Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32362e302f32342d3234203d3e203238333338.roa
File:                     3137372e38372e32362e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          QVpAiREZZmJw2S0aGxT3vJNs90ARlkz7z9Zu58qO7Vw=
Subject key identifier:   E6:B5:D9:3B:94:6E:D2:ED:44:5B:45:DD:CA:39:42:29:F1:87:DF:7A
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       3E1C46ACBFBB5B2B17DA40B4395E2C7C2BFB702D
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32362e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:03 +0000
ROA not before:           Wed 30 Apr 2025 18:55:03 +0000
ROA not after:            Wed 29 Apr 2026 19:00:03 +0000
asID:                     28338
IP address blocks:        177.87.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 11:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1c:46:ac:bf:bb:5b:2b:17:da:40:b4:39:5e:2c:7c:2b:fb:70:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:03 2025 GMT
            Not After : Apr 29 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:5c:4f:23:d6:94:e2:86:0a:c1:8e:2a:f8:
                    15:86:ee:b3:b2:7f:4f:cf:c4:97:0d:c4:af:23:85:
                    9d:9a:32:5b:0f:4b:9b:e9:e6:23:0b:cd:9c:3d:3e:
                    26:4b:c9:93:20:5d:98:9b:e1:cc:94:dc:ed:7d:0b:
                    c2:3b:db:3c:a1:7f:a4:30:a8:15:be:c2:f7:15:c7:
                    b7:d4:7e:60:cc:f7:29:e5:11:6f:d4:d7:fe:02:c4:
                    96:9e:2f:e2:ef:76:9f:24:04:b2:80:9b:07:b8:d2:
                    f5:b5:95:91:bb:df:4e:60:92:d9:36:c7:14:81:7b:
                    86:56:ff:e1:ce:00:a4:a8:34:40:83:bb:9c:21:f2:
                    0e:b2:98:f0:6d:6a:71:72:66:2b:78:7f:bf:7d:04:
                    3f:99:91:cd:49:d0:18:21:87:da:a7:ae:52:5a:2d:
                    5c:59:fa:ac:c5:36:35:34:60:10:56:e8:f3:db:df:
                    90:95:17:70:bf:52:76:ec:85:09:c4:a3:cb:49:b1:
                    f9:b6:32:f4:43:2f:77:b7:9a:30:ba:6b:9e:95:52:
                    ec:b1:b6:82:27:f8:8a:7b:92:1c:e9:e6:b5:4f:7a:
                    e2:26:d2:88:b5:cc:8d:f6:3b:b1:53:71:6e:3a:43:
                    05:d7:e5:74:6d:b7:33:33:94:bb:42:48:6d:c7:7b:
                    12:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B5:D9:3B:94:6E:D2:ED:44:5B:45:DD:CA:39:42:29:F1:87:DF:7A
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32362e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:6f:e1:c6:9a:d2:91:88:da:89:e6:2b:9f:07:6a:f3:08:10:
         07:6f:b3:b0:3d:b7:77:7d:d5:17:a8:ff:0a:b2:93:02:ec:cb:
         ca:35:ec:e1:06:40:9c:a7:4a:27:02:93:1d:77:7c:74:d2:9d:
         17:d1:22:37:90:60:78:cc:df:95:ba:5c:32:87:d5:c2:bf:a8:
         26:5c:25:58:64:7a:45:8f:8f:9d:d0:52:32:4b:3d:b3:be:39:
         08:96:17:16:6d:a0:87:97:65:2d:fd:64:6b:bf:f7:10:ba:e8:
         11:48:b4:f2:20:94:e0:d0:32:23:b5:b5:ef:c2:9e:c0:dc:9c:
         b9:d5:c7:2e:1c:61:d6:b2:f0:58:7f:bb:ee:f7:6c:ea:e7:40:
         c0:88:49:11:b2:01:51:a0:54:37:1a:d6:f3:78:3a:ed:c5:98:
         b7:27:47:5d:14:cc:bb:f8:d1:39:f7:a6:10:6b:3b:ca:df:42:
         e9:8d:91:a0:c4:d6:72:55:2b:58:df:7c:57:4b:42:16:ad:45:
         79:7c:58:b4:3a:39:a7:10:24:f7:96:33:99:2b:57:69:a3:29:
         4f:50:b7:cd:ef:e6:d3:60:b4:7b:3d:51:4a:18:f1:cc:a1:a3:
         f0:c4:0f:cb:5c:e7:ed:2d:2e:ec:0c:ea:38:76:18:c2:d3:45:
         ee:86:e8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:58:32 2025 by rpki-client