Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e32322e302f32342d3234203d3e203533323235.roa
File:                     3137372e3133372e32322e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          8E+3hw+zz6iayh8p35uxQxRWPT9W3ZPP2plznpyP3dc=
Subject key identifier:   EC:E8:53:B5:B9:CE:B1:DF:D7:5C:86:8C:2F:5D:63:5F:62:9C:8B:32
Certificate issuer:       /CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
Certificate serial:       611A491E961FF64E0F800099068510819EAB592F
Authority key identifier: 76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e32322e302f32342d3234203d3e203533323235.roa
Signing time:             Fri 21 Feb 2025 13:56:18 +0000
ROA not before:           Fri 21 Feb 2025 13:51:18 +0000
ROA not after:            Fri 20 Feb 2026 13:56:18 +0000
asID:                     53225
IP address blocks:        177.137.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1a:49:1e:96:1f:f6:4e:0f:80:00:99:06:85:10:81:9e:ab:59:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767F272B321E8F16F6202C66AA9057CC10E66ECA
        Validity
            Not Before: Feb 21 13:51:18 2025 GMT
            Not After : Feb 20 13:56:18 2026 GMT
        Subject: CN=ECE853B5B9CEB1DFD75C868C2F5D635F629C8B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:4a:95:78:50:b9:c2:37:e0:84:a6:77:9b:
                    cf:bf:f9:15:0d:08:df:08:d3:92:a2:2e:71:fa:9e:
                    89:46:da:98:b9:a0:6e:ca:57:f3:75:7c:db:83:98:
                    e4:a7:b1:17:66:d2:f3:f7:47:e5:7c:b2:ff:d2:4b:
                    b3:30:d3:2a:db:74:b5:53:5c:e8:ca:c4:73:08:c9:
                    87:17:c1:8a:7d:e7:d8:c7:2f:99:7e:07:94:10:31:
                    c2:d1:a7:62:16:92:81:d7:3c:a4:01:93:07:df:cc:
                    70:0a:af:7f:7e:0a:d6:f5:24:1a:41:80:96:9a:e8:
                    19:72:9e:43:fb:3b:a4:c9:f0:eb:7b:1b:fb:2c:d7:
                    a5:3e:8a:35:a1:07:5e:4a:06:d3:f5:4d:48:91:35:
                    a3:28:ed:92:d1:7b:10:a7:cb:b9:68:4e:80:e6:6c:
                    3f:bf:fb:6d:53:ce:f2:4f:b2:a5:62:b0:91:f8:fd:
                    df:d6:3b:24:85:e4:0a:d6:21:a1:66:07:64:28:a1:
                    25:05:eb:7f:44:24:f0:b6:94:07:d6:70:4d:cf:1a:
                    2e:d0:98:99:bd:6e:49:34:30:5e:04:f4:ae:77:22:
                    78:36:ec:ec:8b:23:40:17:d5:38:50:50:b2:01:e5:
                    f8:4d:cf:08:3e:3b:10:d9:8c:35:6d:bf:fe:7d:40:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E8:53:B5:B9:CE:B1:DF:D7:5C:86:8C:2F:5D:63:5F:62:9C:8B:32
            X509v3 Authority Key Identifier:
                keyid:76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/3137372e3133372e32322e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:c4:fe:03:f8:bb:b2:20:69:e4:b1:1d:37:66:98:3a:1c:b1:
         02:02:23:aa:fd:fa:94:53:26:69:4e:e6:0c:6e:db:ff:39:54:
         dc:0c:4b:a5:f6:b6:7e:5c:9b:e2:89:d1:86:29:2f:f9:a7:e0:
         dc:b5:fb:b6:2f:14:3a:89:e3:e1:74:da:83:76:84:53:53:f6:
         8a:37:37:68:a3:3c:85:6a:8b:c1:1b:22:ee:ae:c6:d2:e8:47:
         20:08:e6:33:21:6f:af:6f:56:02:e1:68:b4:7c:2c:72:d1:82:
         4d:39:c1:01:78:08:9d:79:8c:8f:f9:55:a4:e6:58:5e:5d:f2:
         68:f9:52:15:59:00:64:53:a9:29:91:23:37:ca:12:ca:75:5b:
         13:7b:fd:39:97:2a:a1:3c:54:7c:89:ca:42:6b:ba:43:d4:8c:
         9e:c8:72:44:56:d0:da:57:15:40:69:2c:6e:d2:fe:a1:d5:28:
         1d:08:2b:e8:ea:cd:fa:4f:73:27:ad:38:cd:dc:04:4f:a6:80:
         64:79:1f:6c:2e:30:ca:43:64:88:27:a5:f9:06:9e:19:b7:a2:
         a3:a8:0e:b6:00:ec:af:cd:a5:1f:a1:d5:68:a0:6e:ec:79:0e:
         a7:c6:ca:dc:7d:42:8c:c4:f1:59:04:e5:f3:f1:4d:59:d1:f1:
         8a:fc:72:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:15 2025 by rpki-client