Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/3137372e38352e3139302e302f32342d3234203d3e20323639343136.roa
File:                     3137372e38352e3139302e302f32342d3234203d3e20323639343136.roa (raw, json)
Hash identifier:          N8NGEVHB946x1MgbIiqy89IzxeMOD6XV5d/KzmKIXMM=
Subject key identifier:   63:1A:DA:8B:66:E9:EB:E0:9D:2B:5D:22:DC:5A:3F:AF:43:13:C3:E3
Certificate issuer:       /CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
Certificate serial:       522436688086C126E983C023EA889356D03B1EAB
Authority key identifier: 8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/3137372e38352e3139302e302f32342d3234203d3e20323639343136.roa
Signing time:             Thu 24 Apr 2025 13:44:39 +0000
ROA not before:           Thu 24 Apr 2025 13:39:39 +0000
ROA not after:            Thu 23 Apr 2026 13:44:39 +0000
asID:                     269416
IP address blocks:        177.85.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 04:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:24:36:68:80:86:c1:26:e9:83:c0:23:ea:88:93:56:d0:3b:1e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2
        Validity
            Not Before: Apr 24 13:39:39 2025 GMT
            Not After : Apr 23 13:44:39 2026 GMT
        Subject: CN=631ADA8B66E9EBE09D2B5D22DC5A3FAF4313C3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:f4:3b:48:7a:2d:ad:36:e4:c3:78:5d:53:
                    b9:dd:02:70:8d:5b:7a:3c:f3:ff:2d:6f:5a:e2:8c:
                    4e:02:76:71:74:c3:8d:43:b3:8e:45:89:8d:8b:17:
                    29:02:cb:aa:18:fc:a3:62:df:1a:b7:a7:e0:5f:29:
                    4f:35:39:11:58:60:f6:ac:bc:3d:68:88:34:15:4b:
                    37:76:0b:78:05:1c:0e:fb:4f:f1:ab:c4:4b:06:77:
                    91:fb:ac:ca:91:4e:a5:0b:52:3e:a1:85:f8:b1:78:
                    3d:73:d7:73:52:83:f4:e2:e4:ec:22:f6:ee:f1:01:
                    27:f0:d9:99:c3:63:03:48:f0:23:e9:ec:cc:9f:60:
                    a8:91:02:4c:e6:cf:62:82:6f:cd:ad:b8:9d:80:8b:
                    5c:0f:be:7e:33:ab:f6:c8:a7:1c:e6:58:21:a1:84:
                    74:05:63:e3:77:c0:bf:e5:28:3f:55:02:65:92:c4:
                    21:ff:4d:51:b1:59:dc:cd:8d:2b:24:f0:1e:08:6d:
                    37:13:9d:92:dc:86:06:4d:d5:28:f8:3b:ee:85:6c:
                    b8:b8:01:ec:68:0a:36:66:ec:85:77:2a:77:f1:92:
                    bd:5b:09:42:7e:a2:2e:60:98:a7:1d:71:9f:52:19:
                    15:fd:1e:93:4a:00:aa:b5:0f:3c:e5:20:d4:dc:a0:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1A:DA:8B:66:E9:EB:E0:9D:2B:5D:22:DC:5A:3F:AF:43:13:C3:E3
            X509v3 Authority Key Identifier:
                keyid:8A:B2:A3:D9:66:16:CA:30:40:EC:FC:C3:0E:C8:98:EF:F6:8B:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AB2A3D96616CA3040ECFCC30EC898EFF68BCDC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/3137372e38352e3139302e302f32342d3234203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:96:b3:1d:4e:97:2b:f6:24:cd:91:22:19:4e:f8:69:98:ae:
         b3:9b:b0:12:0a:a6:e1:d7:1a:3e:60:6c:dc:f6:2f:be:c8:67:
         61:b2:f6:29:15:53:ec:28:d5:c9:a7:3b:54:40:f6:fc:f8:99:
         a4:1e:f3:1b:86:c3:23:fa:68:07:e4:b6:9a:ae:40:c2:63:14:
         5e:6f:25:e9:d1:31:bf:86:42:6f:3d:98:6b:76:66:48:91:e9:
         06:ed:99:7e:13:d0:e9:1a:14:b6:e4:08:dd:be:a8:99:87:88:
         44:9e:cc:5c:7e:5a:31:a7:6f:ca:93:f5:3f:69:b4:99:a6:e3:
         e2:e8:ff:86:36:a0:cf:57:09:3f:4f:11:d0:ea:d0:d8:04:b9:
         74:6f:5d:2c:9f:9d:f9:65:01:8d:1d:cc:e6:73:b6:26:e8:6e:
         45:fc:0d:ff:4c:3f:e5:d3:b3:19:6d:35:7f:77:6e:0e:6d:7f:
         0a:29:3b:e2:c6:1a:0c:5e:e3:fc:1e:6c:e1:3d:e8:5c:05:99:
         11:c0:86:86:11:c8:17:23:36:51:fd:85:b0:14:eb:db:ab:ed:
         fb:b2:e7:6f:9d:6e:f2:7f:9e:89:2a:a7:5c:34:d5:77:89:b5:
         89:68:db:2b:88:7a:b7:8c:e0:a3:62:6e:6a:6b:d2:f4:7f:36:
         da:e0:fc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:58:17 2025 by rpki-client