Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa
File:                     3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa (raw, json)
Hash identifier:          /elskfRpyAUsm7GCHp/SL5IBu0buYzr+vxnSk8XkeOg=
Subject key identifier:   04:B7:7C:F9:E0:BE:4E:16:C8:14:B9:D9:E6:0A:98:CF:5E:B9:9F:CD
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       72030C0DDD731A0BE5061763B9F890D9B44D1AF8
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa
Signing time:             Mon 10 Feb 2025 14:33:26 +0000
ROA not before:           Mon 10 Feb 2025 14:28:26 +0000
ROA not after:            Mon 09 Feb 2026 14:33:26 +0000
asID:                     267452
IP address blocks:        177.185.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:03:0c:0d:dd:73:1a:0b:e5:06:17:63:b9:f8:90:d9:b4:4d:1a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:28:26 2025 GMT
            Not After : Feb  9 14:33:26 2026 GMT
        Subject: CN=04B77CF9E0BE4E16C814B9D9E60A98CF5EB99FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:51:06:f7:46:6f:0f:11:3e:5e:d2:29:c9:
                    e0:10:52:70:6e:26:b9:07:44:f3:22:6f:f3:b0:d3:
                    70:52:e1:ce:a9:c2:05:02:13:63:08:63:9b:83:8a:
                    f4:72:38:5d:6f:a2:62:61:41:b8:a7:86:6d:08:e0:
                    c7:cf:0c:7b:5c:35:ea:18:c3:fa:1e:6a:ab:15:4c:
                    b0:c1:c1:38:0b:23:05:9c:a7:6b:26:bf:47:15:1d:
                    a4:cc:0a:1b:28:2f:7c:a1:a3:38:34:ed:1e:d5:40:
                    15:86:8b:e5:bd:da:91:56:9e:20:bd:70:07:de:5c:
                    86:45:a2:8e:b9:16:7a:f0:d2:00:b8:7e:9c:63:79:
                    ad:d5:20:ae:19:65:fe:20:4f:83:b6:7d:f1:f0:a9:
                    69:18:84:4c:3d:98:c6:0b:f3:a8:d2:8d:31:d0:0a:
                    7e:77:1b:d8:b5:f4:b6:08:6a:6e:4c:58:88:fe:de:
                    e9:9d:f9:b3:22:9e:63:05:b5:dd:d9:02:a0:99:5b:
                    64:7b:4b:fd:44:aa:0c:18:97:76:16:20:36:a1:ba:
                    c7:0d:a9:6b:d8:7b:41:3f:a4:d3:4b:7b:8a:44:d6:
                    ad:85:bb:7f:40:2d:6c:51:33:c5:9a:57:f3:d5:be:
                    ec:07:41:cc:c1:bf:43:3a:38:e6:14:53:ea:a6:d8:
                    99:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B7:7C:F9:E0:BE:4E:16:C8:14:B9:D9:E6:0A:98:CF:5E:B9:9F:CD
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3138352e3137362e302f32302d3234203d3e20323637343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:ca:d4:8c:e6:20:a3:12:a2:a7:7b:06:65:72:1c:56:89:8e:
         ec:ff:d2:71:1f:0a:98:e6:da:d9:06:e9:ad:d1:e4:12:d7:16:
         df:0b:df:b3:1d:cd:a1:d9:ea:3e:12:73:32:b7:32:be:52:01:
         ee:87:21:81:f2:91:0b:23:f1:c5:6a:6f:18:11:7c:6d:7e:3f:
         fd:4b:1d:2a:9e:c4:27:1e:ff:25:92:f0:d3:fe:43:51:44:2c:
         f9:59:31:f4:2e:f5:8e:a2:8f:cb:ff:da:f6:cb:49:22:2a:e5:
         cb:19:2a:f2:7a:2a:52:97:bc:d8:3e:e2:41:e9:9f:2a:8a:d3:
         7a:af:e5:d5:4b:c0:fb:dd:c8:c0:7a:95:77:a6:2b:e1:25:76:
         e9:b0:22:27:5f:c2:0c:75:7d:3a:74:3d:66:95:b1:3f:30:81:
         1e:4e:62:a5:fe:46:02:93:e9:d7:53:88:4e:61:2b:d3:f8:7a:
         3d:29:c0:f0:7a:e3:9d:16:4e:28:6d:ef:53:d9:91:ed:bb:a0:
         d6:c0:5f:a5:1a:ff:9c:20:98:41:b9:4b:b9:eb:51:e1:e2:fd:
         c0:72:b7:16:e8:a7:aa:08:d1:ae:4b:4a:97:8b:34:05:55:fc:
         b9:71:0f:eb:76:1e:56:c0:a8:82:e2:de:ee:58:05:cf:02:52:
         da:37:5d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:10 2025 by rpki-client on console.sobornost.net