7:59:29:
         57:16:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:16:50 2025 by rpki-client