Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3137372e3135352e3230382e302f32302d3234203d3e20313938393439.roa
File:                     3137372e3135352e3230382e302f32302d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          3bPB6yCtYL3D0wSL2tRb0r4YKRGWocgjFfTQBX/9c4M=
Subject key identifier:   07:A6:F0:F9:21:4D:6F:CF:6A:BD:54:7B:A0:7C:5A:D4:33:14:ED:21
Certificate issuer:       /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial:       06FA5BF2720ACC5C4045042130375174CE49AB37
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3137372e3135352e3230382e302f32302d3234203d3e20313938393439.roa
Signing time:             Thu 08 May 2025 13:45:29 +0000
ROA not before:           Thu 08 May 2025 13:40:29 +0000
ROA not after:            Thu 07 May 2026 13:45:29 +0000
asID:                     198949
IP address blocks:        177.155.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
                          rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 03:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fa:5b:f2:72:0a:cc:5c:40:45:04:21:30:37:51:74:ce:49:ab:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Validity
            Not Before: May  8 13:40:29 2025 GMT
            Not After : May  7 13:45:29 2026 GMT
        Subject: CN=07A6F0F9214D6FCF6ABD547BA07C5AD43314ED21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:16:24:cc:36:93:ed:2b:4b:86:55:bc:47:e1:
                    96:e7:b2:0c:8e:ef:1d:4d:58:bf:a5:d8:ee:03:df:
                    68:53:14:e0:eb:1b:d1:cf:e1:25:64:91:82:4f:d7:
                    16:58:75:93:6e:bf:31:b0:33:b5:db:f2:5f:65:ee:
                    40:17:94:a8:a7:dd:26:a2:94:1e:d6:b3:97:95:b9:
                    d5:a2:96:ff:2d:3b:c4:8e:be:11:e8:f2:8b:ad:87:
                    06:ba:35:ac:2f:87:80:e4:41:98:16:fd:4d:21:64:
                    a2:19:24:e0:55:61:b3:92:94:f8:93:72:71:e5:91:
                    44:48:e0:28:42:f6:d2:14:e7:53:f9:9b:1a:8e:05:
                    91:c7:b3:78:8a:aa:2b:7b:3e:a5:d6:81:98:b6:35:
                    4b:79:13:46:62:0d:a6:10:f2:99:4f:6d:3e:46:5d:
                    6d:9c:54:38:b2:87:2e:6c:a9:0f:f5:76:38:2e:01:
                    cb:57:94:e5:f7:c4:49:fc:7b:e9:00:5a:4a:84:29:
                    e6:e7:cd:13:fd:79:9c:f1:76:ba:bf:0b:73:f0:5c:
                    d9:a4:41:54:fe:22:13:21:63:cd:b4:ec:48:8f:72:
                    1a:e3:a7:e9:66:c5:d8:4e:ad:df:95:67:40:0d:47:
                    31:9e:1c:cc:f2:50:80:9f:a6:1c:85:1a:74:1b:c0:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A6:F0:F9:21:4D:6F:CF:6A:BD:54:7B:A0:7C:5A:D4:33:14:ED:21
            X509v3 Authority Key Identifier:
                keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3137372e3135352e3230382e302f32302d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:f4:8e:83:2e:d5:3c:eb:14:85:2b:b0:90:42:e5:1e:83:38:
         24:08:4f:01:f9:90:1d:0d:e1:b4:52:1d:92:66:52:fb:fb:49:
         c7:cc:43:1d:da:5f:72:07:f1:58:ba:55:37:dc:34:a2:70:ed:
         1c:ae:4a:5f:82:af:9a:96:93:14:30:de:98:b3:cd:d7:22:01:
         a9:0a:56:87:37:b8:62:7d:c2:e0:a0:2b:bb:d9:4b:50:b8:1f:
         4e:c9:d9:fa:43:16:c7:3e:27:98:99:b6:4f:7f:2c:c7:5e:e4:
         00:3c:cd:46:58:00:bb:18:09:6f:f9:38:89:a0:9d:e7:25:eb:
         90:8b:d6:6e:e1:c3:34:64:a0:9e:21:00:f2:57:7a:4b:b7:4f:
         d7:54:c1:fe:48:28:61:0d:a4:fd:61:21:80:be:03:a2:c8:bd:
         d7:6a:67:df:42:15:12:2a:da:5f:31:7d:68:b9:0e:88:3d:39:
         a8:68:45:c9:96:e7:a8:ba:27:32:25:e1:b5:45:2c:28:b7:c8:
         5e:16:e8:56:3e:38:cb:d5:88:03:09:92:e6:76:ba:df:2f:79:
         1c:94:fa:26:22:2e:f1:ff:e2:c3:74:72:4d:d3:86:51:50:cb:
         45:3d:22:91:02:26:70:44:0b:a7:7d:84:dc:d2:25:92:4b:8d:
         7b:b5:7e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 17:02:25 2025 by rpki-client