Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa
File:                     3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa (raw, json)
Hash identifier:          uxQ4a2/rI8skR/W3Q74JI5wlCovCFidAjIS3pYck8OI=
Subject key identifier:   EB:14:AF:0C:48:E8:45:B9:8B:06:FD:B0:46:68:2A:B3:61:EB:D1:3A
Certificate issuer:       /CN=BE89F6747B326E779CB3E94906319A8C0A0C1C81
Certificate serial:       37EF4054390F08D34EDCADF7D3E78F7B37CD747F
Authority key identifier: BE:89:F6:74:7B:32:6E:77:9C:B3:E9:49:06:31:9A:8C:0A:0C:1C:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE89F6747B326E779CB3E94906319A8C0A0C1C81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa
Signing time:             Thu 03 Apr 2025 17:45:35 +0000
ROA not before:           Thu 03 Apr 2025 17:40:35 +0000
ROA not after:            Thu 02 Apr 2026 17:45:35 +0000
asID:                     262742
IP address blocks:        177.104.32.0/19 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.crl
                          rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE89F6747B326E779CB3E94906319A8C0A0C1C81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 00:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ef:40:54:39:0f:08:d3:4e:dc:ad:f7:d3:e7:8f:7b:37:cd:74:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE89F6747B326E779CB3E94906319A8C0A0C1C81
        Validity
            Not Before: Apr  3 17:40:35 2025 GMT
            Not After : Apr  2 17:45:35 2026 GMT
        Subject: CN=EB14AF0C48E845B98B06FDB046682AB361EBD13A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:92:96:5f:9b:e0:fc:5d:06:4e:72:e1:84:
                    62:cc:a3:19:97:e3:7f:29:80:68:ae:44:5f:88:bb:
                    50:76:be:25:1e:51:a2:bb:12:9a:04:e9:71:56:52:
                    15:88:3d:3a:29:6b:b5:17:de:7d:43:c9:c0:0f:80:
                    7a:f3:56:de:ef:46:86:1b:3a:71:0d:55:9c:56:39:
                    d0:97:54:69:52:c3:42:10:3a:28:5a:04:d4:c0:cf:
                    d5:21:b0:ad:a3:a2:fd:c5:bb:92:5a:47:e5:db:3a:
                    ec:f0:54:45:c4:03:31:57:d3:0d:57:71:c3:1d:4c:
                    b7:a0:e6:8b:82:15:b1:9d:9f:5f:ca:0f:97:82:c3:
                    5d:d8:1f:4b:5d:6d:09:c4:34:ea:cc:6c:b0:e5:38:
                    8a:44:51:1a:0e:c3:42:54:2a:62:28:25:a7:b0:fe:
                    51:b9:be:c7:51:0b:9f:47:63:29:4a:1b:04:6e:eb:
                    3b:b6:50:7f:af:ce:b4:3c:b9:d3:9d:59:47:ed:14:
                    81:62:17:5a:3c:f1:a9:af:1d:83:4d:d2:bf:ce:80:
                    1b:03:5e:2d:d2:79:58:4d:84:7b:71:a5:02:4c:e4:
                    b7:8e:e1:c7:f1:2d:8c:39:fc:fb:6b:71:1a:5e:80:
                    a7:9a:24:66:84:c9:94:56:e9:e6:96:2f:ed:d7:8b:
                    04:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:14:AF:0C:48:E8:45:B9:8B:06:FD:B0:46:68:2A:B3:61:EB:D1:3A
            X509v3 Authority Key Identifier:
                keyid:BE:89:F6:74:7B:32:6E:77:9C:B3:E9:49:06:31:9A:8C:0A:0C:1C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE89F6747B326E779CB3E94906319A8C0A0C1C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:31:af:4a:f0:43:7f:4e:2d:1e:05:e2:e1:a4:c2:ea:53:83:
         b9:6a:5d:ef:de:b0:7d:e1:fb:86:d8:dc:0f:16:9d:8f:88:8e:
         2f:ab:56:9b:e8:ca:9a:e7:bf:a0:38:55:ca:c0:75:76:cb:4c:
         84:c5:00:83:49:ba:81:6b:2a:53:98:46:1c:02:30:af:d8:a4:
         4c:9d:8f:67:5b:b2:cf:d0:66:70:06:a8:df:33:c9:d1:97:06:
         59:df:29:f8:36:50:ee:6b:e2:9e:70:5e:0e:40:eb:c5:1b:09:
         f7:f2:52:19:a2:ef:c1:62:80:21:88:41:2d:1f:34:15:bc:7c:
         de:d6:20:24:95:ba:0d:0c:5b:1a:33:d3:d0:4c:21:cd:b7:1e:
         a9:bd:bf:28:02:9b:57:f5:ca:b2:3b:1b:45:cd:68:06:a9:8f:
         5c:bf:eb:8a:5a:13:33:f3:f6:25:40:a4:24:c1:cb:2c:e7:ef:
         d2:a2:da:8e:8b:c9:4f:c3:ee:50:e5:b3:b8:bc:11:85:d5:f7:
         a8:28:31:b3:86:42:1a:a4:ce:20:3b:f7:13:2c:aa:ef:2c:12:
         60:04:d8:0b:95:3b:87:34:72:6b:7c:b9:7e:a4:96:1a:f1:85:
         dc:86:d6:12:53:0f:26:e3:44:fc:e2:5d:79:40:2b:3f:88:1a:
         1a:6b:58:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUN+9AVDkPCNNO3K330+ePezfNdH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU4OUY2NzQ3QjMyNkU3NzlDQjNFOTQ5MDYzMTlBOEMw
QTBDMUM4MTAeFw0yNTA0MDMxNzQwMzVaFw0yNjA0MDIxNzQ1MzVaMDMxMTAvBgNV
BAMTKEVCMTRBRjBDNDhFODQ1Qjk4QjA2RkRCMDQ2NjgyQUIzNjFFQkQxM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7y5KWX5vg/F0GTnLhhGLMoxmX
438pgGiuRF+Iu1B2viUeUaK7EpoE6XFWUhWIPTopa7UX3n1DycAPgHrzVt7vRoYb
OnENVZxWOdCXVGlSw0IQOihaBNTAz9UhsK2jov3Fu5JaR+XbOuzwVEXEAzFX0w1X
ccMdTLeg5ouCFbGdn1/KD5eCw13YH0tdbQnENOrMbLDlOIpEURoOw0JUKmIoJaew
/lG5vsdRC59HYylKGwRu6zu2UH+vzrQ8udOdWUftFIFiF1o88amvHYNN0r/OgBsD
Xi3SeVhNhHtxpQJM5LeO4cfxLYw5/PtrcRpegKeaJGaEyZRW6eaWL+3XiwTvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6xSvDEjoRbmLBv2wRmgqs2Hr0TowHwYDVR0j
BBgwFoAUvon2dHsybnecs+lJBjGajAoMHIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkdVSGRLYnpHVnM2Zm5Fcm5UMzVSOTcyWHRDNjNiaVhNSlEycmg2cUI5
RGgvMC9CRTg5RjY3NDdCMzI2RTc3OUNCM0U5NDkwNjMxOUE4QzBBMEMxQzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFODlGNjc0N0IzMjZFNzc5
Q0IzRTk0OTA2MzE5QThDMEEwQzFDODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJHVUhkS2J6R1ZzNmZuRXJuVDM1Ujk3Mlh0QzYzYmlYTUpRMnJoNnFCOURoLzAv
MzEzNzM3MmUzMTMwMzQyZTMzMzIyZTMwMmYzMTM5MmQzMjMzMjAzZDNlMjAzMjM2
MzIzNzM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAWxaCAwDQYJKoZIhvcNAQELBQADggEBAHQxr0rw
Q39OLR4F4uGkwupTg7lqXe/esH3h+4bY3A8WnY+Iji+rVpvoyprnv6A4VcrAdXbL
TITFAINJuoFrKlOYRhwCMK/YpEydj2dbss/QZnAGqN8zydGXBlnfKfg2UO5r4p5w
Xg5A68UbCffyUhmi78FigCGIQS0fNBW8fN7WICSVug0MWxoz09BMIc23Hqm9vygC
m1f1yrI7G0XNaAapj1y/64paEzPz9iVApCTByyzn79Ki2o6LyU/D7lDls7i8EYXV
96goMbOGQhqkziA79xMsqu8sEmAE2AuVO4c0cmt8uX6klhrxhdyG1hJTDybjRPzi
XXlAKz+IGhprWHU=
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:49 2025 by rpki-client on console.sobornost.net