Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130382e302f32332d3233203d3e203532373231.roa
File:                     3137372e38342e3130382e302f32332d3233203d3e203532373231.roa (raw, json)
Hash identifier:          +RGWxTVi4PznPE1e/sIqSOZSzhwqRV/IIsayG1Jfdho=
Subject key identifier:   DC:C3:2B:07:48:6E:9C:F5:D0:63:41:46:C3:33:E1:69:1C:58:84:9F
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       6485FD3CC410317865298BC5F09DFD201B5A97C5
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130382e302f32332d3233203d3e203532373231.roa
Signing time:             Fri 25 Apr 2025 14:50:37 +0000
ROA not before:           Fri 25 Apr 2025 14:45:37 +0000
ROA not after:            Fri 24 Apr 2026 14:50:37 +0000
asID:                     52721
IP address blocks:        177.84.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 19:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:85:fd:3c:c4:10:31:78:65:29:8b:c5:f0:9d:fd:20:1b:5a:97:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:37 2025 GMT
            Not After : Apr 24 14:50:37 2026 GMT
        Subject: CN=DCC32B07486E9CF5D0634146C333E1691C58849F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:f8:45:41:bc:e3:12:2f:74:ca:34:e9:d7:
                    6f:f1:1b:ce:f8:2e:f6:63:8a:2b:32:15:d7:3a:1a:
                    f9:30:03:89:58:9d:33:fa:c7:aa:ea:a6:8f:22:6a:
                    c7:10:fd:16:13:50:ad:8f:5e:ef:27:2c:bb:fc:2d:
                    8f:92:c6:e1:7b:51:fd:d5:b1:42:45:b1:92:f5:12:
                    bd:9f:f3:66:4e:31:20:38:4b:3e:d8:05:b3:be:e0:
                    14:45:93:84:23:40:0a:e4:32:f8:ce:fa:84:a7:87:
                    c0:ce:30:ca:cc:ee:7b:03:ba:23:c4:6f:ae:86:f1:
                    27:09:de:21:29:74:03:c6:83:ad:c0:e2:b6:6b:9f:
                    84:b7:33:b9:6a:50:c3:61:9c:13:4e:bf:65:3b:97:
                    b0:01:85:7c:9a:95:a6:c5:cf:08:d2:48:88:90:bc:
                    af:b9:ed:ba:16:ed:29:f4:da:6d:55:cb:0e:fd:7e:
                    52:7f:fb:53:25:41:b6:1e:b9:22:35:b0:f5:56:07:
                    ec:6d:ea:c0:c3:a3:13:8d:53:46:5f:af:16:ef:e2:
                    7b:72:bb:f0:f9:e4:fa:c0:28:08:28:55:09:0f:c0:
                    fb:a6:b2:90:46:03:b4:db:93:b2:1f:eb:2c:ad:93:
                    8e:7f:58:d1:4c:09:57:81:93:37:1a:ce:ea:b0:f1:
                    e3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C3:2B:07:48:6E:9C:F5:D0:63:41:46:C3:33:E1:69:1C:58:84:9F
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130382e302f32332d3233203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:a2:4d:9f:99:16:51:46:1a:aa:9a:cd:8d:93:e0:1e:6f:98:
         6b:42:8c:c3:8a:36:47:ef:29:32:20:e2:f6:f1:5b:cf:12:bc:
         e6:8f:4c:e2:27:49:69:89:be:27:ae:7f:52:9c:ee:0f:0d:34:
         12:a6:a5:ae:01:73:59:6d:d7:b1:c1:7f:37:11:06:3b:6e:05:
         f1:bf:2b:08:f7:08:2c:7c:fa:04:d2:05:c3:f5:5e:55:3d:19:
         7d:93:02:84:d4:32:5e:23:ab:49:db:f3:32:b2:1c:33:e3:1a:
         dd:f4:91:cb:80:a0:b7:ee:8f:70:c8:e6:2d:a4:f2:64:8b:3d:
         a4:c3:9f:c5:95:0a:c7:08:57:2d:6f:99:03:18:f3:23:97:69:
         82:64:d9:37:f6:c7:42:fa:07:a9:21:f6:78:30:56:43:b5:6a:
         79:b3:c9:96:e4:7a:2c:aa:c2:49:8b:86:13:83:7c:07:01:16:
         26:59:5a:1c:d1:60:d4:9e:0c:21:bc:23:22:57:b1:1b:e4:01:
         bd:86:d1:61:3e:c5:61:d7:2e:0e:e2:57:b3:1b:1e:7b:43:8f:
         ba:8d:10:bd:59:81:98:05:fc:08:95:2a:17:2b:eb:0f:a2:e7:
         57:aa:2a:3a:ba:07:94:d0:fc:a4:65:8d:72:df:fc:66:76:0e:
         19:06:94:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:27:05 2025 by rpki-client