Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/3137372e38352e35362e302f32312d3234203d3e203532373337.roa
File:                     3137372e38352e35362e302f32312d3234203d3e203532373337.roa (raw, json)
Hash identifier:          PU2XKzoIhoj4XYYV4lkmJS9KDrj9QPzTkGySvccGV1o=
Subject key identifier:   21:38:12:1D:26:4E:0B:B3:8F:37:17:E9:53:CA:71:89:45:7C:35:57
Certificate issuer:       /CN=F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440
Certificate serial:       0839938C80BABD90F1263B6F24B3BB6A038ADF7B
Authority key identifier: F6:2B:9E:3F:C5:DF:8B:AD:85:B5:47:8E:31:B0:44:A0:2D:0B:34:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/3137372e38352e35362e302f32312d3234203d3e203532373337.roa
Signing time:             Thu 06 Mar 2025 14:26:14 +0000
ROA not before:           Thu 06 Mar 2025 14:21:14 +0000
ROA not after:            Thu 05 Mar 2026 14:26:14 +0000
asID:                     52737
IP address blocks:        177.85.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.crl
                          rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:39:93:8c:80:ba:bd:90:f1:26:3b:6f:24:b3:bb:6a:03:8a:df:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440
        Validity
            Not Before: Mar  6 14:21:14 2025 GMT
            Not After : Mar  5 14:26:14 2026 GMT
        Subject: CN=2138121D264E0BB38F3717E953CA7189457C3557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6a:27:1d:8f:0d:bd:40:0e:c2:5b:de:aa:9b:
                    38:31:66:a1:7f:fb:ef:05:f3:ca:5d:73:fb:2c:45:
                    84:2c:81:87:66:90:be:b4:70:d1:18:87:7b:90:c7:
                    cd:ed:fe:fb:14:88:4a:17:30:ad:9e:da:44:fc:98:
                    36:de:18:e8:e3:b5:e0:ad:f7:2b:d0:1c:f4:86:f0:
                    8e:6c:e9:37:6b:39:cc:c5:c3:35:f8:c3:24:18:6d:
                    fd:7f:b1:fb:f5:82:d4:56:19:65:e8:92:07:c2:f2:
                    30:85:e0:4c:e7:c1:23:96:16:e7:26:4a:1b:64:b7:
                    fa:9c:9e:d4:d1:6b:ce:70:e7:3c:a6:22:77:a2:41:
                    e5:9b:1c:58:0e:b9:78:71:4b:16:8c:3c:a1:d6:16:
                    e1:f1:13:6c:7f:13:eb:48:24:ed:a7:fb:2e:31:0a:
                    f8:d9:31:5d:fd:5f:80:1f:d3:db:36:c2:51:ae:f8:
                    26:be:52:dc:57:9f:4e:1f:2f:f4:a5:97:e4:64:0b:
                    76:8f:07:c7:e4:78:29:9f:26:f8:e5:cb:79:42:21:
                    8f:26:0d:15:17:f6:a3:43:4f:d2:8d:3e:98:8c:ea:
                    ef:1c:dc:d8:66:25:20:10:70:6d:65:e9:84:e6:01:
                    28:c9:c8:3b:5e:a9:b4:13:78:a3:bf:6a:89:0c:45:
                    79:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:38:12:1D:26:4E:0B:B3:8F:37:17:E9:53:CA:71:89:45:7C:35:57
            X509v3 Authority Key Identifier:
                keyid:F6:2B:9E:3F:C5:DF:8B:AD:85:B5:47:8E:31:B0:44:A0:2D:0B:34:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/3137372e38352e35362e302f32312d3234203d3e203532373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:9a:9f:09:a1:f1:bf:aa:5e:fb:96:e2:d4:71:ea:d6:b4:
         1b:08:ef:03:fb:8b:12:d7:b2:75:37:87:65:94:c5:39:21:6b:
         d9:28:95:21:4d:73:73:e8:f6:41:54:f3:86:8f:a6:8a:4f:39:
         a3:fa:d8:31:54:5e:10:38:06:b4:19:54:8b:63:5e:cc:5e:9d:
         cd:a4:01:95:97:8c:3a:27:b2:e1:e9:48:e1:45:0a:b2:bb:b4:
         2c:85:2b:2e:eb:ce:ab:3b:7f:95:5d:40:e2:ea:a0:47:e7:e8:
         2e:38:cb:38:68:40:1e:34:12:03:1c:63:3f:dd:d1:64:5c:52:
         c0:05:57:b2:e5:36:fd:8f:2a:e4:41:2b:42:f8:cd:a6:c4:6a:
         f7:b7:78:e8:a1:20:c7:d4:5f:ab:bd:f4:aa:98:28:7d:96:2c:
         f4:96:c3:72:6d:f6:14:cd:23:bf:1d:9e:74:60:bc:3c:19:d9:
         24:10:4e:38:79:9b:eb:b5:aa:68:4e:fc:0d:18:d1:69:7a:2d:
         e7:d9:7f:82:f0:1c:3d:18:58:d5:14:c3:8f:01:af:91:a9:c9:
         2b:90:45:39:84:0b:ca:13:bc:6d:f9:0a:3b:a1:5e:a1:09:ca:
         c5:7b:5d:9f:6d:25:66:75:70:b8:7a:81:ce:f4:8d:db:54:eb:
         68:93:c7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:04 2025 by rpki-client on console.sobornost.net