Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3137372e39322e3232342e302f32302d3234203d3e203238323739.roa
File:                     3137372e39322e3232342e302f32302d3234203d3e203238323739.roa (raw, json)
Hash identifier:          wDXSXL+Gnf/OxVt5oPAvXHzhvhRZ3gQBq5hdMYUZRVg=
Subject key identifier:   80:3D:B6:C7:CA:1F:6F:70:97:3A:A7:34:D4:BE:02:E9:6C:14:DA:85
Certificate issuer:       /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial:       15C4A7E66ACE5D0CD9746C0FC83DDE60905EBB7B
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3137372e39322e3232342e302f32302d3234203d3e203238323739.roa
Signing time:             Thu 06 Mar 2025 23:46:08 +0000
ROA not before:           Thu 06 Mar 2025 23:41:08 +0000
ROA not after:            Thu 05 Mar 2026 23:46:08 +0000
asID:                     28279
IP address blocks:        177.92.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl
                          rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 12:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c4:a7:e6:6a:ce:5d:0c:d9:74:6c:0f:c8:3d:de:60:90:5e:bb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
        Validity
            Not Before: Mar  6 23:41:08 2025 GMT
            Not After : Mar  5 23:46:08 2026 GMT
        Subject: CN=803DB6C7CA1F6F70973AA734D4BE02E96C14DA85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:d0:34:9b:26:5f:3d:2e:e5:68:eb:a1:30:
                    6a:14:01:5a:d8:ff:14:e9:2c:cc:f5:6c:fc:9a:ee:
                    b0:57:7c:bd:39:8f:28:2e:27:75:9a:5e:ce:90:3f:
                    52:0d:87:a9:2c:5b:ba:ab:9b:08:e9:2f:0c:a8:de:
                    a0:9c:24:ba:ca:19:5b:d7:de:85:fa:84:00:a7:db:
                    ec:c9:8a:81:ce:f4:33:46:43:49:68:3f:d7:33:d6:
                    cf:f8:82:ab:3d:b6:10:4b:d6:e9:a9:1d:0d:0c:b7:
                    7a:65:a2:58:c5:90:14:b9:35:55:e4:53:18:f0:69:
                    e3:c3:86:1c:bb:a1:02:50:1a:3b:16:d1:ac:31:63:
                    49:58:7f:d0:b4:c7:20:37:88:a4:d4:5b:bb:63:a8:
                    4a:ab:b6:01:43:23:65:a7:a4:24:0b:a3:c4:1c:4b:
                    19:20:36:6d:ef:44:ca:f2:45:bd:69:10:af:b8:1d:
                    d2:bc:2a:08:7a:87:28:d5:e7:ec:fe:59:93:38:1a:
                    3c:28:81:1b:b4:76:da:51:50:fe:95:60:81:4b:14:
                    68:d0:5d:52:b1:7a:dd:54:89:28:0d:12:99:8b:d7:
                    cc:a4:0e:9f:16:c1:0e:02:6a:27:61:d3:c8:5c:d2:
                    8b:cf:2f:02:7c:0f:b7:86:52:17:ed:7a:c3:65:1c:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3D:B6:C7:CA:1F:6F:70:97:3A:A7:34:D4:BE:02:E9:6C:14:DA:85
            X509v3 Authority Key Identifier:
                keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3137372e39322e3232342e302f32302d3234203d3e203238323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:1a:4e:72:5f:d2:9e:8b:37:2e:9d:02:50:bd:da:2d:7a:0c:
         2b:79:ab:f6:0a:88:5c:bb:45:7a:56:ac:26:ff:9b:51:20:7d:
         26:fc:cb:ad:9c:af:fe:fe:a6:3e:d2:8a:9b:87:07:47:c9:16:
         e2:28:26:55:cb:67:fc:f8:a8:7b:11:fa:9e:36:34:cd:6f:51:
         8c:7c:6f:4a:0a:5f:52:c1:e9:4b:51:e4:90:0c:05:a1:9d:ff:
         1e:b7:27:cf:04:84:b8:3a:50:94:f4:b9:e4:5b:30:10:5e:e2:
         67:72:2b:62:04:dc:42:7e:59:45:23:7a:6f:b7:8a:28:7b:28:
         97:1a:39:e0:ac:18:b4:a5:61:68:97:c8:b4:15:21:e8:28:bd:
         b1:dc:8c:82:7f:06:2a:93:5f:ab:d6:56:3e:3c:f9:43:94:b7:
         e4:f9:a2:01:65:09:ab:ea:de:30:2c:48:1d:99:0a:9b:b6:91:
         82:33:21:1e:7f:b3:e8:63:a8:8c:31:32:48:7f:6b:4d:ca:d7:
         8b:d1:9f:51:97:c2:9c:c7:4c:02:8d:14:3f:7d:81:88:97:8b:
         fa:02:54:a9:7c:e4:42:4d:7b:f0:7a:2c:06:fd:2f:e3:5b:65:
         04:fa:36:f4:29:08:39:61:2e:a9:29:9b:86:c0:5a:80:0a:b7:
         f2:a4:32:23
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUFcSn5mrOXQzZdGwPyD3eYJBeu3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzEzRDQyNzUwNTYyMTE3Q0EwREI3RDk2QTYyMzg5OEVG
OTFGNkFEQTAeFw0yNTAzMDYyMzQxMDhaFw0yNjAzMDUyMzQ2MDhaMDMxMTAvBgNV
BAMTKDgwM0RCNkM3Q0ExRjZGNzA5NzNBQTczNEQ0QkUwMkU5NkMxNERBODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAA9A0myZfPS7laOuhMGoUAVrY
/xTpLMz1bPya7rBXfL05jyguJ3WaXs6QP1INh6ksW7qrmwjpLwyo3qCcJLrKGVvX
3oX6hACn2+zJioHO9DNGQ0loP9cz1s/4gqs9thBL1umpHQ0Mt3ploljFkBS5NVXk
UxjwaePDhhy7oQJQGjsW0awxY0lYf9C0xyA3iKTUW7tjqEqrtgFDI2WnpCQLo8Qc
SxkgNm3vRMryRb1pEK+4HdK8Kgh6hyjV5+z+WZM4GjwogRu0dtpRUP6VYIFLFGjQ
XVKxet1UiSgNEpmL18ykDp8WwQ4Caidh08hc0ovPLwJ8D7eGUhftesNlHJGDAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUgD22x8ofb3CXOqc01L4C6WwU2oUwHwYDVR0j
BBgwFoAUcT1CdQViEXyg232WpiOJjvkfatowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9jUXZ4a1dkakM1dnZ2WlVuWjQyQWRMWVFWcTg4ZXJzYmRVdm96bXROdE04
LzEvNzEzRDQyNzUwNTYyMTE3Q0EwREI3RDk2QTYyMzg5OEVGOTFGNkFEQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83MTNENDI3NTA1NjIxMTdDQTBE
QjdEOTZBNjIzODk4RUY5MUY2QURBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9j
UXZ4a1dkakM1dnZ2WlVuWjQyQWRMWVFWcTg4ZXJzYmRVdm96bXROdE04LzEvMzEz
NzM3MmUzOTMyMmUzMjMyMzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4MzIz
NzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEsVzgMA0GCSqGSIb3DQEBCwUAA4IBAQAWGk5yX9Keizcu
nQJQvdotegwreav2Cohcu0V6Vqwm/5tRIH0m/MutnK/+/qY+0oqbhwdHyRbiKCZV
y2f8+Kh7EfqeNjTNb1GMfG9KCl9SwelLUeSQDAWhnf8etyfPBIS4OlCU9LnkWzAQ
XuJncitiBNxCfllFI3pvt4ooeyiXGjngrBi0pWFol8i0FSHoKL2x3IyCfwYqk1+r
1lY+PPlDlLfk+aIBZQmr6t4wLEgdmQqbtpGCMyEef7PoY6iMMTJIf2tNyteL0Z9R
l8Kcx0wCjRQ/fYGIl4v6AlSpfORCTXvweiwG/S/jW2UE+jb0KQg5YS6pKZuGwFqA
CrfypDIj
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:32:16 2025 by rpki-client