Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/3137372e3132362e3234302e302f32302d3234203d3e20323632333633.roa
File:                     3137372e3132362e3234302e302f32302d3234203d3e20323632333633.roa (raw, json)
Hash identifier:          ugCnw88BTq0+CEgxplOV0n++9LOLCEF63Yi0gQIZGto=
Subject key identifier:   FE:FE:10:CA:D5:85:54:46:00:DE:FD:93:E1:60:D3:F3:93:07:41:46
Certificate issuer:       /CN=B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054
Certificate serial:       3F305926224F5ABF3553EDA1A6C65ECB3BA94942
Authority key identifier: B9:D1:B1:FF:7C:EF:5F:61:4B:C7:B3:D3:82:BC:36:5B:A8:42:20:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/3137372e3132362e3234302e302f32302d3234203d3e20323632333633.roa
Signing time:             Thu 10 Apr 2025 14:49:22 +0000
ROA not before:           Thu 10 Apr 2025 14:44:22 +0000
ROA not after:            Thu 09 Apr 2026 14:49:22 +0000
asID:                     262363
IP address blocks:        177.126.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.crl
                          rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 22:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:30:59:26:22:4f:5a:bf:35:53:ed:a1:a6:c6:5e:cb:3b:a9:49:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054
        Validity
            Not Before: Apr 10 14:44:22 2025 GMT
            Not After : Apr  9 14:49:22 2026 GMT
        Subject: CN=FEFE10CAD585544600DEFD93E160D3F393074146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:ce:d1:b2:64:b6:c5:b4:ab:01:eb:56:57:
                    46:c6:c9:e6:c3:17:f1:47:a5:40:d1:2e:c5:c0:c4:
                    68:55:8c:d2:28:7e:bd:f2:1c:cf:a0:5d:f1:e3:09:
                    4a:07:5a:f0:20:2f:61:1e:72:59:d9:9a:89:9c:7d:
                    16:8c:23:bd:4d:bd:2f:d9:f9:65:5e:2b:c3:2c:11:
                    f9:ef:2f:e0:f9:f9:77:da:03:01:3c:e5:e7:9b:fb:
                    b4:e7:7b:01:62:21:f7:06:75:3f:46:f9:43:ec:b5:
                    58:81:d3:c0:1f:dd:8b:92:23:12:df:6d:28:e1:fb:
                    43:b5:23:d0:0b:05:7e:0b:94:db:a1:3c:26:8a:70:
                    67:4f:e6:c8:2d:cb:27:6e:ac:cc:ae:d0:42:fc:04:
                    b4:0f:8f:aa:1d:7b:2f:42:06:b2:fc:85:0f:5e:2c:
                    23:99:60:a3:1c:10:e1:2f:35:35:e6:fc:6f:dd:83:
                    69:87:9e:0e:61:ab:cf:48:be:93:fc:e3:1f:d9:2a:
                    f7:ef:f0:4d:62:35:2f:97:df:16:63:ec:7a:94:be:
                    63:55:d1:cf:a5:52:1e:f8:52:c8:5b:ed:75:38:ab:
                    08:38:cb:04:df:e1:88:17:c6:27:48:c6:c2:31:60:
                    98:ac:fa:f1:6a:68:3d:08:78:d3:31:27:15:31:81:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FE:10:CA:D5:85:54:46:00:DE:FD:93:E1:60:D3:F3:93:07:41:46
            X509v3 Authority Key Identifier:
                keyid:B9:D1:B1:FF:7C:EF:5F:61:4B:C7:B3:D3:82:BC:36:5B:A8:42:20:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/3137372e3132362e3234302e302f32302d3234203d3e20323632333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:58:84:c8:f2:2a:24:d3:3c:84:90:18:8f:af:e3:35:30:1e:
         d7:3b:83:09:9f:2e:c0:d5:ed:d7:e0:d3:f6:cd:1d:37:8f:48:
         ed:d0:ca:47:c0:17:ff:63:38:be:04:99:38:fc:98:af:a9:fa:
         e4:63:ad:9e:27:09:14:57:ac:8f:48:43:64:20:aa:17:0f:3d:
         3c:94:31:cd:11:bf:74:05:7b:cb:5f:ee:be:2a:6b:34:b2:75:
         39:d2:9e:6e:0d:64:59:b1:f7:65:52:ab:42:13:c9:e8:f7:23:
         38:00:0c:b2:b8:f9:4a:82:1a:f8:8f:41:c0:5d:97:da:2d:45:
         5d:98:1e:68:a1:b5:ec:46:de:64:65:13:fe:70:4a:88:15:a3:
         b4:ef:64:9a:1d:68:bf:6e:0b:2a:7e:ed:68:c5:bf:10:af:c5:
         3e:0f:5e:54:c7:cf:b1:36:ca:14:94:63:16:60:b2:93:18:75:
         8e:ff:85:bb:18:4f:3e:cf:25:3c:0b:38:a1:1c:a0:42:93:93:
         ca:e9:5f:29:9b:75:bd:5c:c5:ae:f4:72:e8:24:02:d5:da:cf:
         65:af:e7:65:23:5d:52:30:38:79:f5:f0:ca:3f:0e:f8:47:10:
         84:e8:76:3c:53:a5:7f:c0:fd:c5:2d:14:56:91:73:b2:01:9b:
         a2:ec:7f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:14:52 2025 by rpki-client