Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137372e37342e3134342e302f32322d3234203d3e20323633363439.roa
File:                     3137372e37342e3134342e302f32322d3234203d3e20323633363439.roa (raw, json)
Hash identifier:          8S453zYt4Nub+evdTBuPa9L8zu9BH19lAwo7F1Xxk0c=
Subject key identifier:   04:CB:25:29:99:67:75:4B:17:61:C8:77:CC:F5:48:0A:48:EF:C9:EB
Certificate issuer:       /CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
Certificate serial:       7C6063F05BF20FA0193B7652CA8E0CC17481AD7D
Authority key identifier: 6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137372e37342e3134342e302f32322d3234203d3e20323633363439.roa
Signing time:             Wed 05 Mar 2025 21:04:32 +0000
ROA not before:           Wed 05 Mar 2025 20:59:32 +0000
ROA not after:            Wed 04 Mar 2026 21:04:32 +0000
asID:                     263649
IP address blocks:        177.74.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl
                          rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 02:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:60:63:f0:5b:f2:0f:a0:19:3b:76:52:ca:8e:0c:c1:74:81:ad:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
        Validity
            Not Before: Mar  5 20:59:32 2025 GMT
            Not After : Mar  4 21:04:32 2026 GMT
        Subject: CN=04CB25299967754B1761C877CCF5480A48EFC9EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:6e:be:98:40:f7:20:1f:c3:e2:8f:4b:54:
                    a7:fc:ef:38:01:b1:cd:52:8e:36:47:53:b7:c2:51:
                    41:27:57:f8:69:ea:08:03:f1:bd:e7:68:b5:c0:5f:
                    e2:e6:2d:b5:7d:66:d9:10:d8:18:75:65:d3:5f:d0:
                    5c:68:e6:fd:f5:83:95:44:96:23:26:ba:64:0f:6c:
                    31:81:8a:7b:39:2b:80:e3:2f:cf:46:1f:0f:8e:c5:
                    da:57:f9:9d:c9:37:56:7b:e6:38:98:94:f2:0a:c2:
                    14:65:5f:d8:2e:18:87:93:79:66:be:cb:4d:3f:8f:
                    b1:ec:53:dc:c4:81:01:1b:8a:6b:df:2c:d9:1b:0c:
                    25:84:cf:0e:2b:82:a5:77:1b:47:c0:fa:91:54:06:
                    ab:7f:ba:1f:e1:4f:3a:a2:fb:76:a9:f0:b3:f5:02:
                    23:20:2b:51:ef:58:e7:5c:4b:dd:47:9f:64:b6:76:
                    a6:6b:2e:46:09:39:9e:e6:9e:46:09:1a:e2:1c:53:
                    a0:7a:ae:fb:35:56:aa:6b:cc:4c:78:e5:8d:79:6e:
                    d8:bb:14:6f:85:cf:d8:49:11:a5:38:ba:d3:22:f9:
                    fd:5a:48:17:a0:90:f9:b2:e9:9f:c5:95:20:c8:a4:
                    d5:17:d2:be:93:e0:39:40:e9:18:18:12:45:bf:9a:
                    10:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CB:25:29:99:67:75:4B:17:61:C8:77:CC:F5:48:0A:48:EF:C9:EB
            X509v3 Authority Key Identifier:
                keyid:6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137372e37342e3134342e302f32322d3234203d3e20323633363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:4a:85:ae:5e:d7:6f:53:c5:42:84:c4:87:ff:57:e3:ec:7c:
         83:cf:cc:4e:94:48:47:de:dd:40:e7:6b:88:12:8f:03:a3:21:
         ad:b1:05:96:08:ef:0a:a4:38:83:71:eb:3d:32:cc:09:33:48:
         a0:0c:1c:18:96:79:92:d5:e4:a6:7e:09:78:13:f3:a5:b2:be:
         ad:a0:7d:85:a4:a5:e6:70:7a:40:67:42:e2:40:ce:57:30:4b:
         0d:b3:54:dc:7d:97:4c:a1:f2:48:76:48:79:9a:26:66:b8:f1:
         a2:63:5d:e9:2a:ab:1f:e1:e6:68:e1:10:f3:7e:15:97:80:8b:
         d4:34:d3:e1:76:8d:18:47:3c:6d:cf:fb:a2:a6:4f:70:5e:fb:
         60:31:64:e1:d4:13:62:2c:ce:00:c6:2a:f8:a3:49:af:b4:66:
         20:20:d1:35:e3:4c:de:27:3f:c1:6c:f1:21:46:7e:9e:d9:74:
         5a:3b:9f:be:82:30:e5:e5:5d:14:d2:fd:96:2b:ae:21:08:ef:
         27:22:74:2f:38:75:25:42:42:4a:21:2a:ab:73:7a:64:24:70:
         10:c1:0d:9a:9c:4c:75:9d:f0:b3:22:5e:df:40:38:e6:70:87:
         ce:d3:3c:fe:1e:65:93:06:d6:cf:1f:63:11:97:97:12:fd:df:
         1f:43:3e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:15 2025 by rpki-client