Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3134392e302f32342d3234203d3e203532373933.roa
File:                     3137372e3230302e3134392e302f32342d3234203d3e203532373933.roa (raw, json)
Hash identifier:          UdRpFSd8bkDX7Gb44jRPsk81M8wfemLHpuFnvnFZOxA=
Subject key identifier:   8A:85:F5:89:8C:04:5B:51:FA:09:E8:88:5C:17:3C:76:84:18:40:18
Certificate issuer:       /CN=C868A06878254001614E44615C6C21349FD5A104
Certificate serial:       729B4FBB8F2BF27CA6820522BC6B8C1475D5C87C
Authority key identifier: C8:68:A0:68:78:25:40:01:61:4E:44:61:5C:6C:21:34:9F:D5:A1:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3134392e302f32342d3234203d3e203532373933.roa
Signing time:             Tue 08 Apr 2025 20:54:55 +0000
ROA not before:           Tue 08 Apr 2025 20:49:55 +0000
ROA not after:            Tue 07 Apr 2026 20:54:55 +0000
asID:                     52793
IP address blocks:        177.200.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.crl
                          rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 11:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9b:4f:bb:8f:2b:f2:7c:a6:82:05:22:bc:6b:8c:14:75:d5:c8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868A06878254001614E44615C6C21349FD5A104
        Validity
            Not Before: Apr  8 20:49:55 2025 GMT
            Not After : Apr  7 20:54:55 2026 GMT
        Subject: CN=8A85F5898C045B51FA09E8885C173C7684184018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:0b:62:e0:44:d8:7b:11:e1:54:dc:aa:9a:
                    ec:3f:e3:7e:bd:e8:ce:78:74:35:8b:12:c7:86:ff:
                    69:03:ac:74:e1:e6:b7:ea:3e:81:e8:de:bf:16:46:
                    51:ee:65:67:52:06:39:bc:ea:89:87:b5:e2:5e:80:
                    5a:22:37:71:c8:55:49:c2:1b:93:de:3f:7b:5f:24:
                    0b:e4:f6:ce:c8:ab:e5:ad:5a:0d:7f:41:2f:4a:89:
                    05:5e:ae:91:b0:c7:fd:e1:53:d9:ee:91:97:24:a7:
                    7e:75:ad:4e:bc:07:a2:62:58:cc:50:58:09:b9:18:
                    e2:bf:f6:72:55:80:f3:35:fe:47:8d:30:86:20:cf:
                    03:a3:65:48:aa:d9:d4:56:ad:ea:73:f3:39:64:c3:
                    08:5b:b9:01:37:69:d0:f7:c6:60:2a:fa:07:e4:dc:
                    87:4a:8e:ae:ea:55:9c:c1:0d:e7:78:26:5a:e2:0c:
                    fa:2a:6f:3f:75:6d:47:0c:55:f0:4f:36:9d:d3:68:
                    2c:b3:c0:f6:f3:93:af:89:46:c6:5f:60:af:0f:1f:
                    80:44:87:05:a4:bb:61:cf:8e:9c:86:3f:b6:99:1b:
                    04:e4:f0:63:0a:9e:47:fa:56:2b:a6:ab:a9:73:9d:
                    fe:34:5f:27:69:cd:38:7e:04:ad:f6:8f:10:d6:42:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:85:F5:89:8C:04:5B:51:FA:09:E8:88:5C:17:3C:76:84:18:40:18
            X509v3 Authority Key Identifier:
                keyid:C8:68:A0:68:78:25:40:01:61:4E:44:61:5C:6C:21:34:9F:D5:A1:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3134392e302f32342d3234203d3e203532373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:51:51:6b:c1:9f:a8:d1:8e:ef:0a:06:3b:d0:ee:82:cd:36:
         36:88:06:b4:20:01:74:ae:98:b8:65:34:1c:3a:dc:30:aa:7b:
         b5:ff:25:e8:4c:bc:ef:bb:09:ea:99:e7:d8:fb:9c:4d:96:a9:
         ae:43:b6:ca:a2:d2:7a:4b:d2:93:d0:13:be:0f:e6:07:2a:5f:
         20:e9:f2:09:97:15:eb:d8:3b:13:4e:be:42:7c:0d:cf:17:38:
         45:a8:7e:86:ff:5c:96:61:cb:ea:d0:b7:c0:66:ed:c3:f3:9e:
         2d:31:75:70:68:44:f1:68:fe:e0:51:51:2c:22:91:55:c7:57:
         26:c1:2e:48:49:49:9c:34:2d:82:76:0d:d8:5a:ec:bf:13:19:
         1d:7e:ab:e2:f5:04:45:87:3f:89:be:82:dc:f6:c9:57:66:a0:
         73:c4:b2:c4:10:2b:f1:de:a4:83:de:77:98:90:81:40:97:38:
         e6:8f:4a:fa:e1:e3:d5:be:68:35:d1:b8:61:d1:b7:6c:be:c6:
         04:43:0a:38:3d:9b:ba:75:b9:11:20:f6:f3:92:17:f9:ec:05:
         ab:ca:2a:2a:9d:f3:d6:c9:c2:2f:96:c6:0e:66:dd:5d:4f:39:
         8a:c9:89:6a:91:c2:a4:38:5d:a9:59:4f:21:80:a5:95:60:b1:
         3c:68:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:24 2025 by rpki-client on console.sobornost.net