Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa
File:                     3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          cfFCUQhpCOMKKBOmYt1zNQLb3sUPDxo0PY9Hdwmp6XA=
Subject key identifier:   A3:38:08:08:76:5D:58:05:7E:BE:08:71:4A:59:FD:2D:51:6C:58:E0
Certificate issuer:       /CN=F3E5032069F08FCAFC13EA1C6AAA29F96BC47461
Certificate serial:       3777C0AAAA2E636881666D9938140F45397FC182
Authority key identifier: F3:E5:03:20:69:F0:8F:CA:FC:13:EA:1C:6A:AA:29:F9:6B:C4:74:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa
Signing time:             Tue 01 Apr 2025 13:46:25 +0000
ROA not before:           Tue 01 Apr 2025 13:41:25 +0000
ROA not after:            Tue 31 Mar 2026 13:46:25 +0000
asID:                     262550
IP address blocks:        177.72.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.crl
                          rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:77:c0:aa:aa:2e:63:68:81:66:6d:99:38:14:0f:45:39:7f:c1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E5032069F08FCAFC13EA1C6AAA29F96BC47461
        Validity
            Not Before: Apr  1 13:41:25 2025 GMT
            Not After : Mar 31 13:46:25 2026 GMT
        Subject: CN=A3380808765D58057EBE08714A59FD2D516C58E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:a1:6c:eb:c4:e8:ef:0f:ab:d4:5d:05:52:
                    55:fd:84:f3:dc:42:5c:fa:b5:16:32:0b:b7:8c:e8:
                    49:80:01:b0:3e:2d:68:2c:f1:28:6e:67:31:9a:50:
                    38:a9:b3:fb:0c:15:40:44:28:e8:25:77:6f:86:27:
                    7d:ec:bb:8e:45:46:ea:ae:0b:a0:da:19:0c:2d:80:
                    97:d8:21:60:76:a0:56:70:d6:2c:93:24:ec:b3:85:
                    36:ab:e5:2d:f1:c2:11:8b:8f:fb:71:7d:cd:a5:b1:
                    f1:67:e9:83:7a:3e:ad:6b:b1:6d:b6:f2:b4:0e:96:
                    22:b4:e1:d2:5f:c6:d0:90:c4:48:58:f8:55:e4:69:
                    22:b3:15:9e:42:b9:e8:ae:1f:17:da:93:ba:cc:03:
                    5f:33:a0:de:7f:ab:b8:9d:17:2e:ba:ee:c8:7d:b0:
                    57:c9:1d:bb:81:33:f1:10:98:89:46:74:52:67:8c:
                    28:a7:c5:68:5e:25:2a:9c:da:56:9b:df:ae:17:88:
                    2b:a6:e9:a5:e5:a1:89:fd:c9:08:25:45:c3:64:0d:
                    7e:10:36:70:c9:8d:e0:2b:bd:f6:39:a1:9e:f9:59:
                    f9:8c:b0:50:b6:75:0a:5e:d0:5a:45:a2:73:a9:52:
                    76:46:41:8a:6d:75:aa:57:79:47:b2:8e:20:9d:93:
                    59:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:38:08:08:76:5D:58:05:7E:BE:08:71:4A:59:FD:2D:51:6C:58:E0
            X509v3 Authority Key Identifier:
                keyid:F3:E5:03:20:69:F0:8F:CA:FC:13:EA:1C:6A:AA:29:F9:6B:C4:74:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E5032069F08FCAFC13EA1C6AAA29F96BC47461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:76:49:9d:25:01:d4:7f:d8:d3:6e:e0:dc:b5:35:24:3f:
         a4:d4:a9:ec:b9:42:85:37:d7:4b:f1:a8:9e:3b:19:05:01:3b:
         55:d2:59:a2:60:87:64:4a:a9:27:63:fb:b3:b2:29:95:ab:23:
         ad:0b:7d:40:b2:14:8d:4f:7f:4e:85:e1:52:9a:10:19:31:9d:
         32:c0:1d:6f:f4:86:17:9b:da:e4:e3:9a:0d:1d:26:9b:2b:43:
         63:ad:cc:7b:1b:e8:ef:c0:b7:89:e4:03:ec:ae:5f:16:09:e0:
         f3:24:2b:22:2f:eb:01:3a:8a:f0:2e:5c:1c:45:76:20:4f:1a:
         70:27:15:f2:4c:56:40:c5:de:97:cd:39:49:11:35:1d:97:c6:
         ee:4c:df:b9:f3:e5:a0:c3:b3:bd:6a:f0:ca:42:a9:a6:8a:d1:
         58:24:f8:ba:cf:f8:4f:2c:59:7f:cf:5e:f3:21:dc:6e:3d:fc:
         b1:8c:a0:bb:64:c9:43:82:79:63:14:84:fc:e2:e4:0c:24:ed:
         30:c5:9f:68:e7:24:0f:a7:a6:7b:25:ea:c7:77:2a:e5:96:93:
         d3:d4:7a:41:93:ed:6a:fe:0d:d4:c4:c7:57:4c:38:8c:5c:51:
         69:08:f1:f1:71:ca:0c:86:61:c3:50:69:f4:c1:ba:01:fa:41:
         d9:d2:15:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:38 2025 by rpki-client on console.sobornost.net