Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3137372e382e36392e302f32342d3234203d3e20323733373739.roa
File:                     3137372e382e36392e302f32342d3234203d3e20323733373739.roa (raw, json)
Hash identifier:          aUEqXod2EwWVWMbCduYFxxfcgLT4y6ntI5xJACs/O9w=
Subject key identifier:   0B:02:21:29:97:EE:42:71:4F:BE:04:CD:D2:47:5E:9A:9B:A3:51:03
Certificate issuer:       /CN=3A4D1E80E5B0893415C8E147E628E125139A1ADF
Certificate serial:       6DF9EF34797F894ECBDEB059BF7C489AFB6BB3E0
Authority key identifier: 3A:4D:1E:80:E5:B0:89:34:15:C8:E1:47:E6:28:E1:25:13:9A:1A:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A4D1E80E5B0893415C8E147E628E125139A1ADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3137372e382e36392e302f32342d3234203d3e20323733373739.roa
Signing time:             Thu 27 Mar 2025 20:17:14 +0000
ROA not before:           Thu 27 Mar 2025 20:12:14 +0000
ROA not after:            Thu 26 Mar 2026 20:17:14 +0000
asID:                     273779
IP address blocks:        177.8.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3A4D1E80E5B0893415C8E147E628E125139A1ADF.crl
                          rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3A4D1E80E5B0893415C8E147E628E125139A1ADF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A4D1E80E5B0893415C8E147E628E125139A1ADF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f9:ef:34:79:7f:89:4e:cb:de:b0:59:bf:7c:48:9a:fb:6b:b3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A4D1E80E5B0893415C8E147E628E125139A1ADF
        Validity
            Not Before: Mar 27 20:12:14 2025 GMT
            Not After : Mar 26 20:17:14 2026 GMT
        Subject: CN=0B02212997EE42714FBE04CDD2475E9A9BA35103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:34:74:d7:2c:88:42:97:dd:2b:04:56:f0:6f:
                    69:cc:be:e6:dd:69:f7:7b:f9:da:ca:66:d9:7e:c6:
                    a3:a0:01:1f:7c:ec:60:af:6a:78:41:d4:79:c2:52:
                    d0:3e:fa:4b:1d:2d:5c:ef:2d:cb:15:9b:5e:4c:79:
                    fe:d2:7c:94:92:0b:15:5f:9f:4b:a1:a2:e3:79:48:
                    5a:04:25:4a:7b:e3:d1:00:16:8e:2f:8c:27:6e:ac:
                    ce:9d:e3:98:f2:89:68:51:bd:ce:87:8d:3e:40:1c:
                    ef:78:14:f4:7e:a7:a0:87:2c:ab:8d:ac:f4:37:42:
                    8f:ce:d4:30:48:9a:2e:3b:71:56:05:1c:66:81:81:
                    2d:b0:54:13:de:f2:42:4b:75:9b:8d:1d:cb:19:b4:
                    17:03:00:30:83:bb:42:95:02:fd:f0:8f:6a:00:5f:
                    41:71:d3:e4:80:06:8f:dc:18:c2:04:f9:77:32:de:
                    a4:44:b2:0b:75:19:dd:94:cc:ac:47:e7:b7:73:95:
                    d5:4b:a6:76:4f:7b:81:98:ee:57:93:06:5f:d1:c2:
                    cb:fc:54:02:03:cc:3b:b8:37:e6:8c:9c:40:68:ed:
                    7f:94:a0:dc:53:c9:32:18:2e:51:a4:ec:7d:68:49:
                    3d:df:95:d9:31:49:94:31:ef:f2:4b:97:2f:bf:9b:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:02:21:29:97:EE:42:71:4F:BE:04:CD:D2:47:5E:9A:9B:A3:51:03
            X509v3 Authority Key Identifier:
                keyid:3A:4D:1E:80:E5:B0:89:34:15:C8:E1:47:E6:28:E1:25:13:9A:1A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3A4D1E80E5B0893415C8E147E628E125139A1ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A4D1E80E5B0893415C8E147E628E125139A1ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3137372e382e36392e302f32342d3234203d3e20323733373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:53:d3:31:e1:a3:f7:7f:23:56:20:ea:60:3b:41:a7:cf:3e:
         64:b2:fa:d5:7a:13:51:46:c9:47:14:f3:0a:33:98:ac:59:f1:
         93:47:22:54:db:b2:ab:13:8e:73:ae:41:26:8e:fe:10:15:ec:
         a1:cd:c8:81:62:5b:7a:07:b4:95:3d:90:42:3b:57:ed:1e:87:
         f6:c2:ce:db:8a:48:c7:0c:c9:90:77:d5:47:49:36:fb:21:34:
         6f:71:1e:98:82:a9:9b:fa:48:26:19:94:66:67:5e:c1:63:4e:
         79:61:e4:bb:ef:cb:54:32:81:3a:6d:59:7c:c6:74:a7:30:c9:
         f5:a6:d5:ea:c1:11:73:38:89:1f:7f:79:b4:f2:14:1e:e8:a4:
         ce:20:60:dc:88:cc:e4:4a:a3:7b:0d:e3:06:e4:3f:54:5b:7b:
         b7:da:d7:4e:36:50:c0:df:4b:c0:6d:9d:ca:2f:d5:97:e9:65:
         86:b0:77:03:52:c9:9e:50:07:0f:20:66:78:45:18:a0:73:6d:
         76:3b:54:d1:5f:d1:90:98:c7:ce:64:46:40:35:cf:95:85:45:
         d1:6c:e7:69:8e:51:45:25:d5:08:08:4b:f9:26:5c:e0:1c:9b:
         40:8c:ac:b9:5d:d4:23:e6:1a:a4:48:38:57:3f:d7:4e:75:a5:
         2c:d3:aa:fe
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbfnvNHl/iU7L3rBZv3xImvtrs+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E0RDFFODBFNUIwODkzNDE1QzhFMTQ3RTYyOEUxMjUx
MzlBMUFERjAeFw0yNTAzMjcyMDEyMTRaFw0yNjAzMjYyMDE3MTRaMDMxMTAvBgNV
BAMTKDBCMDIyMTI5OTdFRTQyNzE0RkJFMDRDREQyNDc1RTlBOUJBMzUxMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcNHTXLIhCl90rBFbwb2nMvubd
afd7+drKZtl+xqOgAR987GCvanhB1HnCUtA++ksdLVzvLcsVm15Mef7SfJSSCxVf
n0uhouN5SFoEJUp749EAFo4vjCdurM6d45jyiWhRvc6HjT5AHO94FPR+p6CHLKuN
rPQ3Qo/O1DBImi47cVYFHGaBgS2wVBPe8kJLdZuNHcsZtBcDADCDu0KVAv3wj2oA
X0Fx0+SABo/cGMIE+Xcy3qREsgt1Gd2UzKxH57dzldVLpnZPe4GY7leTBl/Rwsv8
VAIDzDu4N+aMnEBo7X+UoNxTyTIYLlGk7H1oST3fldkxSZQx7/JLly+/m2HrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUCwIhKZfuQnFPvgTN0kdempujUQMwHwYDVR0j
BBgwFoAUOk0egOWwiTQVyOFH5ijhJROaGt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlZwRk10ejhMMWRIQ2VSNTh5WnFWdVVCeEhjSjh2MWtaWHhRb2tITXR0
U0wvMC8zQTREMUU4MEU1QjA4OTM0MTVDOEUxNDdFNjI4RTEyNTEzOUExQURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBNEQxRTgwRTVCMDg5MzQx
NUM4RTE0N0U2MjhFMTI1MTM5QTFBREYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZWcEZNdHo4TDFkSENlUjU4eVpxVnVVQnhIY0o4djFrWlh4UW9rSE10dFNMLzAv
MzEzNzM3MmUzODJlMzYzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMzM3
MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALEIRTANBgkqhkiG9w0BAQsFAAOCAQEAJlPTMeGj938j
ViDqYDtBp88+ZLL61XoTUUbJRxTzCjOYrFnxk0ciVNuyqxOOc65BJo7+EBXsoc3I
gWJbege0lT2QQjtX7R6H9sLO24pIxwzJkHfVR0k2+yE0b3EemIKpm/pIJhmUZmde
wWNOeWHku+/LVDKBOm1ZfMZ0pzDJ9abV6sERcziJH395tPIUHuikziBg3IjM5Eqj
ew3jBuQ/VFt7t9rXTjZQwN9LwG2dyi/Vl+llhrB3A1LJnlAHDyBmeEUYoHNtdjtU
0V/RkJjHzmRGQDXPlYVF0WznaY5RRSXVCAhL+SZc4BybQIysuV3UI+YapEg4Vz/X
TnWlLNOq/g==
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:36:25 2025 by rpki-client