Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39332e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e39332e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          L17RJ7lFFXvZo04E+u9prmdHUcVewkmcWo61EUTMg1k=
Subject key identifier:   33:33:28:B1:B2:41:7D:7C:56:A7:F8:80:5B:E5:63:D5:A9:0E:51:A4
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       1395CE8646BF7E3F43815BFB7C498AB82C95D1B3
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39332e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 13:05:35 +0000
ROA not before:           Thu 05 Dec 2024 13:00:35 +0000
ROA not after:            Thu 04 Dec 2025 13:05:35 +0000
asID:                     53047
IP address blocks:        177.101.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:95:ce:86:46:bf:7e:3f:43:81:5b:fb:7c:49:8a:b8:2c:95:d1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 13:00:35 2024 GMT
            Not After : Dec  4 13:05:35 2025 GMT
        Subject: CN=333328B1B2417D7C56A7F8805BE563D5A90E51A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:93:90:8d:9b:82:ce:74:3a:ea:fd:00:8e:35:
                    30:65:9a:25:78:d3:e7:8c:cd:f3:fc:4c:73:63:c8:
                    18:6e:40:8b:ab:2d:93:a8:3f:a7:46:68:5b:e2:7b:
                    b2:28:bc:99:bd:df:6e:e4:fa:60:8e:1c:0c:15:a3:
                    32:9f:11:f4:ee:ec:49:a6:a1:02:6c:62:cf:3d:d3:
                    85:ab:22:99:f2:b4:3f:94:20:95:37:47:04:7d:2c:
                    e0:28:ac:f3:5c:05:71:04:1b:56:fb:58:e2:1b:dc:
                    4f:67:76:ba:27:17:b8:0e:e7:3a:67:ad:86:cd:a3:
                    46:db:a8:56:23:46:25:ee:4f:9e:43:81:e9:66:8e:
                    43:3d:ce:a4:5a:9c:09:17:6c:26:0d:28:22:3d:4b:
                    db:0c:78:2f:44:1f:f7:b7:20:af:c8:49:5c:39:cd:
                    a2:48:3a:74:ef:7d:3c:9a:d8:5e:f4:bd:bb:dc:bb:
                    67:5d:48:1d:13:77:64:14:3a:d3:84:0d:25:15:63:
                    54:f5:f5:b7:27:52:02:ab:49:21:ec:04:0e:0a:fa:
                    a1:e8:68:5a:cc:c9:c1:4e:10:e7:ae:c8:43:40:5d:
                    1b:eb:a6:3b:3c:64:45:ef:4d:70:64:b8:3e:5e:95:
                    a0:f4:36:79:f4:ae:06:6b:f1:16:84:44:0d:e9:7e:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:33:28:B1:B2:41:7D:7C:56:A7:F8:80:5B:E5:63:D5:A9:0E:51:A4
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39332e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:df:89:6e:b4:79:23:03:a1:d0:a6:e4:23:ae:ca:ae:fe:90:
         a6:54:c6:08:f4:71:ec:43:e8:84:14:a1:e8:90:ed:b7:37:57:
         50:45:c6:16:c8:76:19:86:a2:b6:2b:f8:cb:b9:c3:f5:43:73:
         e5:02:8b:c4:79:a8:16:5d:5a:7a:16:54:d4:22:68:ed:23:c8:
         97:58:04:9d:cb:15:13:c7:95:a8:9c:d4:f4:0c:a0:76:bf:db:
         86:1d:05:80:b1:51:e8:99:ef:b6:e6:ca:c8:94:0b:07:e1:40:
         57:70:15:7e:45:a5:6e:12:64:20:7e:b4:68:88:a0:7d:e1:06:
         31:f2:8b:98:3b:f4:d7:50:0b:01:d7:1d:5f:53:48:61:a5:04:
         2f:95:08:d1:ff:b7:87:95:1c:1e:7b:1a:15:15:69:e9:f0:63:
         54:a7:5f:73:a5:d2:b6:62:ea:96:de:0e:e6:83:da:ec:aa:05:
         11:05:08:88:d9:b8:a6:7e:c8:30:f5:01:8b:0c:97:20:83:23:
         b5:db:5e:57:12:aa:33:df:c7:43:2c:54:70:ce:59:19:19:c1:
         56:eb:a0:9f:d5:21:b2:72:83:d5:5b:eb:2a:2d:13:20:04:15:
         22:f1:84:56:f7:3c:20:3f:97:19:d5:f6:d0:14:41:60:31:a7:
         96:c6:7a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:03 2025 by rpki-client on console.sobornost.net