Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232362e302f32332d3233203d3e20323632363136.roa
File:                     3137372e38352e3232362e302f32332d3233203d3e20323632363136.roa (raw, json)
Hash identifier:          nxaGdyhkKDM12ONXyQW1CSLcdA/6x/sfNBaq3SiRZPY=
Subject key identifier:   90:8F:F4:0F:26:55:E7:D5:36:6D:0B:0E:14:DB:DB:CB:DE:E9:4D:89
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       1706C705AC6D7BCA22EA45EAF722BFCBEED13030
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232362e302f32332d3233203d3e20323632363136.roa
Signing time:             Thu 06 Mar 2025 05:00:17 +0000
ROA not before:           Thu 06 Mar 2025 04:55:17 +0000
ROA not after:            Thu 05 Mar 2026 05:00:17 +0000
asID:                     262616
IP address blocks:        177.85.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:06:c7:05:ac:6d:7b:ca:22:ea:45:ea:f7:22:bf:cb:ee:d1:30:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Mar  6 04:55:17 2025 GMT
            Not After : Mar  5 05:00:17 2026 GMT
        Subject: CN=908FF40F2655E7D5366D0B0E14DBDBCBDEE94D89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:83:b3:0a:a5:98:b6:be:7e:77:b2:be:cf:
                    c0:ba:4c:69:a8:5d:f2:1d:f2:9b:43:c5:42:08:d8:
                    b4:6f:9d:42:92:45:60:f0:ba:6e:c6:6f:a3:07:bc:
                    2f:93:26:32:49:3e:87:90:51:70:d9:4a:11:d2:b6:
                    6e:9f:f7:2c:e3:6b:47:ac:f0:3f:69:4b:f5:96:3a:
                    67:11:2f:a6:da:c1:18:c6:a9:4c:85:84:a0:a1:3d:
                    60:fe:6b:a6:c3:c8:db:3f:ec:98:ab:76:be:9a:45:
                    81:b6:d3:e3:ed:b4:3a:95:ec:ef:8c:d3:eb:82:4e:
                    a5:ac:1e:85:4f:1d:9d:97:8a:11:b1:36:2c:da:4a:
                    eb:5d:0c:b8:2a:09:f2:f5:f0:97:cd:60:ee:84:89:
                    35:1a:9d:93:24:9f:0e:4a:80:f0:9f:47:92:61:39:
                    2b:ef:2c:aa:e0:46:1f:24:6c:51:35:67:56:2c:ce:
                    ce:d4:42:d0:ed:21:5b:72:f0:0a:02:33:43:64:ce:
                    e9:3c:3c:5d:4b:e9:7f:4e:56:f7:e8:15:6f:bc:50:
                    75:39:e9:0b:83:99:80:8d:c1:ef:02:50:de:b1:20:
                    ff:55:1b:0b:20:6f:f7:12:7e:b4:fc:dc:98:37:25:
                    ca:2d:3f:fe:5f:2d:ba:ce:f4:30:a9:d5:c4:b1:28:
                    9d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8F:F4:0F:26:55:E7:D5:36:6D:0B:0E:14:DB:DB:CB:DE:E9:4D:89
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232362e302f32332d3233203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:77:b8:ac:3a:a5:8f:f1:85:c4:5e:78:f5:56:fa:1a:7f:27:
         d9:61:0d:5e:da:43:cd:1a:a6:e0:13:d4:9a:8a:7b:05:38:1a:
         4b:28:37:ae:0a:c8:d6:33:fa:b3:2c:17:79:9f:52:9d:29:f7:
         70:70:96:80:a1:4f:98:38:4f:35:4b:25:cf:bf:89:d7:44:f7:
         15:56:74:14:a4:0a:b2:ac:c1:85:80:61:78:e4:8b:77:8b:15:
         65:fa:fd:45:c6:07:22:47:1b:a9:4c:99:d4:aa:df:85:b6:01:
         d4:ac:6c:ba:f9:c6:c8:2c:ee:5f:d2:93:e4:41:f5:0d:db:41:
         4d:6a:8a:5a:a6:57:dd:4f:de:80:43:a4:cc:96:59:47:bd:86:
         74:a5:b3:e6:66:0e:a4:59:77:21:1b:d7:d2:07:fc:a4:f0:5b:
         05:60:8f:c7:a9:52:9c:2f:18:c0:82:33:11:e8:84:1f:9e:08:
         4a:1d:99:39:64:68:6a:87:50:a6:68:cc:d0:2c:a6:75:f7:b4:
         1e:7b:d6:f8:b3:7b:ba:cf:ab:15:3e:4d:75:2d:8b:d7:b1:ad:
         7e:69:96:36:11:be:98:5a:4f:fb:c6:20:6f:f3:4a:aa:59:cc:
         6f:ae:c4:7d:45:32:f5:cb:27:9a:0d:fe:bf:3c:30:2a:00:be:
         7b:28:0d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:16 2025 by rpki-client on console.sobornost.net