Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/3137372e39312e31362e302f32302d3234203d3e203631383935.roa
File:                     3137372e39312e31362e302f32302d3234203d3e203631383935.roa (raw, json)
Hash identifier:          DboS2VGBQ3RtULNYd4hp7U5fbPB+M+sjbqylw/PrVx8=
Subject key identifier:   A9:AB:57:1B:E8:23:E7:6C:1B:AD:AB:30:52:9D:DF:CB:5E:0F:3A:00
Certificate issuer:       /CN=76760CC0238F3BDD46F208CCCFC2A17E9F0E15C8
Certificate serial:       03CD800C7C9421D33A8EC56D8549EE7426D6E73D
Authority key identifier: 76:76:0C:C0:23:8F:3B:DD:46:F2:08:CC:CF:C2:A1:7E:9F:0E:15:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76760CC0238F3BDD46F208CCCFC2A17E9F0E15C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/3137372e39312e31362e302f32302d3234203d3e203631383935.roa
Signing time:             Mon 14 Apr 2025 15:01:38 +0000
ROA not before:           Mon 14 Apr 2025 14:56:38 +0000
ROA not after:            Mon 13 Apr 2026 15:01:38 +0000
asID:                     61895
IP address blocks:        177.91.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/76760CC0238F3BDD46F208CCCFC2A17E9F0E15C8.crl
                          rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/76760CC0238F3BDD46F208CCCFC2A17E9F0E15C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76760CC0238F3BDD46F208CCCFC2A17E9F0E15C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cd:80:0c:7c:94:21:d3:3a:8e:c5:6d:85:49:ee:74:26:d6:e7:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76760CC0238F3BDD46F208CCCFC2A17E9F0E15C8
        Validity
            Not Before: Apr 14 14:56:38 2025 GMT
            Not After : Apr 13 15:01:38 2026 GMT
        Subject: CN=A9AB571BE823E76C1BADAB30529DDFCB5E0F3A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:42:ed:18:0c:ae:30:ca:98:94:53:9d:e7:
                    ac:af:00:83:67:ce:02:30:31:81:bb:2f:33:37:b3:
                    47:60:1d:46:6e:c1:c3:a8:8c:d5:91:9b:df:ff:14:
                    f1:9b:85:12:3b:66:0a:3d:11:27:d1:f0:73:79:a5:
                    ba:5d:49:9b:ae:aa:0d:1f:36:22:76:dd:30:7a:c7:
                    d8:db:ed:d2:9a:d5:cb:1d:c7:cb:32:29:25:f6:55:
                    b0:1e:a4:b5:92:7e:a4:11:1c:da:30:be:44:1a:ac:
                    1a:d9:4d:48:0c:4a:15:ab:de:a7:5c:74:74:2a:d0:
                    e2:0e:39:91:b5:4e:dc:2c:b9:1f:ca:37:08:0b:8f:
                    f3:64:b0:58:5f:10:9a:37:e8:0f:8f:39:86:e4:f3:
                    86:37:e7:3d:b7:2e:67:f5:56:e0:f2:57:be:03:47:
                    b6:f3:d4:5b:06:48:73:f6:9a:bf:80:65:8a:23:d8:
                    cf:fb:9c:e7:98:7e:3c:d2:82:a9:92:f7:99:48:e1:
                    11:2a:14:27:1e:c3:48:a7:c4:e6:e9:dd:5e:02:89:
                    f8:da:95:6b:4e:8d:74:a1:39:c2:e3:f6:07:a6:c4:
                    92:95:07:67:ec:1e:b7:67:5d:b1:84:ee:0d:bc:63:
                    b3:03:40:e3:d8:bd:88:3d:93:5a:24:fb:e3:6b:5c:
                    35:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AB:57:1B:E8:23:E7:6C:1B:AD:AB:30:52:9D:DF:CB:5E:0F:3A:00
            X509v3 Authority Key Identifier:
                keyid:76:76:0C:C0:23:8F:3B:DD:46:F2:08:CC:CF:C2:A1:7E:9F:0E:15:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/76760CC0238F3BDD46F208CCCFC2A17E9F0E15C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76760CC0238F3BDD46F208CCCFC2A17E9F0E15C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/3137372e39312e31362e302f32302d3234203d3e203631383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:89:0e:8c:e2:da:53:e3:d0:02:7c:dd:49:2f:27:1c:1f:15:
         29:ad:39:1f:ad:79:85:d9:73:48:5b:0e:46:89:ff:6c:82:9d:
         3a:4f:ef:c6:19:b7:9a:21:8b:fd:6e:5e:51:3b:c5:b7:03:3f:
         c8:21:74:d7:06:0a:e5:0c:d8:02:74:42:f9:f5:37:36:c6:58:
         f8:63:07:37:a2:9b:65:2d:af:ff:a8:41:17:2f:d9:bf:70:8a:
         36:29:fc:c7:0b:eb:6a:51:ea:df:ba:9e:cc:d0:fe:f4:f1:16:
         9f:6a:c8:0a:97:5b:21:14:fd:92:aa:41:c2:1b:7d:01:5e:b1:
         f0:4a:71:13:e8:0d:6f:d7:37:6f:05:0e:fb:1f:41:19:30:2c:
         04:ee:7a:cb:f9:44:f9:7c:6e:e8:9d:da:e5:6f:af:66:4c:97:
         8a:46:36:27:9a:bc:62:db:03:5c:45:e0:f6:c2:02:2f:8d:71:
         66:21:39:7d:3a:e4:27:80:ea:3f:5e:61:1e:cb:e6:d0:50:bd:
         75:6a:ce:9d:ce:2b:5c:db:4f:c8:83:5a:2f:37:4b:79:c1:cc:
         83:c1:a7:57:b6:e6:d7:4d:20:dd:42:0d:40:4c:e3:08:85:26:
         49:f0:33:4c:b1:4b:fc:50:e4:34:77:52:9e:d1:97:8f:d1:17:
         f2:b4:02:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:57 2025 by rpki-client on console.sobornost.net