Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35332e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e35332e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          clyawEFYdhjc/fj+UF0p5C7dfKVMaEvP33e5OjKfITA=
Subject key identifier:   CD:F0:C8:A2:60:BC:68:E9:F7:AF:BA:E2:F3:BA:D2:11:8D:1B:31:F8
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       594E57ED34AB38DB404C24E69F516F5072779FDE
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35332e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:42 +0000
ROA not before:           Fri 17 Jan 2025 16:11:42 +0000
ROA not after:            Fri 16 Jan 2026 16:16:42 +0000
asID:                     52930
IP address blocks:        177.185.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4e:57:ed:34:ab:38:db:40:4c:24:e6:9f:51:6f:50:72:77:9f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:42 2025 GMT
            Not After : Jan 16 16:16:42 2026 GMT
        Subject: CN=CDF0C8A260BC68E9F7AFBAE2F3BAD2118D1B31F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:56:d7:da:58:68:df:9c:52:d0:5d:f2:fd:
                    47:83:e0:4b:f6:28:5a:47:9a:28:e3:fb:87:ac:90:
                    9a:7c:4e:ea:d0:96:1e:57:ee:09:af:c6:b0:a0:81:
                    a6:b7:1f:a0:bd:94:22:cb:36:3c:a8:c6:63:c7:c2:
                    17:9d:f2:25:07:3c:4f:bf:dd:a8:9a:61:02:ab:1c:
                    c7:ac:1b:36:d4:d9:85:f8:bd:78:cc:74:93:57:5c:
                    10:a8:1f:a2:4e:62:1f:eb:4c:0b:9a:45:52:a0:9e:
                    3a:d0:a8:03:26:d5:c2:c0:f8:08:79:b3:83:7a:d4:
                    49:5d:02:da:79:1c:ad:59:b9:70:df:7c:88:a3:96:
                    81:0a:9d:58:51:ca:73:56:b3:4f:07:76:35:52:17:
                    86:4c:44:03:69:43:f5:54:b4:91:dc:63:83:1e:59:
                    e9:c1:b5:ee:9a:71:63:ad:58:4a:4e:59:94:c8:59:
                    5b:7c:1a:88:ab:2e:78:9e:55:a4:0b:ef:22:68:41:
                    45:2c:ef:e3:f4:e3:ed:88:26:c5:34:a0:66:14:d4:
                    73:74:d0:83:c9:58:3b:a0:32:57:98:77:3e:55:72:
                    7f:d6:e3:db:1d:5b:b8:89:89:a5:fc:2a:52:bf:48:
                    47:f9:6a:38:34:f3:e2:58:e4:21:13:f9:e7:62:f3:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F0:C8:A2:60:BC:68:E9:F7:AF:BA:E2:F3:BA:D2:11:8D:1B:31:F8
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e35332e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:79:b8:97:76:bc:6d:d3:3f:1b:bc:52:0c:c5:bb:09:c4:ac:
         e7:8c:94:91:00:09:f1:9f:41:89:84:bd:5d:0a:25:d2:39:de:
         80:08:df:f3:30:c5:6d:7f:3f:71:93:47:7c:da:3a:32:9b:c2:
         1c:54:b8:06:64:ac:74:56:6e:29:e2:7f:a1:9e:97:4c:de:39:
         3a:05:76:ab:94:ae:7f:d4:ae:9c:ef:f9:42:54:85:cc:cf:a3:
         6b:38:24:0f:68:73:c7:fe:98:78:79:57:50:0b:f0:85:35:5d:
         46:dc:36:ae:c4:25:e1:dc:b8:2f:d2:1a:50:05:70:bf:06:f0:
         07:f5:20:c8:ee:8b:26:15:5d:da:8a:5f:24:c3:b3:77:be:61:
         cf:37:b2:61:3f:b1:16:56:7c:6b:0e:88:b4:aa:d4:c9:23:b5:
         5a:63:6c:7a:42:2b:19:47:85:83:9a:8b:b4:d2:e3:c3:02:c3:
         61:fe:0a:9c:e1:77:d5:18:da:21:db:5f:d8:5c:ce:1c:17:c7:
         32:59:93:ac:72:5a:28:50:f2:43:86:c8:6b:bb:72:9a:7c:75:
         c5:d0:73:b1:04:cd:b1:f1:92:22:35:f0:00:84:33:14:d2:8a:
         84:3d:5d:ac:7e:52:88:37:4c:a9:31:f4:99:0c:e6:de:21:2b:
         63:cf:08:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:28 2025 by rpki-client