Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137382e302f32342d3234203d3e20323731313735.roa
File:                     3137392e35312e3137382e302f32342d3234203d3e20323731313735.roa (raw, json)
Hash identifier:          D3SfLugZwfq1/VMN2bvg50xMrbh2tyCmMT13tlZGd6A=
Subject key identifier:   16:FA:24:F4:95:06:28:C2:3A:45:EB:39:55:87:54:43:05:9C:2E:A6
Certificate issuer:       /CN=46D2B31940627B8DA0E1405BFD2813DB97711E0A
Certificate serial:       1D8EA3B7436F6BAF5CE22E19C5FEBFAB45E29F79
Authority key identifier: 46:D2:B3:19:40:62:7B:8D:A0:E1:40:5B:FD:28:13:DB:97:71:1E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137382e302f32342d3234203d3e20323731313735.roa
Signing time:             Fri 25 Apr 2025 11:13:58 +0000
ROA not before:           Fri 25 Apr 2025 11:08:58 +0000
ROA not after:            Fri 24 Apr 2026 11:13:58 +0000
asID:                     271175
IP address blocks:        179.51.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.crl
                          rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 22:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8e:a3:b7:43:6f:6b:af:5c:e2:2e:19:c5:fe:bf:ab:45:e2:9f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46D2B31940627B8DA0E1405BFD2813DB97711E0A
        Validity
            Not Before: Apr 25 11:08:58 2025 GMT
            Not After : Apr 24 11:13:58 2026 GMT
        Subject: CN=16FA24F4950628C23A45EB3955875443059C2EA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:5d:0f:4d:82:bd:bc:84:86:ef:7a:16:7a:
                    50:38:0c:48:a9:2e:8d:ae:7f:f9:a0:96:19:08:a2:
                    a5:23:4b:6c:04:b9:7e:ad:47:be:5f:93:e7:b4:5a:
                    8c:7b:88:8d:f8:cf:ca:9b:e6:85:45:7f:9c:b9:a0:
                    26:a6:a9:ad:24:12:8f:87:68:9e:56:92:84:30:35:
                    4e:9e:88:c2:63:e2:46:00:51:ec:67:51:bd:5b:ef:
                    53:52:07:1c:3d:b2:bf:5c:5e:0d:04:02:ff:7f:62:
                    6e:b7:6c:02:b9:06:13:87:be:a0:b5:47:68:66:61:
                    76:33:a9:f5:d6:fe:f6:6a:31:9e:e3:70:33:cd:19:
                    2d:b7:a3:2a:dd:35:63:5f:0e:25:0c:71:0a:12:b1:
                    4c:6e:5a:89:b5:82:52:7b:37:1c:e5:ff:02:ec:de:
                    4c:c7:13:fe:1f:57:de:6f:c2:00:0c:eb:ea:05:58:
                    36:5f:90:d4:92:70:9d:e8:49:f5:0b:af:f4:c9:7b:
                    73:c4:d4:de:72:ad:7f:3f:9f:c8:c1:f8:63:bf:99:
                    40:f5:9b:87:b5:c8:78:b6:26:64:92:ea:cd:98:d8:
                    df:0b:63:eb:8f:61:b7:15:7b:c0:b4:bb:c1:69:07:
                    f5:76:5e:f3:9f:d6:52:ef:41:5e:15:f1:0b:99:95:
                    cd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FA:24:F4:95:06:28:C2:3A:45:EB:39:55:87:54:43:05:9C:2E:A6
            X509v3 Authority Key Identifier:
                keyid:46:D2:B3:19:40:62:7B:8D:A0:E1:40:5B:FD:28:13:DB:97:71:1E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/46D2B31940627B8DA0E1405BFD2813DB97711E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46D2B31940627B8DA0E1405BFD2813DB97711E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/3137392e35312e3137382e302f32342d3234203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:a4:39:0f:ca:6a:d9:ca:d8:fe:db:aa:0e:99:30:52:5f:de:
         5e:f5:fd:03:74:43:a4:37:09:d9:ea:30:ab:95:33:9a:97:53:
         a2:12:d6:3c:71:61:12:aa:34:8e:00:87:65:b2:45:27:5b:f3:
         d2:dc:03:79:bd:6b:2b:8f:7d:39:ad:47:78:39:6d:06:66:b7:
         93:ed:4c:6f:42:1a:e8:91:da:b6:a9:c1:16:83:b3:ba:36:81:
         7d:e8:33:26:1d:41:37:50:d2:f1:69:2b:bf:50:cc:00:1f:e3:
         1a:cc:9f:95:43:2a:5a:8a:18:4b:74:11:b9:34:39:5c:f4:1d:
         d4:f6:ae:bc:6c:f1:a3:d7:09:43:ae:a0:4a:fb:d1:e6:a5:82:
         62:ef:dc:96:a9:e7:1d:0c:0a:60:60:0d:33:42:d2:27:9e:09:
         6a:7b:71:a5:02:19:30:ee:2e:5b:30:94:85:80:2d:8f:c4:1c:
         98:bb:00:61:68:1e:b0:af:1a:7b:0c:a1:1a:d7:a8:79:5d:fb:
         22:a1:56:43:06:2b:43:25:c4:71:92:e6:71:85:5c:62:8d:c4:
         62:eb:07:be:98:19:fb:ce:f2:aa:b9:43:7c:1a:3a:79:dd:19:
         ba:e3:2d:3f:9a:27:76:23:f2:7d:92:d9:d6:03:4e:ff:78:46:
         72:13:66:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:47:32 2025 by rpki-client