Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3137372e38372e3136382e302f32312d3332203d3e203532353833.roa
File:                     3137372e38372e3136382e302f32312d3332203d3e203532353833.roa (raw, json)
Hash identifier:          Nub9mpFDz6y9jsHl8ERmZpUtx1omHaalvGzkX2znOM0=
Subject key identifier:   1F:DA:2A:28:1B:C5:89:D8:11:7F:D5:31:FA:95:2F:AF:D2:22:5C:1F
Certificate issuer:       /CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
Certificate serial:       567E2FAC601213667230BCD3E17C66F7B9E934F3
Authority key identifier: E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3137372e38372e3136382e302f32312d3332203d3e203532353833.roa
Signing time:             Mon 16 Jun 2025 14:21:12 +0000
ROA not before:           Mon 16 Jun 2025 14:16:12 +0000
ROA not after:            Mon 15 Jun 2026 14:21:12 +0000
asID:                     52583
IP address blocks:        177.87.168.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl
                          rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 02:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7e:2f:ac:60:12:13:66:72:30:bc:d3:e1:7c:66:f7:b9:e9:34:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
        Validity
            Not Before: Jun 16 14:16:12 2025 GMT
            Not After : Jun 15 14:21:12 2026 GMT
        Subject: CN=1FDA2A281BC589D8117FD531FA952FAFD2225C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:b6:61:d2:b9:51:0d:f2:67:7d:83:37:60:
                    94:f7:61:32:cc:af:1c:9a:08:77:9c:53:87:4c:bb:
                    c8:c7:ed:5f:db:d0:46:ad:5d:8e:42:e5:70:04:37:
                    c1:dc:e6:00:9a:1f:d2:9d:a9:37:fb:7c:75:67:37:
                    7b:42:a9:72:66:ff:7b:25:49:ac:46:db:a4:c4:84:
                    b6:73:0d:a4:89:56:55:21:78:d8:54:8f:7b:37:34:
                    bb:bd:be:32:6f:06:79:86:a6:b8:a5:bf:e9:6f:24:
                    aa:56:bc:2e:ed:8f:4e:45:92:a2:7d:28:24:72:1d:
                    1d:04:18:fd:a3:23:05:b6:59:e3:98:2c:ce:99:36:
                    23:84:94:32:05:c2:9e:c9:40:57:70:c0:3b:07:5d:
                    b4:cd:8b:d1:1d:db:a7:16:a6:58:5c:4e:10:c9:05:
                    b2:fd:f1:5d:bc:b7:92:0a:91:15:d3:94:89:d3:96:
                    69:fc:33:c0:13:a0:36:a7:9f:07:d7:7b:b7:09:67:
                    f1:0d:5b:32:73:e4:c6:fc:15:18:20:cc:e4:69:f2:
                    a2:fc:36:7f:b6:bd:db:85:e6:4c:76:e6:9f:25:4c:
                    cb:95:5a:91:5c:d3:41:0a:8a:7a:84:f8:e1:17:b4:
                    53:e8:3f:0b:ba:bc:1c:4f:69:4c:50:aa:a4:82:6e:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DA:2A:28:1B:C5:89:D8:11:7F:D5:31:FA:95:2F:AF:D2:22:5C:1F
            X509v3 Authority Key Identifier:
                keyid:E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3137372e38372e3136382e302f32312d3332203d3e203532353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:4c:0a:d7:6b:6c:13:52:c8:af:9a:2e:74:25:1c:a8:0f:cb:
         65:94:aa:ef:79:98:cf:20:ff:1d:2a:ae:2a:3e:ee:bc:9b:fa:
         03:07:5f:b7:dc:26:b7:05:ba:5a:c3:23:89:fe:c7:64:00:b3:
         64:7a:b2:59:c9:07:fa:ec:fb:8d:ad:2f:8b:da:98:7a:ed:95:
         76:ea:da:bf:7f:ed:bc:62:e1:40:85:f2:12:95:36:b2:12:92:
         4e:a0:ce:00:73:bc:9b:9a:d9:d8:2a:70:5d:d3:dc:9b:b7:ad:
         52:5e:6a:20:1a:00:06:66:fb:27:bb:3c:93:df:62:5d:a0:52:
         01:9f:e0:07:f2:30:61:00:f1:d6:f6:92:83:c8:4c:94:7d:c6:
         3b:4e:48:8a:63:07:a0:9d:d2:ed:6e:65:76:24:af:66:32:3c:
         3e:b6:8b:51:66:74:4d:c8:12:1d:d5:08:03:67:2a:01:78:38:
         47:21:ae:f8:24:00:20:6d:5d:4e:00:fd:27:ce:91:72:4c:f3:
         25:b5:28:e9:df:71:07:e5:0c:33:61:c7:34:a3:b9:0c:80:d4:
         47:39:2b:93:67:0f:2c:53:5e:be:94:a1:3f:88:57:ff:b1:2d:
         6f:36:6e:d5:cf:56:5a:06:41:32:2e:af:c0:16:1e:54:2b:f2:
         e4:ce:43:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 07:27:03 2025 by rpki-client