Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/3137372e32312e3135362e302f32322d3234203d3e20323731373035.roa
File:                     3137372e32312e3135362e302f32322d3234203d3e20323731373035.roa (raw, json)
Hash identifier:          72j95FaM0navZdslVgh4hGClgunan1zRaNgPGRT9f50=
Subject key identifier:   85:CC:C2:7F:48:FE:4D:78:B6:8C:7E:C9:FD:13:49:8C:AD:0F:12:A5
Certificate issuer:       /CN=810076D4984418ED05F03F761B6CBE5D6F00DC86
Certificate serial:       3CCEB3B4C7133ED279F2AD3CBA0F4016F23BBCE8
Authority key identifier: 81:00:76:D4:98:44:18:ED:05:F0:3F:76:1B:6C:BE:5D:6F:00:DC:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/3137372e32312e3135362e302f32322d3234203d3e20323731373035.roa
Signing time:             Fri 17 Jan 2025 13:14:48 +0000
ROA not before:           Fri 17 Jan 2025 13:09:48 +0000
ROA not after:            Fri 16 Jan 2026 13:14:48 +0000
asID:                     271705
IP address blocks:        177.21.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl
                          rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ce:b3:b4:c7:13:3e:d2:79:f2:ad:3c:ba:0f:40:16:f2:3b:bc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810076D4984418ED05F03F761B6CBE5D6F00DC86
        Validity
            Not Before: Jan 17 13:09:48 2025 GMT
            Not After : Jan 16 13:14:48 2026 GMT
        Subject: CN=85CCC27F48FE4D78B68C7EC9FD13498CAD0F12A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:e7:72:84:87:b0:8f:c0:4d:7a:f4:fb:f4:
                    94:ea:64:68:4d:b4:d2:16:78:24:c0:04:06:ca:52:
                    88:04:3f:8d:95:aa:94:6f:ab:56:1c:ca:e4:00:c8:
                    22:cc:36:6e:cd:e8:ad:4c:e5:fb:c3:5e:d8:a4:0e:
                    0a:0f:40:60:83:d5:76:a5:1e:15:e2:bd:a2:20:0e:
                    39:3b:74:bd:35:d3:07:ee:37:59:dc:20:3b:62:81:
                    26:2b:69:2d:b2:2f:2b:0c:ee:f3:cb:95:2a:5a:c7:
                    62:5f:d0:18:60:13:0c:ac:f5:e3:1b:d7:68:22:95:
                    5f:5b:5e:56:e9:45:0f:f0:ae:fb:d0:8e:15:de:53:
                    72:68:c2:97:0d:57:86:d8:d7:9b:57:41:d0:d5:54:
                    0e:2a:9d:2c:fc:88:c8:dc:b3:c3:ac:d8:9c:26:91:
                    71:3f:8e:98:f7:dc:a5:76:26:44:83:14:38:46:4c:
                    0b:82:fa:d1:96:92:7d:e4:d2:98:a1:3c:71:c2:12:
                    30:f1:d3:a7:32:d7:8e:89:d0:01:23:04:29:01:bd:
                    37:1e:26:9e:d9:64:98:0a:00:53:82:21:55:b7:61:
                    86:b2:99:d4:0a:2d:bc:49:0b:ed:72:11:19:de:f9:
                    17:e5:40:a4:74:0e:55:87:10:73:9a:a1:d2:15:56:
                    4a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CC:C2:7F:48:FE:4D:78:B6:8C:7E:C9:FD:13:49:8C:AD:0F:12:A5
            X509v3 Authority Key Identifier:
                keyid:81:00:76:D4:98:44:18:ED:05:F0:3F:76:1B:6C:BE:5D:6F:00:DC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810076D4984418ED05F03F761B6CBE5D6F00DC86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/1/3137372e32312e3135362e302f32322d3234203d3e20323731373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:60:0e:80:45:60:92:f1:66:6c:7b:63:2a:6a:0e:9c:e4:86:
         e4:68:be:0b:d0:ee:e0:a4:2f:21:43:3f:cf:e3:e6:e5:2b:48:
         a0:fe:aa:f8:a3:c6:43:fd:c3:92:a9:a9:a7:ec:7a:7f:3e:90:
         ab:90:c6:04:ae:b5:90:79:59:b7:77:b7:8a:8d:b6:ae:98:59:
         81:9d:6f:71:0b:73:6b:ec:f6:e2:e1:78:07:6f:01:51:ac:b4:
         ad:4f:5a:42:8d:c3:88:36:b2:53:32:e0:62:97:4d:92:04:94:
         68:88:57:67:de:16:c8:cd:07:78:b0:35:11:ff:5e:88:99:7c:
         0e:b0:59:dc:f3:7b:05:58:7b:0e:a2:77:8f:e6:74:60:f1:9f:
         55:26:9a:bf:a5:a1:a0:c6:ed:bd:c3:ae:51:ff:1f:30:ee:df:
         a3:6c:9f:a0:1c:e6:b7:79:55:be:49:52:4c:19:a4:5c:f1:57:
         a9:0e:f6:4a:8d:f7:73:67:5f:47:8b:42:fc:f4:2f:b7:a8:20:
         34:c6:3f:66:ff:ec:a8:dc:9a:b6:2b:be:a0:36:ae:e2:74:6b:
         44:06:ba:8c:0d:89:ed:a3:91:2d:11:c3:c2:31:11:cb:1c:88:
         32:ca:77:50:c7:2d:2f:28:a5:04:9f:8b:da:eb:0b:28:39:79:
         7b:c0:ed:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:53:25 2025 by rpki-client