Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32342e302f32322d3234203d3e20323632333135.roa
File:                     3137372e3132342e32342e302f32322d3234203d3e20323632333135.roa (raw, json)
Hash identifier:          rEIptntol3bvN9Apv0evK+bT/pr64GrQa6zIT5wXlrI=
Subject key identifier:   F7:4A:12:36:7F:A8:60:19:AC:A7:A3:56:06:BE:4E:2E:7C:FB:7B:44
Certificate issuer:       /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
Certificate serial:       289F1B414FDB95E13760BC51E765578485C64863
Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32342e302f32322d3234203d3e20323632333135.roa
Signing time:             Tue 06 May 2025 14:02:40 +0000
ROA not before:           Tue 06 May 2025 13:57:40 +0000
ROA not after:            Tue 05 May 2026 14:02:40 +0000
asID:                     262315
IP address blocks:        177.124.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl
                          rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 04:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9f:1b:41:4f:db:95:e1:37:60:bc:51:e7:65:57:84:85:c6:48:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
        Validity
            Not Before: May  6 13:57:40 2025 GMT
            Not After : May  5 14:02:40 2026 GMT
        Subject: CN=F74A12367FA86019ACA7A35606BE4E2E7CFB7B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:8a:78:87:83:3c:18:8a:9f:f1:1e:f5:21:
                    21:cf:38:a0:e9:55:9e:4a:ea:af:39:ea:47:05:61:
                    ac:a3:99:34:f8:43:0f:b6:8d:a8:6d:cc:5c:81:d5:
                    2e:5e:f4:ca:6a:cd:a0:12:be:c4:a6:91:a6:9b:8e:
                    8c:67:bc:3a:06:fd:ee:71:37:b7:50:ac:44:aa:30:
                    f1:c2:66:24:bf:df:8f:6a:bb:a6:b9:a8:92:f1:98:
                    dd:cb:d9:88:c6:71:25:d7:85:b4:b8:cd:df:d4:30:
                    53:90:99:aa:34:c5:5d:2f:ee:02:ae:3e:9f:85:f6:
                    1b:9c:73:34:69:93:3f:c6:48:35:3c:db:ff:57:14:
                    4f:b4:99:26:42:d3:7b:4d:50:99:80:98:c0:72:91:
                    be:27:db:b3:2b:57:2f:44:67:04:99:88:c5:36:48:
                    8b:24:43:06:d2:fe:e3:66:08:8d:2c:7c:ea:38:2c:
                    79:2f:aa:51:40:54:d4:4b:de:9a:85:a9:4e:15:3d:
                    3e:29:c3:ca:1b:bd:dd:d8:c5:05:a4:56:c6:82:76:
                    41:c7:ac:df:29:8f:38:9b:57:7b:c9:90:55:cc:56:
                    e5:32:fc:bb:13:ca:da:73:8c:b2:45:dd:65:d2:8b:
                    c9:44:de:c7:17:05:d0:53:ee:65:6c:00:06:7f:e6:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4A:12:36:7F:A8:60:19:AC:A7:A3:56:06:BE:4E:2E:7C:FB:7B:44
            X509v3 Authority Key Identifier:
                keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/3137372e3132342e32342e302f32322d3234203d3e20323632333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:32:93:8a:b4:c4:b5:63:f4:97:15:26:d7:20:8e:0e:d2:6c:
         92:21:b0:a9:a1:03:2f:6b:e2:d8:ab:35:05:79:88:be:98:d9:
         6a:2a:3d:62:7e:e5:ed:d1:65:8b:59:57:1b:eb:6d:bf:96:2d:
         97:d2:df:91:77:13:31:e0:88:55:da:88:85:40:6b:3e:1f:ff:
         49:64:c6:fd:52:99:be:63:bb:da:33:1e:e1:b1:49:ae:c4:fb:
         70:42:4b:cc:6c:ab:05:b5:e9:a6:8b:e4:3e:07:0e:d6:3d:3d:
         e6:67:c9:6b:db:86:30:d5:f4:9e:9b:d9:b1:56:3a:94:3e:53:
         09:e8:3e:e1:17:8a:15:6b:05:06:a6:41:23:95:58:4b:cc:24:
         e3:74:f3:34:ac:08:0c:bf:a5:6c:01:57:6d:4e:d5:12:30:ef:
         e8:4b:bf:fa:e3:c1:3d:bd:61:e6:23:68:62:c3:4f:ec:1b:02:
         9b:e7:22:3b:f1:0c:d9:42:dc:8f:d0:5b:4a:f2:0d:23:fe:c5:
         6b:a1:0d:3b:43:b9:04:53:f5:13:7c:38:e0:d9:04:d9:64:c5:
         f2:07:43:f7:ba:60:e5:60:84:7d:4e:2d:74:d5:ff:af:3e:c8:
         ed:68:bc:8d:9b:ca:47:e7:ba:0b:e2:96:3a:07:3e:da:49:0a:
         5f:f3:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:03:56 2025 by rpki-client