Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa
File:                     3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa (raw, json)
Hash identifier:          qLqXLy0B76Jo01L+djXxQH/j9EOmUP1xCJozGccZfFQ=
Subject key identifier:   1B:A2:38:39:82:45:62:46:79:AF:58:74:29:92:6C:F4:FE:F2:AC:94
Certificate issuer:       /CN=47F932452F6354876C2CDBACA9AD34D90A502586
Certificate serial:       7538818FB5B26520171B6A39C33BB59546A48B56
Authority key identifier: 47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa
Signing time:             Mon 21 Apr 2025 17:49:43 +0000
ROA not before:           Mon 21 Apr 2025 17:44:43 +0000
ROA not after:            Mon 20 Apr 2026 17:49:43 +0000
asID:                     262355
IP address blocks:        177.91.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl
                          rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 17:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:38:81:8f:b5:b2:65:20:17:1b:6a:39:c3:3b:b5:95:46:a4:8b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F932452F6354876C2CDBACA9AD34D90A502586
        Validity
            Not Before: Apr 21 17:44:43 2025 GMT
            Not After : Apr 20 17:49:43 2026 GMT
        Subject: CN=1BA238398245624679AF587429926CF4FEF2AC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3f:01:4a:c7:74:43:86:cb:89:cf:54:d2:75:
                    94:90:ff:85:9d:bf:a7:8d:85:be:3d:f7:e1:dc:51:
                    de:7a:31:1a:23:08:36:93:c0:02:ef:07:80:b0:15:
                    65:0f:0f:e4:93:8d:32:68:ae:f9:15:be:d3:c2:df:
                    7a:4c:b6:49:f8:07:2e:51:e0:3e:2c:da:36:00:bb:
                    b0:3d:99:d3:07:8f:81:c0:e0:cc:5b:d4:ae:5b:78:
                    f4:10:b1:73:50:03:dd:58:88:47:be:cf:1a:1e:bf:
                    65:67:0a:1c:9b:4d:0e:09:25:d4:78:9e:c2:6f:a8:
                    97:19:c0:30:d3:76:6a:54:78:c9:4e:8a:d6:d0:f5:
                    0d:57:6d:a4:c6:ba:3a:fb:03:5e:95:d9:61:80:4d:
                    0f:83:80:29:57:e9:56:b2:1d:a1:95:0c:68:62:0c:
                    41:9b:42:72:3e:ca:4e:d2:89:ad:44:71:20:03:db:
                    f2:a9:6a:ca:75:1c:63:ee:d3:d9:41:a6:b9:bd:5a:
                    d4:b1:7f:60:6e:8a:76:b6:a1:fb:34:ae:7d:98:d2:
                    66:20:1b:f8:c3:c4:2b:db:93:aa:b0:5d:78:3d:54:
                    33:a3:7a:0d:ec:9a:95:13:0d:18:c7:71:11:ca:ea:
                    32:9e:85:b6:8c:e4:9b:9c:96:e3:7d:6b:02:9d:88:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A2:38:39:82:45:62:46:79:AF:58:74:29:92:6C:F4:FE:F2:AC:94
            X509v3 Authority Key Identifier:
                keyid:47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3137372e39312e3137322e302f32322d3234203d3e20323632333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:09:11:e5:5b:9f:82:4e:09:17:37:4a:f4:84:97:ec:6f:13:
         16:89:c1:48:c7:0e:43:70:6c:a1:dc:59:e3:99:4e:cf:f5:a8:
         ee:3e:af:ad:06:1b:0a:f0:e1:96:cb:33:7d:6f:61:07:5a:87:
         34:e8:95:59:0f:98:66:c0:6c:65:dc:90:28:e6:e3:ec:f8:de:
         d2:02:da:eb:6b:e4:08:20:66:01:da:64:36:ef:63:fc:b6:a6:
         4b:5b:1d:b6:83:ab:c0:22:6c:82:74:ad:38:61:56:cb:14:fd:
         c4:5b:59:c3:3b:6d:08:d4:49:ed:ab:49:78:ef:87:1b:5f:32:
         6c:0c:03:3d:b7:39:1b:0d:13:2c:cc:47:d9:8b:58:96:ba:2d:
         01:08:0d:15:8e:9e:1d:85:ba:ac:aa:6d:4a:5e:08:19:44:c2:
         4a:54:97:26:e0:87:f6:15:c8:4e:d7:0f:6e:0f:c5:b8:0e:3d:
         2d:e8:8a:01:ce:62:18:72:15:ef:1f:85:92:37:a7:85:a3:e6:
         a5:c8:04:c8:16:d1:26:86:54:6e:35:d3:85:bd:6e:cc:f3:68:
         86:6b:35:b5:ae:74:49:4e:33:9e:72:ad:85:7c:ee:fb:1d:0f:
         9f:7c:11:f0:ee:b2:b8:45:22:4a:76:df:eb:02:c8:3d:e9:48:
         00:26:3d:58
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdTiBj7WyZSAXG2o5wzu1lUaki1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdGOTMyNDUyRjYzNTQ4NzZDMkNEQkFDQTlBRDM0RDkw
QTUwMjU4NjAeFw0yNTA0MjExNzQ0NDNaFw0yNjA0MjAxNzQ5NDNaMDMxMTAvBgNV
BAMTKDFCQTIzODM5ODI0NTYyNDY3OUFGNTg3NDI5OTI2Q0Y0RkVGMkFDOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZPwFKx3RDhsuJz1TSdZSQ/4Wd
v6eNhb499+HcUd56MRojCDaTwALvB4CwFWUPD+STjTJorvkVvtPC33pMtkn4By5R
4D4s2jYAu7A9mdMHj4HA4Mxb1K5bePQQsXNQA91YiEe+zxoev2VnChybTQ4JJdR4
nsJvqJcZwDDTdmpUeMlOitbQ9Q1XbaTGujr7A16V2WGATQ+DgClX6VayHaGVDGhi
DEGbQnI+yk7Sia1EcSAD2/Kpasp1HGPu09lBprm9WtSxf2Buina2ofs0rn2Y0mYg
G/jDxCvbk6qwXXg9VDOjeg3smpUTDRjHcRHK6jKehbaM5JucluN9awKdiNWLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUG6I4OYJFYkZ5r1h0KZJs9P7yrJQwHwYDVR0j
BBgwFoAUR/kyRS9jVIdsLNusqa002QpQJYYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZnTG1mMTNrQVBwUGpFMlVlTVIyd1BDZkQzQUVmNW9hbkNGN28xWHBt
dXYvMC80N0Y5MzI0NTJGNjM1NDg3NkMyQ0RCQUNBOUFEMzREOTBBNTAyNTg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3RjkzMjQ1MkY2MzU0ODc2
QzJDREJBQ0E5QUQzNEQ5MEE1MDI1ODYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGZ0xtZjEza0FQcFBqRTJVZU1SMndQQ2ZEM0FFZjVvYW5DRjdvMVhwbXV2LzAv
MzEzNzM3MmUzOTMxMmUzMTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxW6wwDQYJKoZIhvcNAQELBQADggEBAHEJEeVb
n4JOCRc3SvSEl+xvExaJwUjHDkNwbKHcWeOZTs/1qO4+r60GGwrw4ZbLM31vYQda
hzTolVkPmGbAbGXckCjm4+z43tIC2utr5AggZgHaZDbvY/y2pktbHbaDq8AibIJ0
rThhVssU/cRbWcM7bQjUSe2rSXjvhxtfMmwMAz23ORsNEyzMR9mLWJa6LQEIDRWO
nh2FuqyqbUpeCBlEwkpUlybgh/YVyE7XD24PxbgOPS3oigHOYhhyFe8fhZI3p4Wj
5qXIBMgW0SaGVG4104W9bszzaIZrNbWudElOM55yrYV87vsdD598EfDusrhFIkp2
3+sCyD3pSAAmPVg=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:44 2025 by rpki-client on console.sobornost.net