Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3137372e33392e31322e302f32322d3232203d3e203532373930.roa
File:                     3137372e33392e31322e302f32322d3232203d3e203532373930.roa (raw, json)
Hash identifier:          R93deM5pmTBvtnA92QRBJS2cI4mjyJ9HU+H0pOwXvNE=
Subject key identifier:   CF:EB:8E:A1:31:6B:57:51:58:F9:E8:29:BA:AB:2D:92:11:64:0C:EE
Certificate issuer:       /CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD
Certificate serial:       3D1F63626D224B64483FC4081B3692586914AA60
Authority key identifier: B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3137372e33392e31322e302f32322d3232203d3e203532373930.roa
Signing time:             Thu 24 Apr 2025 02:44:10 +0000
ROA not before:           Thu 24 Apr 2025 02:39:10 +0000
ROA not after:            Thu 23 Apr 2026 02:44:10 +0000
asID:                     52790
IP address blocks:        177.39.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.crl
                          rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1f:63:62:6d:22:4b:64:48:3f:c4:08:1b:36:92:58:69:14:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD
        Validity
            Not Before: Apr 24 02:39:10 2025 GMT
            Not After : Apr 23 02:44:10 2026 GMT
        Subject: CN=CFEB8EA1316B575158F9E829BAAB2D9211640CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:8f:8c:23:93:a4:04:84:f7:0b:56:9c:00:
                    47:8a:74:64:a8:f2:49:fe:18:93:d5:15:c8:28:45:
                    9f:20:8d:85:6f:e5:74:c8:1f:fb:5c:48:19:99:66:
                    d9:27:ef:10:ef:51:bf:b4:4e:a2:db:7d:2c:5d:02:
                    f6:30:1e:f3:61:89:d1:6d:0d:ee:61:e4:5f:ef:7c:
                    28:2d:6c:17:6e:0f:05:08:28:d1:8d:14:a5:18:0d:
                    b3:f1:26:85:83:c1:9d:79:f1:13:5f:95:ea:23:74:
                    9d:7f:e5:51:18:34:c9:90:de:eb:70:bc:c4:c6:7a:
                    11:e6:f4:62:29:b3:2a:8b:18:02:02:cb:54:d7:ab:
                    b7:d7:92:b2:cc:c9:d3:34:8f:e7:c6:dd:d3:01:f5:
                    b7:7a:95:d8:f9:a5:de:de:c8:c2:33:c8:7f:c7:a1:
                    ef:84:fe:dc:88:d3:37:c6:0d:aa:75:9e:d3:06:87:
                    e6:c1:b1:c5:bd:d5:17:5e:f4:9c:1b:1a:3c:72:e5:
                    2f:e5:ca:a8:b2:57:20:6b:75:74:06:0a:b5:55:75:
                    1f:2b:3c:ee:b5:1b:f4:fd:d2:4f:8a:e0:38:1c:f6:
                    2c:af:c5:1a:3c:34:79:ed:21:5f:9e:29:2d:fa:db:
                    f5:a8:d5:fb:90:3f:72:64:50:2c:5c:86:92:4e:96:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EB:8E:A1:31:6B:57:51:58:F9:E8:29:BA:AB:2D:92:11:64:0C:EE
            X509v3 Authority Key Identifier:
                keyid:B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3137372e33392e31322e302f32322d3232203d3e203532373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:82:89:a0:6d:56:93:8d:0c:bb:ba:46:b7:b2:2a:78:d4:08:
         86:af:b3:41:85:6c:ae:03:c5:36:a9:85:16:0c:a9:44:3b:dc:
         d3:79:de:9f:b4:2b:f0:f2:c9:05:2b:1a:0d:7e:6e:bf:c9:73:
         03:6c:4e:b0:49:7a:a1:c3:9f:dd:00:07:ee:56:37:c5:03:a1:
         9e:6e:2e:34:0c:27:bc:f8:1e:4f:68:49:48:57:da:09:0e:cd:
         de:4d:7e:05:c6:58:8b:f1:54:21:cf:a0:6a:fc:05:e4:79:b0:
         86:d3:b6:f4:4f:65:33:df:c0:bb:e7:f4:0a:71:73:02:7c:53:
         16:1a:c7:0e:83:03:45:a4:79:37:84:dc:5e:ff:02:7d:86:7a:
         3f:2d:46:fe:78:26:2c:ec:e6:45:5a:30:09:31:d8:4f:91:35:
         72:b3:ea:9a:db:fe:80:58:ae:33:8d:e1:c0:72:13:34:69:55:
         a1:09:7a:2d:23:4c:54:77:0d:91:94:e2:bf:0c:2f:59:91:42:
         4b:97:be:13:8a:6c:5d:8a:07:21:c6:f6:60:dd:90:2d:20:dc:
         71:fe:e5:d2:7e:57:88:7d:31:93:a8:35:ef:fb:64:f2:3f:ee:
         c1:2e:0d:1f:d1:25:82:da:a1:1f:90:90:f1:3c:f6:eb:ea:01:
         7e:31:65:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:42 2025 by rpki-client on console.sobornost.net