Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137362e302f32332d3233203d3e20323731313735.roa
File:                     3137392e35312e3137362e302f32332d3233203d3e20323731313735.roa (raw, json)
Hash identifier:          y7jS8+eCy8yM4gv+NvrGzxkT4fV2ewuNPYntc+MfACI=
Subject key identifier:   0D:FD:4C:A1:2E:67:75:36:47:01:62:F0:C0:F8:CF:7C:F7:9A:71:E2
Certificate issuer:       /CN=46D2B31940627B8DA0E1405BFD2813DB97711E0A
Certificate serial:       1A433F09129F5545FB65D2F21E0B6C9336FD7773
Authority key identifier: 46:D2:B3:19:40:62:7B:8D:A0:E1:40:5B:FD:28:13:DB:97:71:1E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137362e302f32332d3233203d3e20323731313735.roa
Signing time:             Fri 25 Apr 2025 11:13:58 +0000
ROA not before:           Fri 25 Apr 2025 11:08:58 +0000
ROA not after:            Fri 24 Apr 2026 11:13:58 +0000
asID:                     271175
IP address blocks:        179.51.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.crl
                          rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 05:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:43:3f:09:12:9f:55:45:fb:65:d2:f2:1e:0b:6c:93:36:fd:77:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46D2B31940627B8DA0E1405BFD2813DB97711E0A
        Validity
            Not Before: Apr 25 11:08:58 2025 GMT
            Not After : Apr 24 11:13:58 2026 GMT
        Subject: CN=0DFD4CA12E677536470162F0C0F8CF7CF79A71E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:e2:bb:10:89:49:cb:ba:76:0a:bb:1f:f4:
                    cb:f8:5f:87:d2:dd:a0:dd:22:87:12:0e:92:46:da:
                    3f:d9:1f:b8:68:ed:f2:91:71:c9:ad:77:61:57:b6:
                    b1:1b:93:6c:aa:4b:80:81:af:77:a7:05:6f:d6:e2:
                    de:df:15:c9:fa:4b:18:47:31:49:72:2b:d5:e6:c4:
                    aa:cd:76:a5:b2:aa:71:d4:85:cb:c1:ca:0c:7a:f9:
                    da:81:1d:45:1f:ab:52:1e:5b:b3:45:90:29:ba:57:
                    48:50:1b:65:6c:78:38:50:c0:6a:7e:54:9f:38:cc:
                    c8:47:da:83:7d:18:14:9a:df:63:8a:58:fd:1f:be:
                    a9:9c:9e:b3:d4:9a:b4:f4:9f:ee:a3:cc:1b:c2:5d:
                    63:68:1f:43:2d:87:c4:f2:5f:4c:36:15:e7:59:6d:
                    a9:b9:51:fa:68:6e:fb:8b:8e:3d:99:bf:09:71:c1:
                    40:77:6e:4c:85:19:28:b8:b8:a3:19:48:99:75:6d:
                    c2:8a:69:38:5b:29:a4:50:a6:05:e5:48:b6:b7:81:
                    d3:41:c2:62:ae:99:55:a7:72:f1:f9:49:9c:2c:b1:
                    1b:65:33:dc:27:60:07:80:82:4e:91:d7:3c:64:82:
                    34:45:23:92:8f:d1:96:73:15:8f:cd:a5:ca:31:83:
                    1a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FD:4C:A1:2E:67:75:36:47:01:62:F0:C0:F8:CF:7C:F7:9A:71:E2
            X509v3 Authority Key Identifier:
                keyid:46:D2:B3:19:40:62:7B:8D:A0:E1:40:5B:FD:28:13:DB:97:71:1E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137362e302f32332d3233203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:6c:be:a3:cb:17:e2:fd:71:f2:ec:1a:bb:0d:de:b8:26:80:
         ff:9f:ae:a4:a2:e0:72:5a:b2:3e:2f:3b:d5:76:9a:ac:1d:61:
         57:56:5a:05:74:34:b0:d0:00:7e:75:c1:c3:bf:ee:5e:f1:90:
         90:2a:bb:11:e2:32:30:98:24:ec:1c:cf:51:8c:af:f6:9f:30:
         48:79:7d:84:de:41:74:76:ab:3f:7f:5f:7b:64:c8:5d:0e:ba:
         00:da:ce:f8:31:98:cf:36:f0:5e:10:5a:59:3b:f2:2f:b8:1e:
         8f:e9:53:03:77:5e:cd:69:e8:45:79:6a:b8:ce:71:25:3a:31:
         d2:b1:bb:94:a1:82:1b:82:36:6e:6d:9f:b6:4e:5e:7b:ff:1b:
         12:a8:90:3b:bf:fb:8f:1f:c6:d2:1f:4e:01:8c:05:d7:aa:ae:
         1c:b5:93:88:c7:bd:dd:6c:5a:6c:ae:70:dc:46:1a:c0:23:97:
         c3:b9:b7:43:6b:f0:79:4f:fc:2e:14:73:e6:40:46:35:73:77:
         89:13:c9:18:15:38:35:94:e6:e9:b2:c0:ac:f9:e7:c2:89:cb:
         d1:96:39:41:d0:4c:01:64:d8:6a:de:ac:88:80:d8:eb:29:97:
         70:e4:20:73:f9:35:aa:84:87:75:5a:96:f7:a6:ba:54:a9:44:
         95:c0:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:29:53 2025 by rpki-client