Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3134342e302f32342d3234203d3e203532373933.roa
File:                     3137372e3230302e3134342e302f32342d3234203d3e203532373933.roa (raw, json)
Hash identifier:          9y0Vr91KHbS4gcqMfnJ1WUP9nz11L/7zUgQHb5hrVfg=
Subject key identifier:   DC:04:56:14:D3:FB:37:0A:14:D1:F4:E3:C0:02:58:31:92:21:65:E0
Certificate issuer:       /CN=C868A06878254001614E44615C6C21349FD5A104
Certificate serial:       310A39CC0FE7F2D669580ECCF52E16B7080CF22E
Authority key identifier: C8:68:A0:68:78:25:40:01:61:4E:44:61:5C:6C:21:34:9F:D5:A1:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3134342e302f32342d3234203d3e203532373933.roa
Signing time:             Tue 08 Apr 2025 20:54:56 +0000
ROA not before:           Tue 08 Apr 2025 20:49:56 +0000
ROA not after:            Tue 07 Apr 2026 20:54:56 +0000
asID:                     52793
IP address blocks:        177.200.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.crl
                          rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0a:39:cc:0f:e7:f2:d6:69:58:0e:cc:f5:2e:16:b7:08:0c:f2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868A06878254001614E44615C6C21349FD5A104
        Validity
            Not Before: Apr  8 20:49:56 2025 GMT
            Not After : Apr  7 20:54:56 2026 GMT
        Subject: CN=DC045614D3FB370A14D1F4E3C0025831922165E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8e:4e:8f:92:59:b0:f3:f7:d4:c5:32:84:9a:
                    17:7a:94:83:82:5c:21:1e:8b:dc:7b:66:9a:56:c3:
                    0d:a2:4e:66:db:20:19:b7:69:e9:7a:e6:fe:46:bc:
                    71:6d:93:78:64:12:e9:f3:69:da:5f:af:a0:a0:fc:
                    f7:83:e6:22:1c:e2:13:99:28:98:29:eb:99:50:a3:
                    10:1f:49:c1:cd:69:08:b5:eb:ae:19:71:60:69:c1:
                    57:48:29:84:c4:f1:97:f0:fb:fc:76:b1:00:8c:ac:
                    d6:f7:2c:2e:05:7e:c6:b6:d0:68:ba:3e:6f:00:9a:
                    18:98:62:a1:87:24:31:f4:08:2f:05:6e:17:1c:4d:
                    19:21:f1:d8:34:d0:7f:30:e8:f5:30:36:23:9c:e4:
                    61:8a:a3:76:4c:7d:ae:08:5f:f8:23:36:08:0d:87:
                    6f:49:8b:1f:af:41:da:ac:15:1e:18:47:88:b1:05:
                    39:a5:c9:ff:ab:10:91:d9:49:87:b2:7f:8c:ae:d0:
                    67:25:3f:73:10:e4:5d:ad:fc:09:77:e7:34:45:77:
                    40:ff:83:c9:5c:1e:19:00:8e:a3:0a:49:74:77:7f:
                    0c:ca:a0:96:b5:3d:e5:2d:73:e2:7c:c5:23:b3:da:
                    4a:90:1e:7f:9a:03:0e:ba:3d:b2:02:4d:1c:4e:ca:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:04:56:14:D3:FB:37:0A:14:D1:F4:E3:C0:02:58:31:92:21:65:E0
            X509v3 Authority Key Identifier:
                keyid:C8:68:A0:68:78:25:40:01:61:4E:44:61:5C:6C:21:34:9F:D5:A1:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3134342e302f32342d3234203d3e203532373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:cd:5c:5d:4b:43:d1:93:94:5a:fd:18:9a:4e:88:6a:7e:3f:
         90:fb:f7:04:86:22:c9:37:04:10:11:ef:32:8e:b6:2c:64:b1:
         70:60:db:c9:a1:80:49:c3:f3:05:62:0d:6d:a0:79:38:62:00:
         18:e5:6c:e2:58:1a:39:66:9e:dc:76:a5:28:7f:83:d5:12:94:
         40:91:07:0e:db:32:56:14:ff:23:c9:cf:7f:fa:c6:8c:dd:c6:
         ab:8c:12:06:db:e6:69:82:1c:17:1c:d5:aa:c6:fc:46:3f:42:
         01:50:14:b9:fa:43:9e:be:db:ea:7c:a3:b1:48:a8:e5:3f:c5:
         d2:9c:e2:1b:ca:5f:72:1c:44:9f:59:0f:2b:2e:27:92:fc:3b:
         1a:fd:08:f5:75:4b:ff:fa:2d:aa:90:17:cb:6f:a3:01:21:4c:
         ea:93:97:ee:bd:e6:0d:26:88:3b:0b:94:20:50:82:a9:97:71:
         67:e1:19:8b:a6:99:ce:48:68:a2:b2:1c:12:c5:65:a9:45:1c:
         b6:66:d8:72:43:29:bb:0d:6a:d5:23:0b:df:ae:ab:15:b6:84:
         24:2d:30:00:de:fb:1f:2e:c0:9c:62:af:32:5d:d7:e8:d7:04:
         33:ce:fa:fc:cb:a3:59:fe:93:78:02:6a:72:ee:22:a3:1c:35:
         9f:ad:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:52 2025 by rpki-client on console.sobornost.net