Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa
File:                     3137372e33382e39362e302f32312d3234203d3e20323632343033.roa (raw, json)
Hash identifier:          HeS/vP/k8O3myjd8c7unQq5+FYRTZTDm5myrFJ3AvyM=
Subject key identifier:   BC:75:DE:FE:97:06:4E:E1:BC:EC:6D:B2:E4:A9:5D:2D:4D:64:9F:90
Certificate issuer:       /CN=2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7
Certificate serial:       78439C0AE7CCB5EE1E1100A2543076741ECEAF61
Authority key identifier: 2B:7D:84:C8:70:AF:A4:34:D8:F9:50:E0:A3:52:1C:F2:6C:D0:C7:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa
Signing time:             Wed 18 Jun 2025 13:38:54 +0000
ROA not before:           Wed 18 Jun 2025 13:33:54 +0000
ROA not after:            Wed 17 Jun 2026 13:38:54 +0000
asID:                     262403
IP address blocks:        177.38.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.crl
                          rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 10:53:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:43:9c:0a:e7:cc:b5:ee:1e:11:00:a2:54:30:76:74:1e:ce:af:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7
        Validity
            Not Before: Jun 18 13:33:54 2025 GMT
            Not After : Jun 17 13:38:54 2026 GMT
        Subject: CN=BC75DEFE97064EE1BCEC6DB2E4A95D2D4D649F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:aa:72:cb:e1:03:34:14:5d:32:1f:9f:e1:53:
                    31:4d:25:95:ad:77:de:e9:40:d8:d1:d8:4c:4a:50:
                    32:36:99:d9:3a:f0:e0:66:97:07:40:b1:8d:dc:1c:
                    53:e0:a7:db:35:b4:7f:d1:9f:c0:9f:b5:8d:6d:97:
                    c2:82:bf:b1:4c:7e:9b:c2:03:fe:42:64:c2:4d:2f:
                    48:1a:65:6a:12:60:b9:0a:fb:07:52:97:1b:fe:97:
                    70:53:35:c9:a8:c3:09:17:28:fe:30:e0:57:e3:4e:
                    bc:7e:d4:69:95:aa:b4:7f:dd:4a:f8:dc:33:90:9c:
                    87:54:45:74:e4:12:34:27:9d:02:dc:00:21:85:bb:
                    a4:43:e4:67:da:ed:eb:35:3d:67:61:fe:af:ca:10:
                    49:48:76:3e:3c:d3:47:3d:57:69:33:4b:b3:a1:fe:
                    e7:90:ae:c8:94:b5:87:57:cd:ad:ed:d6:7e:7c:fe:
                    5e:ae:62:8c:a1:b2:73:50:19:14:e5:a3:9c:a9:a5:
                    33:1b:20:d6:ca:57:b8:fe:27:d8:1d:ee:af:76:53:
                    71:14:39:16:be:3e:0d:fe:46:e4:8c:55:28:e7:c4:
                    40:50:66:f5:7a:ca:1a:ca:d0:c7:c0:92:5c:1a:35:
                    72:fa:73:8d:62:3a:55:93:c4:9e:bd:30:f3:be:89:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:75:DE:FE:97:06:4E:E1:BC:EC:6D:B2:E4:A9:5D:2D:4D:64:9F:90
            X509v3 Authority Key Identifier:
                keyid:2B:7D:84:C8:70:AF:A4:34:D8:F9:50:E0:A3:52:1C:F2:6C:D0:C7:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:33:27:2b:e0:9f:1d:6c:23:25:61:d4:14:23:47:1c:71:2b:
         e0:26:57:8d:38:c1:bd:59:33:72:e2:4b:ec:a2:de:c6:19:fb:
         82:df:94:dc:08:22:69:e0:8e:36:1c:c3:2b:98:8b:5a:ca:29:
         9c:9f:99:1d:2c:0b:6b:df:15:de:65:ab:21:8a:c8:7c:ec:e3:
         9f:82:5a:ed:2a:85:b3:ad:56:ac:b6:e3:a4:7b:f5:b2:1d:eb:
         64:53:c3:e9:ae:97:ff:e6:a7:95:61:0f:83:7d:b9:b9:f5:2b:
         20:7a:34:de:0a:be:c9:92:10:81:b6:7b:8f:f1:5c:7f:60:2d:
         d3:05:57:ae:86:ee:e1:1d:17:3e:33:a9:ac:e0:a1:50:3d:38:
         50:0d:ab:e3:a5:a9:77:23:a5:8d:89:0b:bf:38:b7:73:73:fa:
         65:9a:88:aa:f4:68:e8:21:72:d2:b4:51:40:41:61:53:2e:fd:
         e5:00:27:4e:ba:9a:53:23:14:a7:87:92:f8:92:11:1d:93:70:
         b7:d0:36:5a:c6:bb:fa:6a:cb:f9:0c:79:70:57:68:c9:25:bb:
         42:94:e5:cc:2f:c6:45:de:3c:6b:68:43:c3:d2:21:43:d9:8d:
         25:5b:de:e3:3b:65:7c:7d:c9:42:92:4d:8f:e8:4d:55:fd:ef:
         fa:ec:cf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 04:55:05 2025 by rpki-client