Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3137372e3132352e3231362e302f32322d3234203d3e20323632333535.roa
File:                     3137372e3132352e3231362e302f32322d3234203d3e20323632333535.roa (raw, json)
Hash identifier:          NXwOW7NVGh3xshCp15HvoOs5lQreHUVWOyZNFZbFoPk=
Subject key identifier:   63:C4:6F:E5:97:F4:C9:2E:12:75:A8:AC:D9:71:32:4B:8C:4E:C8:B5
Certificate issuer:       /CN=47F932452F6354876C2CDBACA9AD34D90A502586
Certificate serial:       2F593155ECFE170066F14D03D02A2A77D1EC9EF9
Authority key identifier: 47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3137372e3132352e3231362e302f32322d3234203d3e20323632333535.roa
Signing time:             Mon 21 Apr 2025 17:49:43 +0000
ROA not before:           Mon 21 Apr 2025 17:44:43 +0000
ROA not after:            Mon 20 Apr 2026 17:49:43 +0000
asID:                     262355
IP address blocks:        177.125.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl
                          rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 17:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:59:31:55:ec:fe:17:00:66:f1:4d:03:d0:2a:2a:77:d1:ec:9e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F932452F6354876C2CDBACA9AD34D90A502586
        Validity
            Not Before: Apr 21 17:44:43 2025 GMT
            Not After : Apr 20 17:49:43 2026 GMT
        Subject: CN=63C46FE597F4C92E1275A8ACD971324B8C4EC8B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:99:dc:1b:ed:e6:45:af:05:fd:99:80:11:4f:
                    ea:a7:0e:2f:6e:67:9e:42:a1:2c:bc:52:07:f2:0b:
                    1d:ff:cb:f8:97:bd:08:a1:3d:07:69:dc:34:15:56:
                    0f:d2:d7:90:d6:a5:46:5e:71:cc:af:91:7e:a9:c6:
                    bd:a6:0d:bc:cf:2a:93:f9:0a:d3:2b:6b:9b:69:19:
                    10:5b:40:97:7a:c8:e5:48:4a:9d:de:ef:b2:fa:79:
                    03:61:97:c0:68:6a:0e:a3:b4:ea:db:b4:9d:9f:cf:
                    f8:0a:75:e6:d7:a9:6e:57:cf:e9:f6:da:cb:f3:75:
                    06:fe:22:b5:71:22:ce:74:2d:d8:fd:1e:d8:e7:c6:
                    a5:f1:88:a6:d6:8f:24:30:f7:d3:ca:09:a5:6e:68:
                    f4:b3:75:3d:bf:92:22:ff:ed:b6:98:67:e2:84:41:
                    a2:36:93:2a:73:7f:de:67:e4:0f:74:df:8a:b8:ba:
                    65:f1:47:10:0a:62:c9:8c:b1:b8:bc:15:a5:05:57:
                    1e:44:de:79:69:22:19:da:91:e9:c7:c8:ee:1d:bc:
                    6d:28:e0:bf:55:98:4d:12:0d:cd:7e:27:6d:34:c1:
                    3c:d7:a6:74:54:21:5d:4e:e6:12:85:47:3c:ff:dd:
                    39:3d:d8:64:8e:dc:ad:4d:94:81:c1:a2:6d:20:c7:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C4:6F:E5:97:F4:C9:2E:12:75:A8:AC:D9:71:32:4B:8C:4E:C8:B5
            X509v3 Authority Key Identifier:
                keyid:47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3137372e3132352e3231362e302f32322d3234203d3e20323632333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d8:21:7d:a5:22:5a:50:62:e9:ad:c5:14:1a:57:ca:05:45:2e:
         9d:34:4c:62:9e:6e:49:c2:a8:aa:ed:b7:51:17:1c:0f:5b:80:
         56:fa:52:d8:33:47:37:bd:55:9b:8a:22:35:73:31:88:3a:72:
         e6:34:08:e0:ba:8f:9c:28:ad:b9:4d:e7:51:5b:b5:00:e5:86:
         d2:bb:8d:66:60:d5:1f:e4:7f:b1:bc:46:70:eb:5f:fb:e8:23:
         53:59:81:6a:f3:e9:08:27:4b:91:8b:b0:34:76:ac:ea:c4:7b:
         2a:3d:2e:6e:8f:43:7e:38:4f:f3:13:c9:b2:b4:3e:88:b2:53:
         b2:53:9c:ad:90:9c:b2:a5:a5:68:f1:75:3f:30:01:9e:e4:3b:
         ab:71:23:d9:c6:5e:c5:1e:8c:a8:a5:22:9d:86:a7:55:65:c4:
         eb:f7:08:fb:ed:6e:da:d8:00:75:9e:44:44:77:ba:1c:49:e8:
         a5:6b:3e:63:21:98:2c:8e:cb:c2:6e:40:5a:88:30:ce:60:7e:
         60:42:92:3e:97:71:ef:08:9e:bd:d1:63:7b:ed:e1:ce:a3:84:
         89:36:e2:c3:7f:51:08:21:26:33:6c:26:a0:72:4c:1e:56:69:
         49:43:53:c2:a2:c9:2a:a1:72:20:3f:a2:66:40:7b:14:d8:b7:
         d5:22:f2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:44 2025 by rpki-client on console.sobornost.net