Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3137372e39332e3132302e302f32312d3234203d3e203533303436.roa
File:                     3137372e39332e3132302e302f32312d3234203d3e203533303436.roa (raw, json)
Hash identifier:          eMo61bvQPDVk8NOg9Q7MaiGFibYYK+jU1Bz/uzZYxvM=
Subject key identifier:   2A:BC:E1:44:BE:D7:D4:C1:6D:DD:22:53:DE:4C:8E:82:76:70:86:18
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       25673DED225FE4E5F36BE6105A134C2AA9FA7BA4
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3137372e39332e3132302e302f32312d3234203d3e203533303436.roa
Signing time:             Tue 06 May 2025 15:18:52 +0000
ROA not before:           Tue 06 May 2025 15:13:52 +0000
ROA not after:            Tue 05 May 2026 15:18:52 +0000
asID:                     53046
IP address blocks:        177.93.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 14:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:67:3d:ed:22:5f:e4:e5:f3:6b:e6:10:5a:13:4c:2a:a9:fa:7b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: May  6 15:13:52 2025 GMT
            Not After : May  5 15:18:52 2026 GMT
        Subject: CN=2ABCE144BED7D4C16DDD2253DE4C8E8276708618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:ab:df:32:0f:38:13:41:22:c0:9b:0d:d5:
                    bd:fa:04:d0:20:81:ca:44:9b:7b:13:e3:19:c3:74:
                    69:eb:e9:e5:98:2f:ab:46:f1:66:84:4c:a2:d0:b6:
                    5c:be:1f:92:67:41:9d:30:c6:cb:3c:63:54:ce:6f:
                    96:af:4d:77:48:7b:c7:e0:3f:69:a6:10:d9:63:03:
                    c9:fb:99:76:08:60:05:1b:91:b3:dd:29:6b:ce:50:
                    37:24:7a:6c:6f:f2:7d:22:b5:ca:63:85:ac:d7:7d:
                    9b:bd:fd:e1:dd:dd:d5:bc:92:10:5b:95:65:39:9a:
                    1a:44:88:8b:76:10:69:72:b4:60:9c:c1:85:e4:c8:
                    cf:18:5f:62:b1:9b:82:b1:6e:47:33:a7:96:e2:e5:
                    49:27:3e:e6:1c:39:29:8b:a1:76:21:5b:aa:bc:9d:
                    c0:74:04:5a:78:19:1c:65:0d:8e:50:11:be:4f:d8:
                    95:75:68:03:22:56:23:0e:4a:b6:f3:55:a6:6c:34:
                    dc:c0:cb:7a:3c:cc:6d:a2:7c:c4:9f:f1:b2:d3:5d:
                    41:5a:0c:71:c6:50:bc:a4:ed:c4:f4:58:0f:e9:12:
                    82:d2:bb:74:9d:da:c4:77:db:c0:04:9f:45:88:a6:
                    62:26:3b:54:51:c2:55:cf:9e:9a:55:8f:40:bf:cd:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BC:E1:44:BE:D7:D4:C1:6D:DD:22:53:DE:4C:8E:82:76:70:86:18
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3137372e39332e3132302e302f32312d3234203d3e203533303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:ef:09:56:96:c5:bc:01:b9:5c:5c:5d:91:02:4b:54:d4:6c:
         94:83:ea:18:1c:26:4f:08:b3:52:11:22:21:1e:eb:ad:5e:d8:
         fd:33:e9:ef:6b:ec:23:f6:86:72:b6:9e:bb:bb:8f:d5:55:c7:
         81:b5:a1:a2:82:41:12:6d:4a:d7:b6:20:3c:bb:39:82:83:52:
         8c:1c:ef:15:ef:c1:cb:c9:7d:e5:44:30:2c:ef:d1:17:a9:d1:
         e2:16:8a:80:e6:e6:1b:2e:e0:09:33:28:2a:fd:ed:47:a6:bd:
         7f:19:90:a6:d7:8c:a8:27:e2:13:f4:fd:a0:00:64:2e:35:33:
         7b:8c:10:08:13:93:4b:5d:48:87:82:ac:f5:02:65:d2:77:96:
         c1:ba:b4:c3:34:d9:fc:3f:72:33:82:95:02:87:10:fa:1c:81:
         0a:f0:73:c2:1c:99:5c:0a:b4:69:c0:47:a9:ce:ba:b1:65:89:
         4c:5a:81:6a:2a:49:92:38:bf:a3:24:ba:48:f4:f5:0e:06:b7:
         38:ec:9c:f1:62:bb:f8:83:60:68:79:24:3d:7e:a4:43:94:eb:
         04:c0:ee:94:59:51:8d:14:69:77:56:4e:86:17:39:34:ad:b2:
         54:42:a0:e1:90:34:6f:64:39:59:c4:68:e4:22:28:8a:00:4f:
         72:aa:1b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:00:18 2025 by rpki-client