Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/3137372e31312e3136382e302f32312d3234203d3e203532393033.roa
File:                     3137372e31312e3136382e302f32312d3234203d3e203532393033.roa (raw, json)
Hash identifier:          iOzDdNH8/H3yTtsw64Ap2oq+bEYG7ltYR0/gaKPie0I=
Subject key identifier:   46:4C:78:4B:A1:B0:85:3A:0B:FD:C6:8F:46:97:E6:24:AC:C4:CB:87
Certificate issuer:       /CN=36ECAA0A83F15C768CBF66E950397B9929964174
Certificate serial:       256CC698C8DC828DD289B83A3C691A7284E966F9
Authority key identifier: 36:EC:AA:0A:83:F1:5C:76:8C:BF:66:E9:50:39:7B:99:29:96:41:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ECAA0A83F15C768CBF66E950397B9929964174.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/3137372e31312e3136382e302f32312d3234203d3e203532393033.roa
Signing time:             Thu 06 Mar 2025 08:51:57 +0000
ROA not before:           Thu 06 Mar 2025 08:46:57 +0000
ROA not after:            Thu 05 Mar 2026 08:51:57 +0000
asID:                     52903
IP address blocks:        177.11.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/36ECAA0A83F15C768CBF66E950397B9929964174.crl
                          rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/36ECAA0A83F15C768CBF66E950397B9929964174.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ECAA0A83F15C768CBF66E950397B9929964174.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 01:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6c:c6:98:c8:dc:82:8d:d2:89:b8:3a:3c:69:1a:72:84:e9:66:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ECAA0A83F15C768CBF66E950397B9929964174
        Validity
            Not Before: Mar  6 08:46:57 2025 GMT
            Not After : Mar  5 08:51:57 2026 GMT
        Subject: CN=464C784BA1B0853A0BFDC68F4697E624ACC4CB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e8:ff:19:d9:91:89:4c:6c:38:19:03:4e:ed:
                    10:8b:c5:18:9d:7b:f7:ae:81:f8:09:62:be:4f:8b:
                    d2:92:71:72:a5:7f:3b:09:0a:f9:34:7e:ea:6c:01:
                    1f:a1:ed:e0:cd:99:8e:b7:02:a3:6d:b3:6e:e0:ce:
                    52:5a:79:b8:26:05:6b:8b:d2:66:7f:89:fc:aa:86:
                    5c:35:74:8d:54:63:fd:54:34:37:a2:3b:36:2b:31:
                    66:9f:13:4c:14:ba:53:a3:6f:bd:3c:5a:6c:e2:69:
                    99:56:77:52:b4:18:52:70:09:65:2d:d7:85:7e:ee:
                    af:7a:8d:09:97:7e:7d:14:e2:5b:26:73:17:1b:67:
                    cb:dc:ab:4b:37:4a:3c:e1:c2:db:39:1d:36:02:8d:
                    c9:05:41:8b:79:d2:d8:e3:72:2d:c4:36:53:71:ac:
                    f6:80:81:47:3f:03:c4:8e:e0:0e:e5:42:e7:a6:3b:
                    df:e0:e3:b6:f0:0d:ee:1a:96:29:1c:c7:bc:d9:2d:
                    96:9c:5d:15:fc:6f:a2:8a:1b:a0:b9:d6:7b:13:95:
                    4d:dc:83:5b:4e:ce:11:f6:8e:ac:59:92:3e:af:c7:
                    c1:9b:c4:c6:ba:72:5c:46:72:7f:88:d3:a8:7d:c6:
                    71:8b:c3:7d:94:7d:07:3c:3f:14:cc:7f:b0:88:36:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4C:78:4B:A1:B0:85:3A:0B:FD:C6:8F:46:97:E6:24:AC:C4:CB:87
            X509v3 Authority Key Identifier:
                keyid:36:EC:AA:0A:83:F1:5C:76:8C:BF:66:E9:50:39:7B:99:29:96:41:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/36ECAA0A83F15C768CBF66E950397B9929964174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ECAA0A83F15C768CBF66E950397B9929964174.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/1/3137372e31312e3136382e302f32312d3234203d3e203532393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:5e:6a:71:8f:7a:2a:7c:7e:19:63:ba:bb:5b:c5:45:3a:4d:
         e6:95:42:60:06:99:fd:72:3b:ff:26:82:72:21:aa:1b:58:f4:
         d7:8a:12:85:88:e6:90:7f:75:ac:0c:db:81:23:06:e0:b7:05:
         29:f2:0c:f3:2c:4a:80:c7:6b:90:8c:79:a1:c0:f3:6b:21:66:
         57:66:92:af:1c:df:4a:c2:68:9a:6f:b9:fd:20:5a:b1:ed:96:
         c4:18:9f:18:89:66:2e:ed:e3:5c:b9:db:eb:45:bb:16:d1:8c:
         f7:4e:3e:f9:72:f1:8d:f9:25:25:47:a5:a6:3e:f9:fa:28:32:
         aa:bd:62:e4:0f:c6:58:71:e7:59:64:68:6e:02:e5:57:46:48:
         ff:e1:ee:06:56:5c:3e:0f:46:4a:ad:54:66:8e:90:63:9f:21:
         3f:fd:bd:46:86:3d:13:ff:30:49:d9:4c:14:d9:7a:2b:2d:7f:
         27:70:c5:a3:53:b7:d7:88:30:5d:9a:71:81:74:20:a0:49:b2:
         0d:b0:96:5d:2a:30:94:7d:0a:42:f3:4d:8d:68:ee:c7:34:38:
         f8:f5:00:6e:55:21:10:9a:b5:7b:58:09:d2:d5:65:2d:42:89:
         ba:e5:b3:36:6d:13:46:44:48:41:2b:45:15:0e:e7:ca:81:ae:
         eb:48:c2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:06:57 2025 by rpki-client