Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38382e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          pz/NY+a+HO2QdXBEKH+2gBvvbqkR83VUUY9B0f/pEos=
Subject key identifier:   02:FE:B4:02:AC:7B:95:4B:0D:6B:36:10:0E:64:4E:4B:D4:DD:ED:74
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       4E2D357A679A110CB2A9E22ACB5A88CA83C85BE1
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 13:03:16 +0000
ROA not before:           Thu 05 Dec 2024 12:58:16 +0000
ROA not after:            Thu 04 Dec 2025 13:03:16 +0000
asID:                     53047
IP address blocks:        177.101.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2d:35:7a:67:9a:11:0c:b2:a9:e2:2a:cb:5a:88:ca:83:c8:5b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 12:58:16 2024 GMT
            Not After : Dec  4 13:03:16 2025 GMT
        Subject: CN=02FEB402AC7B954B0D6B36100E644E4BD4DDED74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:53:f8:10:ba:38:0f:e0:5b:01:22:c2:40:
                    1e:f8:9b:4f:41:82:de:ab:be:f8:27:26:96:5f:ba:
                    a5:a5:8e:61:57:0c:b8:cd:44:cd:65:a6:df:70:24:
                    cb:4b:bf:f7:a3:c3:ea:7e:06:56:16:83:eb:fd:14:
                    b7:62:01:b6:48:0a:fe:03:05:4d:f7:77:f8:f5:b5:
                    3f:49:3f:2f:b3:4a:96:a8:b6:f9:90:97:9f:e9:cd:
                    84:02:02:b3:64:fe:1a:72:c4:f7:42:4a:ce:f4:b1:
                    b5:53:38:71:ea:f1:d5:b4:fe:a7:51:65:54:72:4e:
                    33:bd:4e:89:09:60:0d:70:45:0c:85:25:d0:b8:84:
                    6e:0d:89:f1:d4:07:8e:68:e4:b4:0c:8d:a6:d7:0c:
                    6f:0a:50:7f:8e:8f:86:9b:79:3e:6a:bc:70:d5:12:
                    90:a2:52:b5:a5:74:38:55:7d:74:a6:fc:03:1a:4e:
                    7f:01:cb:2f:3c:47:c7:16:be:2e:b2:97:b1:64:30:
                    c8:8f:49:46:e2:d2:87:79:6e:ef:ec:e5:5f:79:c1:
                    85:94:e4:d6:86:97:44:94:53:8a:4d:e0:fb:5f:e1:
                    d0:1b:f8:35:fc:09:f9:93:76:4f:19:66:99:9a:70:
                    18:03:6d:b2:2d:85:96:44:e1:6a:e0:7d:2a:7e:1f:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FE:B4:02:AC:7B:95:4B:0D:6B:36:10:0E:64:4E:4B:D4:DD:ED:74
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:df:39:bf:a0:b6:a0:69:ac:54:24:b3:bf:b6:f6:6a:8c:6c:
         06:88:f8:5a:cd:c2:71:17:df:d9:61:a2:c7:ec:b7:3c:d4:01:
         c1:33:bf:70:ca:25:42:88:67:d2:5e:97:71:6e:c4:f0:1c:45:
         b7:10:6f:22:ad:c2:98:88:9a:5b:f8:6b:02:3b:c8:35:83:3a:
         af:4d:48:f9:3b:c5:2c:e3:92:f2:a6:7a:38:f8:1c:be:99:92:
         23:da:26:f1:96:1a:ba:dd:fe:3b:7b:93:3d:bf:1b:e5:88:fb:
         b5:8e:aa:b0:4c:ca:25:f7:86:e4:4b:e3:88:3e:5c:e4:8b:d8:
         eb:49:00:d1:73:a5:bb:ac:e1:82:6e:08:d5:c1:e7:dd:9f:fe:
         ec:52:d2:b6:24:0e:fc:06:3a:95:bc:03:b0:3f:e6:e9:c3:ee:
         8b:55:ec:44:5f:e4:62:6d:7e:4b:d5:d0:8f:22:d1:81:6a:d5:
         68:94:63:66:15:59:d6:5d:42:b3:41:e0:de:d0:15:bd:c9:3c:
         4f:7b:a2:00:6f:6e:5a:e8:1a:c7:c1:c4:b3:8c:78:38:11:24:
         0b:8d:bd:69:ae:42:6c:81:93:82:a7:bf:03:60:ad:54:aa:76:
         60:4e:58:11:61:aa:4a:11:7d:7a:d5:60:04:d0:a4:b8:76:25:
         9b:5f:4e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:03 2025 by rpki-client on console.sobornost.net