Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137322e302f32332d3234203d3e203631393030.roa
File:                     3137372e37342e3137322e302f32332d3234203d3e203631393030.roa (raw, json)
Hash identifier:          /cITs4D7jpw1Apmb8P2sFevdk3GRZ2uhsKeWkkIPl5g=
Subject key identifier:   DC:EF:7C:D1:9B:4D:7F:95:30:3B:71:D5:B0:BD:FC:F1:53:D0:F4:42
Certificate issuer:       /CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC
Certificate serial:       5C86B392C40BBFAAB6E0F705C6EF331E7EE2C762
Authority key identifier: C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137322e302f32332d3234203d3e203631393030.roa
Signing time:             Tue 13 May 2025 18:54:43 +0000
ROA not before:           Tue 13 May 2025 18:49:43 +0000
ROA not after:            Tue 12 May 2026 18:54:43 +0000
asID:                     61900
IP address blocks:        177.74.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 08:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:86:b3:92:c4:0b:bf:aa:b6:e0:f7:05:c6:ef:33:1e:7e:e2:c7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC
        Validity
            Not Before: May 13 18:49:43 2025 GMT
            Not After : May 12 18:54:43 2026 GMT
        Subject: CN=DCEF7CD19B4D7F95303B71D5B0BDFCF153D0F442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:83:1e:df:13:1c:6c:98:ca:44:37:c4:05:
                    89:5a:4f:44:58:43:57:e2:10:99:ca:0e:58:34:48:
                    5e:d4:05:0b:40:fb:23:84:13:0e:64:6e:bd:df:67:
                    42:bc:5f:5c:df:e2:63:ee:aa:8b:7c:3b:38:3f:95:
                    ed:df:7f:db:ef:85:c6:0f:6e:cd:e4:20:e4:d6:2f:
                    57:47:1e:fc:bc:f4:68:07:1f:e1:bb:10:ac:79:6e:
                    dc:ac:d1:81:5a:4c:43:c9:1d:ed:f4:46:ba:2c:b2:
                    43:cd:c5:02:9a:52:23:38:d7:52:7b:9e:9c:ec:80:
                    fc:7c:ab:d3:9a:96:82:7a:9a:1c:cc:0a:11:5f:6e:
                    97:c7:b2:dc:b2:86:53:72:b9:8c:4e:6c:ee:40:1c:
                    39:3d:82:1d:4b:54:af:ac:4e:d2:e4:22:05:70:cd:
                    d1:7a:c2:61:f6:38:4d:dd:f6:eb:17:77:14:6f:f9:
                    f0:cf:54:68:3b:a8:c3:34:2b:53:73:0b:66:f7:a3:
                    45:b4:2d:1d:27:2e:9a:95:d6:46:41:e3:0f:01:01:
                    1f:42:07:18:05:d6:77:d8:8a:1e:27:4d:f7:d9:f1:
                    34:16:e4:bc:6d:14:a4:93:d2:9e:84:63:f7:c5:87:
                    ac:6e:e3:86:c8:e9:1f:d5:06:a8:00:92:15:56:f2:
                    2f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:7C:D1:9B:4D:7F:95:30:3B:71:D5:B0:BD:FC:F1:53:D0:F4:42
            X509v3 Authority Key Identifier:
                keyid:C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137322e302f32332d3234203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:9a:15:ed:5a:50:ab:ed:1f:b7:85:c7:72:d5:86:b0:40:28:
         0a:73:9e:89:45:01:ec:15:79:98:75:2d:71:9f:b9:f9:ad:ec:
         1a:48:6d:69:04:d0:7c:23:6d:dd:ea:61:fd:f9:20:a5:65:eb:
         76:5c:35:14:bf:0d:f3:15:91:f5:cb:cd:e6:e3:f3:bd:74:8d:
         e8:bd:b6:a4:6f:3a:d1:af:2f:2d:13:df:a2:ff:3f:9a:c5:d8:
         9b:68:e7:a6:02:38:52:f8:47:63:54:09:ef:72:4a:96:82:ac:
         db:a8:7a:45:64:c1:b4:34:4b:b7:e1:e3:37:ef:68:16:9a:f0:
         4e:42:07:7f:9c:62:95:2d:d5:a7:3b:a7:3d:e4:2f:37:42:97:
         f6:0a:8c:be:80:0e:68:cd:13:81:ac:09:8e:fb:2e:e6:02:af:
         ea:7f:b1:80:c2:04:be:23:43:35:cc:00:2d:1b:58:3b:26:76:
         7d:42:fc:e5:8d:8f:cc:70:42:f0:44:07:24:e0:a6:ba:71:60:
         1d:8f:d6:75:b1:9d:1c:ec:44:e1:63:3c:55:c3:96:74:a5:d8:
         fb:55:af:1a:cb:d5:06:b8:2d:1b:21:7b:9b:a6:e2:fe:48:c7:
         1b:ae:42:3b:20:08:d9:dc:0f:e0:4d:6a:9c:1a:51:be:dc:a7:
         97:8a:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:14:16 2025 by rpki-client