Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/3137372e33372e3132382e302f31372d3234203d3e203238313236.roa
File:                     3137372e33372e3132382e302f31372d3234203d3e203238313236.roa (raw, json)
Hash identifier:          9mjDh9RXLjzZSNqkvKEWyHEhs5CLabFwmT7fsK31W5U=
Subject key identifier:   5B:EA:E9:6A:AA:F6:D7:85:34:C2:E9:CD:8E:0A:03:4B:DB:F8:86:BB
Certificate issuer:       /CN=E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0
Certificate serial:       7EC8FEE569E4CCF82429643DC6132918D9061E75
Authority key identifier: E4:30:D5:4D:16:16:18:B6:A1:98:E8:A4:E5:3F:BF:6D:3C:7C:F0:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/3137372e33372e3132382e302f31372d3234203d3e203238313236.roa
Signing time:             Tue 11 Feb 2025 19:04:20 +0000
ROA not before:           Tue 11 Feb 2025 18:59:20 +0000
ROA not after:            Tue 10 Feb 2026 19:04:20 +0000
asID:                     28126
IP address blocks:        177.37.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.crl
                          rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 14:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c8:fe:e5:69:e4:cc:f8:24:29:64:3d:c6:13:29:18:d9:06:1e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0
        Validity
            Not Before: Feb 11 18:59:20 2025 GMT
            Not After : Feb 10 19:04:20 2026 GMT
        Subject: CN=5BEAE96AAAF6D78534C2E9CD8E0A034BDBF886BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:e4:85:05:45:0e:11:d0:92:72:ae:04:df:
                    7e:42:61:53:a6:01:db:d7:a5:fe:6e:5e:f9:35:98:
                    71:22:4c:a4:be:a8:14:b4:44:3b:15:cc:2a:4a:f0:
                    88:b9:98:62:2d:fa:20:0d:92:a9:16:b0:23:5c:48:
                    97:90:06:37:28:35:f3:30:b0:c8:2f:28:8f:06:3b:
                    98:83:d6:39:10:fb:5b:e4:67:98:a1:91:ed:2f:64:
                    84:38:24:21:7d:c9:e4:6a:5a:27:2c:12:6d:04:6a:
                    41:55:52:01:02:73:84:59:87:a6:63:f7:9b:25:75:
                    0e:17:4c:b3:8d:49:d2:cc:15:96:59:08:65:b6:76:
                    02:75:60:50:3f:7a:05:c5:cf:5b:3e:ca:64:a0:fd:
                    6c:02:69:2d:df:a7:12:57:c4:a2:45:8d:ac:6d:40:
                    1a:86:7a:61:93:3e:0e:08:fd:de:c0:7a:20:89:73:
                    45:fb:df:de:57:ca:36:0b:d7:66:f0:36:58:80:89:
                    84:6d:7a:e9:20:0b:a5:7a:76:96:8e:81:2a:91:5f:
                    1b:34:a0:ac:1f:e5:0a:6f:cd:4a:59:35:36:68:18:
                    29:b0:28:9a:19:33:77:0a:66:81:34:86:76:9e:de:
                    77:ff:06:f6:60:3f:bd:2e:49:de:cc:30:94:91:0a:
                    d0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EA:E9:6A:AA:F6:D7:85:34:C2:E9:CD:8E:0A:03:4B:DB:F8:86:BB
            X509v3 Authority Key Identifier:
                keyid:E4:30:D5:4D:16:16:18:B6:A1:98:E8:A4:E5:3F:BF:6D:3C:7C:F0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430D54D161618B6A198E8A4E53FBF6D3C7CF0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wd34HbksAsn1vxVWCDeNf7j7wwjAfcN1VhZ3jbVccfs/0/3137372e33372e3132382e302f31372d3234203d3e203238313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a6:27:df:93:48:af:46:5e:7d:1d:5c:6e:d1:82:ad:39:b0:eb:
         8e:d9:61:e8:ff:7b:c5:70:b1:2a:c2:43:d7:a2:53:8a:5b:c2:
         49:20:29:cf:bc:f5:d2:c1:a0:88:e2:b5:30:02:4a:73:17:e8:
         d6:2b:ed:4d:52:1f:69:9a:e5:30:31:89:be:f6:df:3f:74:69:
         20:5d:8f:7f:9e:1e:a4:cc:f8:d5:84:87:c3:1f:da:7c:95:71:
         fe:79:08:1e:43:74:d5:1a:e3:11:28:d6:88:aa:58:a3:9c:f8:
         3c:0c:e4:56:b8:fc:55:a7:b4:45:ce:ca:81:21:f3:dd:e1:d1:
         ff:39:8e:87:33:6b:d0:c4:b8:0c:10:07:e9:83:c6:36:38:7b:
         11:53:28:d8:be:59:6b:2a:81:af:17:de:64:e3:4d:df:8b:2f:
         f5:60:ae:6c:19:01:b8:5a:b3:a3:9a:8d:5a:ae:01:18:2d:e4:
         76:54:32:9a:dd:15:18:4c:ab:36:11:86:73:c9:22:9d:32:b2:
         7e:5b:32:bb:ea:34:2b:f1:6a:84:72:b0:10:17:13:29:18:20:
         ea:83:08:3f:77:8c:44:ee:be:ec:79:0d:71:89:7f:c9:26:63:
         2f:c2:49:b9:a3:e2:ec:82:d1:2c:8b:07:65:95:87:fb:ea:76:
         e5:b8:54:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:01:39 2025 by rpki-client