Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3135322e3131322e302f32312d3231203d3e20323733333039.roa
File:                     3137372e3135322e3131322e302f32312d3231203d3e20323733333039.roa (raw, json)
Hash identifier:          puVh3NQfOeuuQHbCQzEHFe5pLQ08JcSO4UPmky8a1m0=
Subject key identifier:   86:F4:9C:95:07:98:70:7F:DC:F0:0D:15:CB:8F:66:6C:5B:94:2B:32
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       0F9B2E082863480B71D1A636F15ADE19B82B9613
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3135322e3131322e302f32312d3231203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:38 +0000
ROA not before:           Wed 09 Apr 2025 13:48:38 +0000
ROA not after:            Wed 08 Apr 2026 13:53:38 +0000
asID:                     273309
IP address blocks:        177.152.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 05:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9b:2e:08:28:63:48:0b:71:d1:a6:36:f1:5a:de:19:b8:2b:96:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:38 2025 GMT
            Not After : Apr  8 13:53:38 2026 GMT
        Subject: CN=86F49C950798707FDCF00D15CB8F666C5B942B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:77:88:f6:b6:fb:23:9f:4a:02:ec:d8:e9:f3:
                    61:5f:80:c6:6b:ac:16:e0:d4:2a:11:67:b9:07:b3:
                    34:e5:5d:7b:1a:4d:72:b5:7d:26:86:0b:01:2a:8b:
                    30:79:9b:3e:2d:a9:27:51:dc:7a:c6:8e:24:29:d3:
                    70:b3:bd:58:cc:d2:7c:be:fe:9e:f3:a1:14:9d:38:
                    12:2d:05:92:5f:8d:8f:77:93:1f:e5:34:11:82:43:
                    70:50:3d:98:df:56:43:e1:1e:cc:76:08:e2:62:41:
                    31:df:d9:e0:f9:da:3b:2a:21:30:69:8d:66:28:fd:
                    12:5f:aa:8b:62:c5:01:e4:ce:ef:a8:76:8e:fb:df:
                    ac:4c:cd:c5:97:5b:c1:dd:6c:b7:e5:e4:2d:bf:52:
                    ee:cf:ab:08:bf:e4:a7:a0:f6:59:bc:e6:36:e3:a0:
                    b6:18:0d:4a:95:85:a0:65:c8:a6:7c:65:be:f8:04:
                    0d:e5:b8:ba:fc:d0:30:00:74:f0:0e:1f:0a:30:81:
                    cb:6e:81:95:e8:29:01:1d:61:91:97:97:9a:b8:e5:
                    82:3e:8c:e0:c5:93:b6:38:08:3b:20:db:22:2b:19:
                    c0:2c:82:42:a0:33:55:8f:88:92:bb:82:e5:36:91:
                    c0:18:ea:da:3f:7c:87:04:b4:3d:ba:ef:8d:ef:f9:
                    2a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F4:9C:95:07:98:70:7F:DC:F0:0D:15:CB:8F:66:6C:5B:94:2B:32
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3135322e3131322e302f32312d3231203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:53:bd:42:0c:39:62:1a:fd:6c:fa:d0:a0:56:1e:63:07:f3:
         88:08:d6:99:6b:fc:0f:50:55:ce:48:ee:5b:c7:cb:2c:f9:8e:
         2b:c2:2a:63:b3:48:8e:16:04:16:b2:1d:9c:6c:0e:6f:38:22:
         4c:19:b8:da:82:f3:1c:14:a1:93:c2:36:c2:c6:86:3f:dc:1c:
         8e:86:5c:1c:b8:b2:d2:bc:b6:00:af:57:be:4e:02:87:07:a8:
         1f:ca:af:55:2e:1c:f1:4c:a8:29:b2:36:4e:7f:a9:c0:56:34:
         6a:83:0e:8b:e1:8c:7b:b8:76:2c:ff:dd:1f:ed:ce:61:f3:00:
         99:47:66:11:74:96:ed:fe:e6:38:65:ef:48:8e:bb:f4:ea:73:
         25:31:44:4f:7f:52:aa:cd:f6:c0:75:3d:99:ae:f6:45:f9:eb:
         16:0b:c5:d8:9e:81:e2:ae:b3:8b:c5:87:bf:b2:0b:e6:5a:7f:
         c7:28:f7:87:05:f4:09:e6:43:e6:1c:99:90:e0:ab:43:33:44:
         b4:29:b6:28:ed:e4:ff:1b:80:aa:88:56:56:0c:f4:3f:83:7c:
         51:f8:35:63:74:22:42:06:7e:cc:28:52:f9:f4:ae:7e:b8:a8:
         fc:c6:bc:2b:6e:93:fb:7a:68:40:f6:79:6c:bc:c2:33:af:b0:
         d9:fc:d9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:04:59 2025 by rpki-client