Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38322e302f32342d3332203d3e203532353237.roa
File:                     3137372e3135322e38322e302f32342d3332203d3e203532353237.roa (raw, json)
Hash identifier:          Jq+PZsrRJ4s7fQAzlY4Cnge7npZcjmxNBNh2beiApko=
Subject key identifier:   02:A9:97:94:F2:BA:01:EE:C3:25:72:F2:AD:65:32:27:88:27:B3:BD
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       537659D8F942535EE68AE953DB47E89471FC937D
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38322e302f32342d3332203d3e203532353237.roa
Signing time:             Fri 07 Feb 2025 16:59:16 +0000
ROA not before:           Fri 07 Feb 2025 16:54:16 +0000
ROA not after:            Fri 06 Feb 2026 16:59:16 +0000
asID:                     52527
IP address blocks:        177.152.82.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl
                          rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:76:59:d8:f9:42:53:5e:e6:8a:e9:53:db:47:e8:94:71:fc:93:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Feb  7 16:54:16 2025 GMT
            Not After : Feb  6 16:59:16 2026 GMT
        Subject: CN=02A99794F2BA01EEC32572F2AD6532278827B3BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:c1:86:b9:36:87:41:d6:9f:24:92:1e:b8:
                    4d:fc:3f:4a:54:55:5f:2a:fa:c3:aa:a3:1b:27:50:
                    9a:45:e5:52:5e:91:c1:7c:42:c9:b1:29:81:f0:65:
                    4c:f1:aa:17:c4:c7:98:1f:72:60:1d:e6:98:bc:ea:
                    94:8c:b2:5f:d0:7d:0b:ff:d3:71:fc:6e:88:22:02:
                    f3:24:5a:3f:5f:5f:f0:ab:6f:ea:fc:85:97:f8:62:
                    f6:6c:e0:e4:fa:7b:3e:c3:cd:bb:6c:29:af:96:31:
                    60:2e:41:7a:68:26:c3:b2:67:c0:aa:fe:d1:bc:b5:
                    e7:41:ab:3f:e3:8c:95:9b:fd:96:46:d2:eb:10:4c:
                    cf:3c:f5:d1:08:86:b1:ee:0b:2c:4f:21:97:8d:fe:
                    94:bb:fa:6b:06:49:f4:61:76:3c:6d:eb:c5:17:fd:
                    2d:5b:e6:85:e8:81:91:b7:79:9a:6a:34:68:35:e0:
                    82:84:dc:49:1b:26:f4:2b:4b:c6:ab:bc:9f:bc:fe:
                    c9:ef:c8:f7:76:23:25:94:97:77:95:7b:c2:fa:ba:
                    b3:0b:1e:b5:44:4f:69:ed:02:e4:31:5b:ca:3a:ee:
                    88:66:0c:b5:66:1e:cc:28:7d:00:10:64:44:5c:74:
                    de:5f:50:22:83:92:12:76:8b:ff:15:ac:ce:10:2c:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A9:97:94:F2:BA:01:EE:C3:25:72:F2:AD:65:32:27:88:27:B3:BD
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38322e302f32342d3332203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:78:03:0b:e1:9f:c6:23:34:56:07:46:17:43:48:00:52:08:
         6e:12:a0:7a:d2:55:75:fc:c0:ab:7f:96:97:95:f1:f8:5e:2c:
         7f:b1:9d:f7:9a:3f:bd:68:2a:70:be:7b:44:83:8e:cb:d7:c4:
         ed:44:39:37:55:dd:bd:8a:63:86:7c:b9:db:39:54:8b:bb:cf:
         7a:ef:2f:38:ee:a8:32:66:9d:2b:e4:7a:f0:98:f0:a8:ff:9e:
         c8:db:0f:70:78:c3:59:d4:89:3b:4a:5d:fc:1b:fe:0f:85:6e:
         d8:f2:05:9e:0c:72:f1:91:76:52:e0:32:1e:6e:1c:58:64:2f:
         3f:1a:b8:81:9d:5c:df:3b:d7:09:5d:c3:de:22:f3:f5:1e:51:
         16:42:5b:78:d6:f3:f8:a3:c7:7d:5f:f8:22:07:6c:1c:d4:8b:
         9a:08:fa:00:2b:54:ac:84:a6:bd:d0:36:d8:3c:49:d3:5c:92:
         13:d1:c4:f2:ea:8b:8d:49:e6:80:eb:a4:16:50:ba:ab:93:76:
         97:8a:fc:5c:bc:af:2e:db:a1:41:47:58:0a:39:fe:36:97:53:
         f6:65:fa:e2:67:d3:d5:20:bb:9c:66:02:aa:a5:ab:a0:3f:a5:
         dc:c2:43:2d:28:ff:ce:e9:d9:26:52:5b:1c:ba:7b:e3:0f:78:
         0a:06:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:04 2025 by rpki-client on console.sobornost.net