Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130382e302f32322d3232203d3e203532373231.roa
File:                     3137372e38342e3130382e302f32322d3232203d3e203532373231.roa (raw, json)
Hash identifier:          Asz8Y1LAmHNb/RrBb0xLQBMWJay5FKsFCksxEcg3IHo=
Subject key identifier:   0C:5F:66:7D:87:E2:D6:DB:25:06:80:46:AF:5C:44:22:7B:C2:20:77
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       35292BDAC1DABD7E504F821897A63B48744BB827
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130382e302f32322d3232203d3e203532373231.roa
Signing time:             Fri 25 Apr 2025 14:50:38 +0000
ROA not before:           Fri 25 Apr 2025 14:45:38 +0000
ROA not after:            Fri 24 Apr 2026 14:50:38 +0000
asID:                     52721
IP address blocks:        177.84.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 04:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:29:2b:da:c1:da:bd:7e:50:4f:82:18:97:a6:3b:48:74:4b:b8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:38 2025 GMT
            Not After : Apr 24 14:50:38 2026 GMT
        Subject: CN=0C5F667D87E2D6DB25068046AF5C44227BC22077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:cc:65:58:46:de:db:e5:ec:9e:c4:e4:35:
                    e4:b2:d1:40:b6:75:21:74:70:07:4d:1e:62:95:38:
                    0e:aa:f6:89:b3:8d:96:55:af:bf:64:7e:69:96:6e:
                    03:e1:1d:21:b9:56:36:92:bd:be:a1:a0:a0:73:e3:
                    46:83:56:b1:77:6e:4f:75:d3:05:db:cd:31:b8:6c:
                    f9:3e:3e:c1:dc:20:07:64:15:53:21:96:7a:ae:67:
                    e7:64:d8:f2:c2:b1:f1:17:f6:f7:68:fe:a3:06:23:
                    c9:c3:2a:25:c2:7e:2f:e4:5f:43:ee:ec:c8:e9:ed:
                    56:f6:5d:51:12:f2:72:1d:4b:ed:0b:3f:0e:d8:54:
                    e4:3c:33:a0:d7:73:b0:0f:0a:00:38:aa:94:46:19:
                    de:51:65:6d:51:b2:25:30:6f:35:8d:2b:3e:d8:69:
                    dd:e5:a4:b6:f4:6a:c8:ee:8c:ca:92:9c:9e:67:d1:
                    be:12:ed:6a:c7:8f:e5:d4:5d:dc:07:b0:4a:51:65:
                    e2:e8:0c:5b:71:ab:5f:2a:8d:fb:9c:d9:d6:73:a8:
                    1c:5d:89:b3:4a:65:8c:fb:a7:63:ba:4f:03:48:b0:
                    bd:01:dd:4f:0b:19:9f:08:a8:c0:0d:68:60:67:c5:
                    3c:58:a1:c8:f6:2c:c1:16:1b:ca:58:71:63:c8:7d:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5F:66:7D:87:E2:D6:DB:25:06:80:46:AF:5C:44:22:7B:C2:20:77
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130382e302f32322d3232203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:36:42:94:97:39:cf:ae:84:36:00:b9:ed:1b:08:cc:9a:b1:
         73:f0:18:5b:64:ac:91:c5:5e:0b:fe:4d:ce:4d:72:b8:ae:47:
         2d:e6:58:50:d9:13:e2:a9:1a:f1:22:eb:d0:81:dc:45:78:ae:
         81:4b:24:f2:43:eb:d6:04:c3:b4:f5:16:90:6f:c5:71:7c:e8:
         9e:ec:2e:50:a8:2f:78:aa:c1:75:1a:a3:87:d9:0a:21:35:4a:
         05:4d:cb:fe:e1:c9:72:ac:99:27:b9:63:1d:42:63:15:e1:af:
         73:34:fb:1c:b4:fc:80:7c:ff:2f:64:63:b9:58:f7:33:3e:4e:
         52:d6:27:75:c4:6f:e8:b4:1b:17:3c:ad:1f:cd:80:2f:7c:92:
         c3:2c:6b:66:3d:3a:c3:9d:fa:23:20:08:2b:31:5e:0b:d7:b2:
         ca:db:e1:b5:1c:6a:a2:45:31:79:3a:ee:2b:af:90:c0:68:29:
         79:8d:c7:4a:70:ce:39:0a:8e:d2:19:40:d6:fb:c8:6a:68:bc:
         ff:68:ec:a5:c3:f3:da:b2:ac:5e:a1:4c:a2:9d:6b:09:2c:95:
         6c:45:f3:95:ad:88:ae:07:f4:01:26:47:80:c1:e3:c5:b7:d7:
         d1:40:69:54:8c:04:28:06:15:d3:18:92:4f:a0:ed:a3:e7:ad:
         37:50:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:09:46 2025 by rpki-client