Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e34382e302f32302d3234203d3e20323633303834.roa
File:                     3137372e32312e34382e302f32302d3234203d3e20323633303834.roa (raw, json)
Hash identifier:          e/s1SwprzaW2XI2ybtfgpJhbKCKNV7Oqf5bmwFWZXOU=
Subject key identifier:   9F:36:53:A2:62:50:85:29:02:DE:FB:07:B9:ED:2D:34:FC:12:E4:65
Certificate issuer:       /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial:       7618150664F9D233C004BE57C16AABBCF82D4591
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e34382e302f32302d3234203d3e20323633303834.roa
Signing time:             Wed 07 May 2025 19:31:23 +0000
ROA not before:           Wed 07 May 2025 19:26:23 +0000
ROA not after:            Wed 06 May 2026 19:31:23 +0000
asID:                     263084
IP address blocks:        177.21.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl
                          rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 00:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:18:15:06:64:f9:d2:33:c0:04:be:57:c1:6a:ab:bc:f8:2d:45:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
        Validity
            Not Before: May  7 19:26:23 2025 GMT
            Not After : May  6 19:31:23 2026 GMT
        Subject: CN=9F3653A26250852902DEFB07B9ED2D34FC12E465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:db:e4:fb:41:51:e7:b6:b7:80:c1:a2:ee:
                    d9:d4:fb:cb:97:ca:36:a3:b6:f0:0d:da:11:df:d8:
                    2e:1a:b9:33:ce:98:32:60:d4:1a:38:0c:ca:4e:39:
                    94:2a:6b:dc:80:22:ee:49:17:49:15:43:10:e7:4c:
                    3a:44:0e:35:3c:b8:eb:44:86:b5:73:19:6f:64:da:
                    b5:ef:8c:07:9e:7d:ce:5a:c8:21:0d:7a:bb:91:70:
                    29:38:48:9c:c1:11:85:06:e0:c4:7d:51:65:72:7c:
                    6d:28:04:5d:25:b0:dd:22:6e:36:28:e9:74:c0:14:
                    8c:73:06:dd:6d:dc:83:76:1a:7b:1b:e6:39:63:1e:
                    1e:b1:4d:a6:bd:37:22:7d:de:42:d6:d7:58:f7:f6:
                    a1:4e:ac:7e:b9:45:9e:dc:5b:ce:6a:ac:04:c2:fc:
                    05:43:80:cd:3a:7c:99:8e:02:ec:dd:e1:b3:47:b9:
                    59:9e:f9:3c:5e:3d:aa:a1:0d:18:58:d7:9c:82:b6:
                    df:5f:ed:62:b9:94:d8:56:c7:22:d2:f1:3b:73:72:
                    1d:7b:f6:45:a8:af:3d:a8:b2:e0:3e:21:45:a2:34:
                    73:4b:ec:b0:93:30:20:b4:83:51:b8:b9:51:de:12:
                    cc:3f:2d:43:35:f9:ef:ae:b1:4e:c0:89:84:7a:bb:
                    ab:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:36:53:A2:62:50:85:29:02:DE:FB:07:B9:ED:2D:34:FC:12:E4:65
            X509v3 Authority Key Identifier:
                keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e34382e302f32302d3234203d3e20323633303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:0b:02:15:5c:26:f8:c5:e6:9f:0d:d7:fa:be:e5:37:cf:01:
         f6:f9:84:02:b1:5a:02:d7:8b:55:20:d7:3e:89:f8:db:71:6a:
         54:e9:b4:33:13:24:7f:e9:39:2c:5b:de:5a:0c:47:b8:da:83:
         6d:5c:1d:48:f6:c9:e4:e2:34:23:a0:51:60:5d:df:4f:47:7e:
         ef:cf:9b:ba:8b:d5:ba:0d:0c:05:ad:69:c8:f1:02:2f:be:6d:
         77:13:59:f5:f5:d2:6e:1a:7b:78:5b:6a:96:13:7e:62:d5:68:
         39:b6:00:ed:e4:00:83:49:0b:b9:b1:62:18:ab:6c:d5:7b:11:
         f5:cb:6e:19:21:c4:31:fc:21:81:03:97:b1:ef:dd:a9:6f:1e:
         f1:03:63:57:67:73:90:8d:84:f5:8b:39:44:f3:7f:b1:1d:03:
         49:65:d9:24:6f:34:03:e7:a6:db:d9:1f:87:4c:3d:3d:ae:54:
         40:7f:83:e4:5b:ee:bf:bb:4e:de:5c:70:94:55:bf:3e:a7:09:
         51:12:ed:3b:66:3b:83:18:85:c0:8d:3d:4d:de:20:cb:77:f8:
         24:8d:79:a2:1f:fe:e7:71:1f:e8:c5:e1:8e:ba:a7:5a:5b:03:
         47:12:04:22:3b:9f:cc:7a:44:8d:8f:dc:c3:6c:25:de:5d:ef:
         aa:8e:80:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:36:54 2025 by rpki-client