Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139342e302f32342d3234203d3e203533313037.roa
File:                     3137372e38342e3139342e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          FWSG932o1QhEUlIhpri4JJ4I/61HehUD6F5vh7lic4s=
Subject key identifier:   5F:F7:92:9A:91:B0:57:1B:C3:2E:CE:FF:76:6D:76:94:2E:99:26:27
Certificate issuer:       /CN=231C01A4C21B4CA32569E7A61F40CB611354C269
Certificate serial:       6A34A07CDBC4A0803058F7140DC8E8446C5888D7
Authority key identifier: 23:1C:01:A4:C2:1B:4C:A3:25:69:E7:A6:1F:40:CB:61:13:54:C2:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139342e302f32342d3234203d3e203533313037.roa
Signing time:             Fri 25 Apr 2025 17:48:57 +0000
ROA not before:           Fri 25 Apr 2025 17:43:57 +0000
ROA not after:            Fri 24 Apr 2026 17:48:57 +0000
asID:                     53107
IP address blocks:        177.84.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.crl
                          rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 04:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:34:a0:7c:db:c4:a0:80:30:58:f7:14:0d:c8:e8:44:6c:58:88:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231C01A4C21B4CA32569E7A61F40CB611354C269
        Validity
            Not Before: Apr 25 17:43:57 2025 GMT
            Not After : Apr 24 17:48:57 2026 GMT
        Subject: CN=5FF7929A91B0571BC32ECEFF766D76942E992627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:13:44:b3:a6:1b:e6:5f:47:4c:ae:55:49:
                    fd:d3:98:7e:d1:9c:3c:08:f3:0f:7c:48:23:29:20:
                    1f:ca:20:8c:a3:9c:b4:f9:ca:57:1b:fc:9b:80:49:
                    d4:b3:97:96:82:b2:40:8b:df:c6:a1:e3:63:21:1c:
                    90:78:64:7d:5b:67:a3:27:ef:60:26:ec:0a:94:4b:
                    05:ff:a5:b7:f2:ef:9a:83:df:d6:b3:a6:26:7f:bf:
                    0f:c9:64:12:26:b2:30:63:e4:eb:35:51:7d:e6:b8:
                    ec:d5:4d:f7:e2:cb:34:6a:dc:4f:07:07:d1:6d:fc:
                    0a:01:b8:bc:aa:75:c1:21:d5:2e:74:82:1e:6f:b5:
                    e9:34:5f:b3:b0:04:96:06:b5:b5:48:60:4b:4b:ec:
                    92:b3:24:5e:19:b4:10:3a:96:0f:cc:d9:60:a6:01:
                    93:83:60:6e:76:15:f8:78:82:be:45:eb:1a:a5:eb:
                    42:c6:12:3e:a7:95:b3:49:4f:6a:71:04:4c:fa:aa:
                    57:b4:54:7a:2d:d9:2e:37:19:88:96:6b:c6:b6:9c:
                    3e:39:3b:9f:f1:46:7b:2d:0a:91:5f:f8:13:a6:52:
                    8a:37:32:d4:e1:32:51:3c:d0:2c:89:6a:54:45:2e:
                    7a:8e:b7:ac:9f:62:21:3f:0f:bb:25:aa:10:3f:a5:
                    a6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F7:92:9A:91:B0:57:1B:C3:2E:CE:FF:76:6D:76:94:2E:99:26:27
            X509v3 Authority Key Identifier:
                keyid:23:1C:01:A4:C2:1B:4C:A3:25:69:E7:A6:1F:40:CB:61:13:54:C2:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/231C01A4C21B4CA32569E7A61F40CB611354C269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231C01A4C21B4CA32569E7A61F40CB611354C269.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137372e38342e3139342e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:a3:55:01:06:f5:47:34:94:e0:4c:2a:b5:a6:7a:33:18:19:
         84:13:76:53:7e:e0:44:72:e0:ff:ac:d5:8a:e2:e6:42:12:67:
         4f:06:ef:8d:82:4b:e5:2c:40:23:34:53:f8:1e:b7:9e:f2:44:
         81:fb:a6:10:a0:07:12:80:b9:c1:51:86:bb:29:b2:ae:79:36:
         bc:ff:35:0a:2b:73:b4:f1:51:06:4c:eb:6b:3f:d8:89:c6:a2:
         32:49:dd:e6:bc:86:1c:e4:42:70:23:35:ed:f4:41:63:cf:5c:
         99:b5:1d:a1:34:eb:f1:20:2e:38:70:e3:71:dd:ca:7c:c4:e2:
         3e:95:57:ce:14:2d:9e:3a:1f:64:5d:50:8a:4a:4e:4b:df:fe:
         ce:92:02:2a:33:1a:24:49:de:f2:8a:6d:6e:aa:19:0b:b3:63:
         59:97:45:6a:72:df:b2:44:fb:4e:d6:2d:89:a5:7c:28:ba:dd:
         b4:f5:11:25:7d:a1:5e:cb:b0:d3:67:e4:2f:fa:63:47:db:b9:
         ce:7a:be:65:0e:42:be:87:72:4a:fd:55:12:05:04:14:a4:63:
         e5:d4:5f:e6:74:6a:3b:74:03:c4:44:97:9b:44:df:f5:1a:99:
         5e:77:03:24:3b:43:b4:0e:61:8d:e5:11:63:d0:52:60:4a:fd:
         12:e2:d8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:09 2025 by rpki-client on console.sobornost.net