Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa
File:                     3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa (raw, json)
Hash identifier:          8P1eaFp0tA8qC8rMxyfqGAMEpI9v3qQCV5zgBFTyZZg=
Subject key identifier:   01:41:27:4E:67:84:7E:1A:42:5C:5A:A9:75:7F:8B:67:A5:F2:BF:3F
Certificate issuer:       /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial:       07C3C3F766A6AD1E3FDFB86B0417009FF3E89DE0
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa
Signing time:             Thu 13 Mar 2025 13:15:19 +0000
ROA not before:           Thu 13 Mar 2025 13:10:19 +0000
ROA not after:            Thu 12 Mar 2026 13:15:19 +0000
asID:                     271110
IP address blocks:        160.20.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c3:c3:f7:66:a6:ad:1e:3f:df:b8:6b:04:17:00:9f:f3:e8:9d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Validity
            Not Before: Mar 13 13:10:19 2025 GMT
            Not After : Mar 12 13:15:19 2026 GMT
        Subject: CN=0141274E67847E1A425C5AA9757F8B67A5F2BF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:7d:da:08:02:77:32:f9:a6:2e:ba:51:fa:
                    a8:06:16:84:da:32:da:a4:10:b0:be:4a:ba:69:0e:
                    c4:73:2e:05:4b:34:90:96:b3:bb:e9:8e:85:85:d2:
                    4b:c4:09:01:db:0b:95:8a:0b:ba:49:90:c5:67:0f:
                    88:77:52:ba:6d:f9:f8:33:bb:9b:ba:89:53:4d:46:
                    7d:ce:af:1c:3f:fa:9a:c5:7e:68:cd:81:6c:3e:b2:
                    be:9e:04:eb:0a:e1:66:7a:01:fc:a6:e8:19:02:b3:
                    e4:10:14:1e:cd:2e:85:6a:7c:96:68:9e:87:c9:f7:
                    c0:28:f6:46:f7:14:24:0e:cf:f6:11:96:76:2e:78:
                    2d:04:e8:6a:45:14:67:74:c7:a1:58:34:0b:4f:55:
                    c2:02:1e:56:56:78:93:bc:9d:78:77:8e:c7:fa:07:
                    43:81:58:8e:b7:c2:05:4c:d0:fc:17:8e:17:2b:3f:
                    b3:cf:41:2a:2b:43:76:77:94:82:e8:03:0c:c8:9e:
                    4f:87:66:3f:00:c7:b3:3e:a6:9e:1a:ff:87:c3:b5:
                    4f:5e:ba:d7:ea:94:6c:27:bd:35:54:13:2e:14:f5:
                    f9:9d:cb:d6:4d:3f:e5:b5:c1:8a:4d:50:21:0a:f3:
                    74:1e:21:ab:e2:6c:ae:38:0c:ab:e6:c3:38:dd:08:
                    e3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:41:27:4E:67:84:7E:1A:42:5C:5A:A9:75:7F:8B:67:A5:F2:BF:3F
            X509v3 Authority Key Identifier:
                keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:91:43:86:7f:e3:2f:41:24:05:89:94:d6:b8:5c:54:a0:e5:
         5c:84:43:83:ca:df:ee:f5:9c:dc:46:f7:4f:61:5d:cc:f3:30:
         ff:28:7a:86:42:a4:e9:8e:ac:a2:30:2c:fb:cf:d8:2d:97:80:
         5c:de:fe:ae:16:c5:21:07:b1:f7:ee:0d:d8:ba:bb:81:b8:60:
         9a:34:5d:95:10:76:c0:08:25:a2:8b:fc:a1:36:0e:cc:72:50:
         54:ac:94:c5:21:5f:6d:79:53:f5:01:70:6d:5b:9c:ed:87:96:
         94:14:86:3d:f2:d7:1a:69:4b:df:f8:9f:1c:de:65:d7:c6:84:
         e7:2f:88:c6:75:74:5a:c6:4d:45:7c:ca:7d:5d:11:56:2c:2e:
         01:b6:4a:6f:2c:a0:05:63:e7:22:65:73:4e:be:aa:2b:41:d6:
         5e:19:fd:4c:8d:7a:c3:91:c4:69:a0:b6:01:2e:89:c1:d1:92:
         f1:c1:e8:e7:86:18:df:1f:96:54:90:f6:3f:35:69:90:51:47:
         c5:53:c1:b0:e5:98:35:25:61:4f:18:27:e3:23:dc:bb:d4:ea:
         a8:ce:36:12:f1:21:56:0b:d2:2c:fc:d4:c0:4f:ca:bc:49:b6:
         82:db:76:bb:20:e8:2c:1e:77:cd:46:5d:d5:68:14:1b:eb:13:
         2d:dd:10:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:56 2025 by rpki-client on console.sobornost.net