Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/3137392e3132372e37332e302f32342d3234203d3e20323633323833.roa
File:                     3137392e3132372e37332e302f32342d3234203d3e20323633323833.roa (raw, json)
Hash identifier:          jOn6uv6ZkVNgejSqg+r0Dqm20BU0dN/a2r0OuzSrPyE=
Subject key identifier:   25:D5:60:7C:C8:9B:E5:DA:12:E6:14:26:70:A9:AE:86:EC:B2:91:4D
Certificate issuer:       /CN=41B0D3EA994B3A684602641351C292C7808B50FC
Certificate serial:       3DC0A21AC47E0DEFA0F4E44F803422DF12D1E6E8
Authority key identifier: 41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/3137392e3132372e37332e302f32342d3234203d3e20323633323833.roa
Signing time:             Mon 10 Feb 2025 18:27:28 +0000
ROA not before:           Mon 10 Feb 2025 18:22:28 +0000
ROA not after:            Mon 09 Feb 2026 18:27:28 +0000
asID:                     263283
IP address blocks:        179.127.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl
                          rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 05:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c0:a2:1a:c4:7e:0d:ef:a0:f4:e4:4f:80:34:22:df:12:d1:e6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B0D3EA994B3A684602641351C292C7808B50FC
        Validity
            Not Before: Feb 10 18:22:28 2025 GMT
            Not After : Feb  9 18:27:28 2026 GMT
        Subject: CN=25D5607CC89BE5DA12E6142670A9AE86ECB2914D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:41:17:8c:ea:c9:ce:d0:63:0d:67:22:c8:5e:
                    4e:7e:8a:e3:1d:b5:1b:95:80:3e:20:f8:eb:af:2c:
                    af:09:59:e2:70:db:b2:c8:c1:e9:d8:a3:ae:50:2f:
                    d5:3e:b9:9f:dc:44:90:ef:c8:b5:e8:a6:f8:47:5a:
                    24:81:8c:41:d7:a4:c0:6a:9d:46:57:92:c0:60:0b:
                    64:65:04:bd:fa:81:6e:01:a1:21:70:e7:26:1e:2c:
                    53:74:3a:d8:5f:37:2a:b6:23:96:24:29:71:4a:49:
                    8f:09:6b:04:b7:82:dd:21:3c:3a:71:46:cb:56:3f:
                    10:20:3b:ad:84:64:5e:d2:78:1d:c9:e8:05:36:20:
                    14:83:1c:ac:76:d3:b3:b0:a3:95:2a:31:22:c5:9e:
                    b0:e5:20:b1:b9:49:c0:50:a9:67:aa:7b:e4:6b:8d:
                    44:6d:8d:0c:d6:19:33:a7:59:c9:e1:cf:a5:02:9b:
                    45:03:f9:96:db:a2:9e:de:fc:58:9f:6e:00:23:71:
                    42:b9:e9:a8:ab:30:89:7b:df:4c:b9:68:1c:51:21:
                    7d:83:05:96:8f:70:71:34:ae:b7:e9:af:a3:4d:4e:
                    d9:1c:29:e9:c3:9c:9e:18:fd:74:4b:17:47:7a:d0:
                    8c:60:8b:95:3e:72:80:ce:74:78:10:9c:99:ab:19:
                    e0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D5:60:7C:C8:9B:E5:DA:12:E6:14:26:70:A9:AE:86:EC:B2:91:4D
            X509v3 Authority Key Identifier:
                keyid:41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/3137392e3132372e37332e302f32342d3234203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:11:a0:c5:37:8a:39:bb:39:33:8d:19:7f:99:39:6a:a8:4e:
         99:f1:61:ff:b8:6a:c5:b4:19:9b:81:dd:a6:68:c2:86:4e:b6:
         e4:ca:92:a3:6e:50:f8:c9:ee:09:b6:a3:08:80:cc:b8:81:57:
         42:a4:c4:6f:99:81:17:55:46:dd:02:c8:5d:3e:a7:3b:9e:ab:
         ba:0a:d4:74:53:3a:1e:24:d2:99:96:81:f8:8c:5e:33:39:09:
         c2:dc:cb:a9:b5:9f:61:7d:68:c7:07:0e:ff:8a:55:ba:f6:1e:
         a2:c7:e6:4f:93:fd:8b:61:9c:aa:9a:83:f3:7b:1d:95:7f:b5:
         da:9d:ed:cc:da:f8:b8:6c:94:a7:af:50:0b:fd:8a:e7:76:50:
         06:db:91:f1:72:6e:8f:43:c4:34:09:6a:56:5a:c2:27:41:24:
         dc:0e:f3:98:9a:bf:7e:6c:b3:6f:19:2f:ea:9c:7e:8b:ea:54:
         62:8b:14:06:c5:4d:11:a4:aa:77:10:3c:35:ea:7f:ad:c3:08:
         6e:54:97:34:24:2c:95:83:ed:fb:5a:7f:03:b8:50:4f:71:fb:
         51:bf:5d:38:5e:fd:06:47:77:79:c6:ea:7c:99:16:3f:9b:b5:
         07:eb:2f:8f:18:34:b1:51:df:d0:2b:54:5d:41:fc:3f:d9:fe:
         1a:bd:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:31:07 2025 by rpki-client