Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133372e302f32342d3234203d3e20323731303830.roa
File:                     3137372e38362e3133372e302f32342d3234203d3e20323731303830.roa (raw, json)
Hash identifier:          D/atcLMvKF2Idxb5HIRLCDpkwyKY/xYbVaCXzt7E0Kk=
Subject key identifier:   BA:FE:EC:D8:BD:D4:D7:EA:07:C5:DE:22:EF:FB:76:E4:E0:C1:08:0D
Certificate issuer:       /CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
Certificate serial:       0900C77A476C43750B4EC3F1AC61963969C2E62D
Authority key identifier: 98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133372e302f32342d3234203d3e20323731303830.roa
Signing time:             Sat 01 Feb 2025 19:55:45 +0000
ROA not before:           Sat 01 Feb 2025 19:50:45 +0000
ROA not after:            Sat 31 Jan 2026 19:55:45 +0000
asID:                     271080
IP address blocks:        177.86.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl
                          rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:00:c7:7a:47:6c:43:75:0b:4e:c3:f1:ac:61:96:39:69:c2:e6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
        Validity
            Not Before: Feb  1 19:50:45 2025 GMT
            Not After : Jan 31 19:55:45 2026 GMT
        Subject: CN=BAFEECD8BDD4D7EA07C5DE22EFFB76E4E0C1080D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:7b:75:04:8f:8b:a6:b6:9b:63:8a:7d:4e:
                    90:40:4e:1f:13:be:66:ab:c7:1a:05:56:97:ae:f2:
                    40:93:45:18:9b:33:b4:62:d7:34:42:33:27:e4:81:
                    76:20:4a:ef:77:4e:3b:0e:ff:92:b4:78:22:0e:b8:
                    50:a4:bb:8f:c8:d2:82:28:d3:d8:14:46:43:dd:1f:
                    cb:21:13:9b:5d:52:ff:55:b9:37:07:b9:b5:a8:b6:
                    31:63:fa:83:19:50:3a:25:f6:7a:8f:d3:57:dd:74:
                    72:bf:5a:c5:65:c5:93:77:8a:74:02:90:bb:d7:18:
                    44:a8:72:44:17:1c:8d:42:04:ea:34:25:a7:c1:ba:
                    03:4d:7a:d2:be:69:ff:e2:4f:7d:11:c8:a8:3c:66:
                    53:d5:fb:08:97:f6:de:01:b2:d9:5c:5c:dd:f4:fe:
                    2e:a2:f6:a5:94:2c:a2:eb:c3:32:fe:6c:d4:6b:63:
                    f4:4c:46:a6:4e:66:c8:93:e7:49:fc:f2:3f:23:6b:
                    96:e7:5d:0d:24:b3:12:c1:39:91:b9:30:c5:68:e0:
                    49:2e:c6:ea:90:5d:b2:61:78:73:07:d9:1d:5b:f3:
                    0a:d1:08:fd:a4:18:38:6d:15:91:a0:1b:c1:81:93:
                    3e:c9:0f:a7:34:41:70:a8:de:cb:da:e2:d8:37:33:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FE:EC:D8:BD:D4:D7:EA:07:C5:DE:22:EF:FB:76:E4:E0:C1:08:0D
            X509v3 Authority Key Identifier:
                keyid:98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133372e302f32342d3234203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:df:27:9b:1a:3e:3e:ca:70:0f:76:9a:d2:95:f0:e2:df:d9:
         10:ae:b4:00:6d:29:32:81:14:4b:b5:98:d7:ea:b0:a2:a0:d8:
         5b:ff:11:ca:53:3a:4e:22:17:85:11:d6:6d:3e:94:c0:bb:54:
         57:73:99:f4:d5:12:72:c2:c6:f9:0a:ac:25:53:76:57:8e:a3:
         06:bc:13:60:48:73:7e:08:7b:5e:1c:6f:8a:50:92:0d:da:82:
         b2:b2:a6:62:89:3a:cd:24:fa:49:89:6b:18:e3:8c:08:dd:a6:
         8d:80:aa:62:90:69:80:21:2d:58:30:b2:cd:5e:7a:4b:f1:e4:
         53:e6:16:0d:d6:c2:31:5b:a9:8f:23:36:a5:66:3c:48:78:3c:
         7a:fc:4a:dd:1f:e2:87:e7:02:9c:d2:55:c8:d4:fb:05:ca:ed:
         0e:9e:f8:fd:ea:0b:cc:7b:d5:40:37:2c:0e:9d:49:7c:4d:5c:
         b5:b9:c3:ca:e1:43:92:a8:1a:f0:33:79:92:0f:aa:2c:8b:50:
         81:64:65:73:3b:80:2f:74:a8:fb:11:7c:f7:15:0e:0f:8a:bd:
         34:84:b8:af:68:2d:d9:94:41:b6:3d:bc:db:f7:ab:68:64:20:
         83:50:0a:ad:8d:1e:04:28:0a:3b:70:9c:55:30:96:d4:bd:47:
         7b:b3:7a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:49:57 2025 by rpki-client