Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130382e302f32342d3234203d3e203532373231.roa
File:                     3137372e38342e3130382e302f32342d3234203d3e203532373231.roa (raw, json)
Hash identifier:          Sjpm7rftT5+EyXMrMD0GXCOk+xiPMFd0/Uj7z+LkKHQ=
Subject key identifier:   F7:6A:DB:E4:E8:C3:C7:3A:00:14:79:7F:06:C5:6F:F2:53:AC:69:C5
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       2C71EEC256AB83B3BEE4105BBDA783A384BBC810
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130382e302f32342d3234203d3e203532373231.roa
Signing time:             Fri 25 Apr 2025 14:50:35 +0000
ROA not before:           Fri 25 Apr 2025 14:45:35 +0000
ROA not after:            Fri 24 Apr 2026 14:50:35 +0000
asID:                     52721
IP address blocks:        177.84.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 04:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:71:ee:c2:56:ab:83:b3:be:e4:10:5b:bd:a7:83:a3:84:bb:c8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:35 2025 GMT
            Not After : Apr 24 14:50:35 2026 GMT
        Subject: CN=F76ADBE4E8C3C73A0014797F06C56FF253AC69C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4f:15:3c:32:06:b4:d6:48:b9:46:75:54:f4:
                    a2:1b:2e:fa:c6:d5:fc:5e:8a:5e:a7:a2:7a:bd:73:
                    ca:0c:2f:34:5e:b1:c1:1a:b6:be:5c:9c:28:24:7e:
                    49:8a:fc:38:5f:a2:c9:2f:b0:a5:56:c4:5c:a7:74:
                    85:3f:07:1a:6a:c2:65:6f:6f:8c:82:91:32:1b:93:
                    35:6d:3a:c7:27:cb:33:66:98:51:c4:d0:65:2c:14:
                    86:99:f1:69:d8:fa:68:31:42:ae:af:f1:e6:2a:47:
                    86:ff:07:a3:1c:41:59:f8:a2:db:fe:59:d4:66:c6:
                    65:22:e7:16:b5:ba:99:a8:32:6a:72:14:07:7a:2b:
                    d9:3d:10:7b:05:09:3a:77:88:10:31:0b:ab:c2:66:
                    ac:05:cd:3a:9c:ab:ef:c6:be:c3:8d:b9:d6:a9:26:
                    a5:41:18:d6:ec:f3:5f:71:b9:e4:bb:7b:ed:86:17:
                    4d:3a:18:5a:5c:c1:aa:bd:47:57:e5:0f:8c:43:34:
                    4d:df:0f:9d:49:23:25:03:e1:16:ac:f6:d0:b4:2a:
                    04:95:cc:10:e4:18:83:4d:33:8b:29:26:cd:f0:d3:
                    37:4b:3a:6c:93:80:bc:6f:ed:71:e8:d1:e7:89:2f:
                    b6:09:59:35:58:04:f6:d8:7e:1b:fe:68:13:04:43:
                    f2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6A:DB:E4:E8:C3:C7:3A:00:14:79:7F:06:C5:6F:F2:53:AC:69:C5
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130382e302f32342d3234203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:3e:44:ee:ff:90:27:f7:1d:cb:a3:1d:e3:cc:94:1e:bc:8f:
         1a:86:15:fb:be:2b:3a:94:65:e0:22:7b:cc:34:b0:84:6f:a4:
         3a:fc:6c:f6:92:44:43:16:36:65:17:73:2c:21:08:66:ea:2f:
         85:74:1c:6f:de:be:61:3e:75:e4:52:ce:9f:cb:e8:7d:66:ff:
         33:53:13:4d:86:88:3c:eb:40:88:96:df:dc:0c:62:24:57:2f:
         02:66:bf:87:bf:8d:f1:e1:f8:53:52:52:a1:6c:30:4b:86:93:
         8f:f3:fb:1b:48:18:6b:94:87:0f:06:f1:c1:24:ba:9e:d0:03:
         f2:2e:c6:1c:5b:c1:9d:17:d1:e1:54:3d:f0:1c:24:e7:88:f9:
         cb:ae:48:0c:b0:fb:3f:6a:03:95:71:84:07:f6:19:2a:17:04:
         b8:64:4f:ae:02:8f:bf:15:38:cb:27:c8:af:7d:e1:d1:d2:3a:
         9e:af:5d:db:68:11:09:1e:70:cb:23:97:0e:39:4e:a8:50:4d:
         33:73:0c:fb:00:e1:1e:a7:9d:9f:64:85:3c:d6:3b:d5:3a:1d:
         ad:1d:53:c5:00:1e:d6:25:39:c0:1c:c7:3c:a6:13:97:94:b0:
         ff:47:4d:5a:f7:c6:d8:7d:09:6e:25:39:f5:1e:3b:fe:27:cf:
         1e:f3:48:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:37:59 2025 by rpki-client