Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3135302e302f32332d3233203d3e203532373933.roa
File:                     3137372e3230302e3135302e302f32332d3233203d3e203532373933.roa (raw, json)
Hash identifier:          JRLBgIhIg5ngdgpoI1PqRuMzGnlSwFm0D6yToYQnfgM=
Subject key identifier:   55:63:3C:FE:D5:83:36:D8:00:1B:53:0B:88:DA:E6:3E:C5:FF:48:DB
Certificate issuer:       /CN=C868A06878254001614E44615C6C21349FD5A104
Certificate serial:       70AEB8BB7494B1F7CF1A492321260ADB3A701C51
Authority key identifier: C8:68:A0:68:78:25:40:01:61:4E:44:61:5C:6C:21:34:9F:D5:A1:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3135302e302f32332d3233203d3e203532373933.roa
Signing time:             Tue 08 Apr 2025 20:54:54 +0000
ROA not before:           Tue 08 Apr 2025 20:49:54 +0000
ROA not after:            Tue 07 Apr 2026 20:54:54 +0000
asID:                     52793
IP address blocks:        177.200.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.crl
                          rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ae:b8:bb:74:94:b1:f7:cf:1a:49:23:21:26:0a:db:3a:70:1c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C868A06878254001614E44615C6C21349FD5A104
        Validity
            Not Before: Apr  8 20:49:54 2025 GMT
            Not After : Apr  7 20:54:54 2026 GMT
        Subject: CN=55633CFED58336D8001B530B88DAE63EC5FF48DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:55:9a:c8:9a:07:06:db:a9:1d:89:cd:8c:
                    8c:a3:ce:5f:16:b2:8e:a1:58:c5:4e:c4:80:fe:76:
                    f0:f8:4e:c4:d1:85:a5:1a:65:92:ed:65:70:fd:f6:
                    47:15:f5:06:9e:46:44:f8:71:07:dd:4e:4f:a1:26:
                    37:d4:19:3b:5b:6e:10:71:ce:31:35:90:77:5e:b1:
                    35:8e:15:a6:58:c5:bb:f1:e4:0e:03:ee:a7:40:86:
                    a9:5e:9e:16:be:1b:ec:a7:a1:e7:34:b1:b0:b7:12:
                    9b:f9:10:3f:d8:b8:bf:8a:13:a7:62:7d:99:06:33:
                    e3:84:95:92:33:06:42:35:3f:21:d9:5a:95:9d:8e:
                    38:32:ff:61:cf:cb:d8:0e:21:2b:91:0b:94:2c:fd:
                    12:e8:0d:bd:44:a2:e5:1c:9f:c4:0f:59:34:99:f4:
                    6b:db:59:20:ee:1a:d3:e4:0c:62:f6:d4:f8:6f:91:
                    f5:a6:ed:ea:87:ed:79:5a:ef:fa:a5:7e:43:8b:81:
                    b6:29:d9:59:ab:81:7b:86:dc:bb:ab:6f:70:01:27:
                    35:93:b7:b5:33:a0:c1:b9:15:5e:29:52:31:96:fe:
                    3b:1b:43:b0:c8:30:38:b7:8c:a2:fc:aa:e2:9a:93:
                    68:51:d3:36:37:9f:44:c8:b1:1e:d5:c4:df:84:b5:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:63:3C:FE:D5:83:36:D8:00:1B:53:0B:88:DA:E6:3E:C5:FF:48:DB
            X509v3 Authority Key Identifier:
                keyid:C8:68:A0:68:78:25:40:01:61:4E:44:61:5C:6C:21:34:9F:D5:A1:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/C868A06878254001614E44615C6C21349FD5A104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C868A06878254001614E44615C6C21349FD5A104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3135302e302f32332d3233203d3e203532373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:0f:38:33:9c:c4:71:d8:05:5e:1a:52:62:f0:f6:b1:a8:a2:
         af:e2:9d:a2:3c:84:b4:7e:5b:40:0e:76:99:b9:08:db:95:75:
         7c:55:f1:73:10:89:37:c1:cb:44:6a:40:2a:14:69:30:3a:41:
         d1:57:10:d2:19:fd:fa:38:c8:a8:cb:28:1d:ee:1d:97:21:e6:
         fb:99:ea:df:e4:22:d2:01:39:bd:2f:6c:d9:d1:7c:c1:ed:df:
         09:54:d9:8e:84:08:6c:5f:cd:3e:91:fe:6b:ef:7b:84:dc:16:
         a2:f0:60:60:ef:d8:17:71:e4:7d:69:02:a6:70:11:8f:c7:79:
         03:ad:c4:84:e9:c6:6f:1e:5b:04:d2:7f:9d:d1:82:78:83:6e:
         18:31:f3:96:dc:d3:a0:38:32:41:64:ba:52:3b:22:4d:14:61:
         5c:20:b5:37:2c:99:86:34:51:2f:32:78:52:58:e1:8f:cc:83:
         93:64:b4:69:30:c1:d2:52:f6:fc:0a:12:59:4d:6c:88:ee:9e:
         de:12:65:ab:a5:3f:8a:96:25:2d:f8:0c:2e:46:34:65:0f:01:
         f5:5f:9b:e9:73:3b:19:ea:8f:f7:4e:c9:ca:a9:8b:16:2b:ca:
         a1:0f:3f:70:ea:7f:b5:50:cd:83:88:61:8e:96:97:b7:67:26:
         e6:a4:46:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:52 2025 by rpki-client on console.sobornost.net