Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38342e302f32322d3332203d3e203532353237.roa
File:                     3137372e3135322e38342e302f32322d3332203d3e203532353237.roa (raw, json)
Hash identifier:          TFypdHDunAbQinFNxb5YKWC6ti/q0pMwjzk2aZbfRsc=
Subject key identifier:   B2:79:C2:1F:29:1E:97:2A:74:71:0E:1C:53:97:FF:ED:FC:8E:2A:67
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       28E4C739D736579813177DDFEAC94C3442A9EB40
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38342e302f32322d3332203d3e203532353237.roa
Signing time:             Fri 07 Feb 2025 16:58:56 +0000
ROA not before:           Fri 07 Feb 2025 16:53:56 +0000
ROA not after:            Fri 06 Feb 2026 16:58:56 +0000
asID:                     52527
IP address blocks:        177.152.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl
                          rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 02:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e4:c7:39:d7:36:57:98:13:17:7d:df:ea:c9:4c:34:42:a9:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Feb  7 16:53:56 2025 GMT
            Not After : Feb  6 16:58:56 2026 GMT
        Subject: CN=B279C21F291E972A74710E1C5397FFEDFC8E2A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d7:ff:ee:d2:17:29:d1:e1:5a:5b:49:e3:a0:
                    c1:bd:e6:bc:78:60:8c:80:0c:8a:cc:d6:67:40:6c:
                    25:26:2e:6d:db:f7:c8:d8:12:42:bf:6d:5e:de:43:
                    65:ec:ee:0c:4f:00:82:6d:42:f0:45:e5:47:db:4a:
                    05:14:6a:ca:63:0d:eb:0b:2c:40:f6:ac:76:3a:06:
                    c3:a9:d7:18:da:6e:8a:76:ee:b7:ba:7e:a3:d1:11:
                    12:de:bb:8b:f3:ab:69:25:4d:48:2f:4c:6a:71:ba:
                    04:72:cc:62:3d:a7:15:04:0d:cc:d6:e7:3c:0d:a3:
                    2c:64:8e:bf:92:22:57:66:d3:fa:76:51:6e:e6:51:
                    23:e8:b3:07:c0:90:d1:fc:76:d5:43:68:ae:4e:72:
                    27:7d:2a:0d:53:54:34:66:34:dc:38:64:40:9e:2f:
                    30:44:9a:9f:9f:b0:a9:fb:b2:3f:75:5f:2c:f2:bc:
                    62:78:91:d8:dd:0e:ec:32:9b:50:c1:ef:9d:e5:71:
                    62:2e:83:13:1f:a2:8a:ff:e3:7b:57:24:08:e5:3b:
                    53:8d:ce:1f:24:e1:f7:41:1c:55:e1:d8:99:85:d5:
                    a8:41:42:67:e5:28:2a:eb:27:28:c8:2c:d9:62:75:
                    35:d6:f8:10:05:f5:e0:e0:be:e2:f9:30:80:37:cb:
                    57:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:79:C2:1F:29:1E:97:2A:74:71:0E:1C:53:97:FF:ED:FC:8E:2A:67
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38342e302f32322d3332203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:4a:9f:71:e8:40:3c:58:0d:4a:d9:2c:86:db:55:6a:81:86:
         9c:b5:9b:b7:0a:45:97:69:3d:51:a1:a4:ab:e5:c0:3b:50:ac:
         43:9a:86:52:a5:4f:ea:97:8b:a2:4d:09:5f:03:1e:9d:b2:8d:
         c4:85:b5:9c:8c:87:52:63:3a:90:51:ef:a7:0b:6c:1e:90:29:
         4a:87:cf:c2:40:9f:36:c0:74:03:47:07:f4:71:cc:93:4c:ac:
         f6:75:7b:27:dd:bd:13:f4:a0:6f:56:0d:6f:f0:a4:22:d8:4c:
         76:f4:db:0a:61:61:b0:f3:db:c2:33:70:81:c2:8c:aa:f7:a7:
         37:36:bd:4c:b7:a6:77:2f:02:2c:5d:24:c4:97:45:39:f0:b0:
         5d:71:fa:5d:db:e7:64:9e:b2:b1:18:39:9f:e2:9a:b1:74:38:
         63:6e:17:eb:77:54:d4:4a:3e:e2:34:73:b6:83:5d:e5:bb:97:
         6c:bd:54:10:b9:97:2d:27:58:ef:8b:75:25:43:7d:b0:31:fe:
         72:f3:f0:ed:bd:58:32:fa:a3:7a:7d:86:66:b4:a0:8c:bc:f5:
         ef:f4:5d:a6:51:33:20:f3:2a:75:5d:4b:24:98:3b:23:58:55:
         c9:82:1e:2b:c5:9e:4f:02:f6:45:77:68:51:70:45:3c:f3:70:
         a1:69:5e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:56:50 2025 by rpki-client