Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35322e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e35322e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          kxs2yxbIT2V/inaoBUkBjha7jSKySb0yI2EpyfP4aYs=
Subject key identifier:   D2:94:16:07:AD:88:4E:89:F7:95:4A:60:F9:7E:31:EB:DA:24:65:EA
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       5054A91888945C01BB618C538C38BC072693A7B8
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35322e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:40 +0000
ROA not before:           Fri 17 Jan 2025 16:11:40 +0000
ROA not after:            Fri 16 Jan 2026 16:16:40 +0000
asID:                     52930
IP address blocks:        177.185.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 11:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:54:a9:18:88:94:5c:01:bb:61:8c:53:8c:38:bc:07:26:93:a7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:40 2025 GMT
            Not After : Jan 16 16:16:40 2026 GMT
        Subject: CN=D2941607AD884E89F7954A60F97E31EBDA2465EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e6:77:f5:b5:7c:16:91:39:fd:8e:cd:3c:2d:
                    99:6c:b4:c4:55:e9:91:cc:ff:c1:4a:b3:5c:fc:6b:
                    63:0a:ac:0c:62:f0:e5:c1:34:c0:3b:a7:c0:62:7a:
                    86:79:7f:07:c7:1d:85:1e:bf:1c:97:7b:c0:79:4d:
                    29:c9:9e:02:59:00:bb:05:e6:3c:0d:7a:2d:66:a0:
                    8e:43:46:13:5c:f9:4c:c7:6d:d2:94:d8:62:70:bf:
                    22:3d:ef:c1:45:9c:d7:bb:56:18:2e:ef:0f:c5:fd:
                    ce:de:3e:1a:e9:5d:a1:a1:08:48:17:a1:d7:50:78:
                    66:95:04:3c:4b:3c:c4:bc:75:c4:d9:ae:dc:c6:f0:
                    45:ad:22:50:ef:a1:66:02:9a:f3:bc:6a:70:ba:47:
                    69:02:06:9a:7a:ae:9d:40:77:5b:f5:e9:f9:f4:94:
                    2e:d1:b9:89:e7:0b:4f:dd:f8:f3:a5:00:75:9d:20:
                    e4:76:c4:e0:f6:bf:7b:a0:a6:21:ae:52:29:61:c6:
                    fe:d2:95:a5:a3:7d:af:1a:9b:93:15:3b:82:1b:53:
                    b6:f4:b4:fb:6c:b4:cc:ee:86:cd:8d:c3:e0:1f:d7:
                    dd:ff:26:4e:2a:0e:6f:4a:34:09:d4:da:ad:73:3d:
                    e0:dd:af:ee:a2:b8:34:4b:6c:73:0f:9b:ae:d6:59:
                    ab:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:94:16:07:AD:88:4E:89:F7:95:4A:60:F9:7E:31:EB:DA:24:65:EA
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35322e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:7e:58:dd:d5:81:09:e1:8f:1c:0a:35:68:d2:4f:ec:c5:fc:
         6f:6e:9c:a4:c7:9e:e8:7f:e0:36:e8:65:ff:2a:59:21:aa:0d:
         04:59:51:2f:70:12:a3:be:53:fb:0a:6a:d4:83:65:0f:f9:12:
         a5:37:c8:6c:fd:1a:d7:b6:dc:24:a4:42:d8:d1:9b:aa:25:87:
         6f:da:89:4b:5b:ef:ba:96:4c:be:f4:39:b6:6b:75:40:66:60:
         1f:66:1e:c8:ae:d7:cf:7f:a6:4b:f1:c2:26:47:00:40:3c:9b:
         8c:c0:1a:cc:4e:8f:4a:2d:92:57:b6:d2:01:81:aa:98:f1:4a:
         f7:28:4f:19:e4:b9:6e:df:d4:c1:70:55:04:88:d8:f7:9b:6e:
         de:50:0e:71:36:20:14:0f:fa:26:8d:45:7b:ae:2e:40:41:87:
         60:53:f8:81:43:b7:36:6a:0a:4d:44:0b:19:de:03:69:e5:a0:
         a7:71:57:02:d2:92:52:1d:33:37:41:60:85:3b:0a:59:c4:6e:
         e8:35:88:0a:83:fc:fa:4f:f8:40:d6:8a:2a:2b:ea:6e:80:bb:
         8c:eb:d5:dd:b3:2a:4f:31:b8:ad:37:4c:fc:8e:93:d3:4d:b9:
         b6:da:fb:8d:28:9c:8e:fd:f2:12:c7:57:e7:4f:fe:b0:e7:cf:
         82:8f:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:43:19 2025 by rpki-client