Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/3137372e38342e3134342e302f32312d3234203d3e20323632353837.roa
File:                     3137372e38342e3134342e302f32312d3234203d3e20323632353837.roa (raw, json)
Hash identifier:          RY1AIbithrsrsURKGh1Xjm652xeOUscdtJWwf3Rh5fY=
Subject key identifier:   4F:32:6B:A1:01:7B:E7:26:75:8E:9D:C9:00:C2:76:06:54:18:04:D9
Certificate issuer:       /CN=5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569
Certificate serial:       2CC7B7589110AF4CE3320F061AA5439D668C8D92
Authority key identifier: 5F:D4:E6:E1:ED:FB:75:29:B3:E6:62:21:5D:DD:A6:DA:02:6A:25:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/3137372e38342e3134342e302f32312d3234203d3e20323632353837.roa
Signing time:             Tue 29 Apr 2025 13:40:38 +0000
ROA not before:           Tue 29 Apr 2025 13:35:38 +0000
ROA not after:            Tue 28 Apr 2026 13:40:38 +0000
asID:                     262587
IP address blocks:        177.84.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.crl
                          rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 05:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c7:b7:58:91:10:af:4c:e3:32:0f:06:1a:a5:43:9d:66:8c:8d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569
        Validity
            Not Before: Apr 29 13:35:38 2025 GMT
            Not After : Apr 28 13:40:38 2026 GMT
        Subject: CN=4F326BA1017BE726758E9DC900C27606541804D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:85:32:a5:eb:2e:d6:bf:9e:14:1e:ed:c4:4c:
                    08:1e:d2:0d:38:19:69:39:64:7e:5c:2b:a9:3f:bd:
                    b9:bc:25:6a:82:10:00:5d:5a:33:97:92:f3:f1:04:
                    7d:9b:d0:fe:8a:87:2c:a4:b9:4f:80:6b:cd:4f:da:
                    22:4c:90:fb:05:e7:4a:c5:0c:9a:e4:57:bb:aa:d5:
                    fb:48:a1:05:b0:79:cd:03:7c:86:d5:e1:e9:ba:00:
                    3a:3b:71:ef:3d:39:76:ec:a0:94:d8:75:28:bc:dd:
                    ea:3b:1c:36:b5:2c:17:68:3e:8b:d2:7f:3b:f0:c2:
                    92:3e:df:70:2a:6c:66:c0:b4:b9:8c:9a:68:05:8f:
                    fb:6f:3c:c7:1b:37:d8:b6:33:9f:7e:ec:3d:cc:ae:
                    14:06:b2:65:7f:b4:cc:58:46:58:0c:0f:60:d8:67:
                    bf:9a:cb:d7:09:07:db:4b:a6:88:cf:b2:c2:e2:68:
                    b6:9f:3c:90:d3:da:f3:9a:3f:82:a3:44:53:4a:10:
                    36:f2:57:8d:27:a5:9c:23:30:87:3a:c5:21:5f:76:
                    fd:a0:04:03:d3:33:e6:44:a8:ca:f6:ef:69:f8:64:
                    1c:eb:1d:75:e8:59:83:c0:ed:85:63:00:98:89:16:
                    e4:3e:95:41:c3:92:f8:f8:f5:85:06:06:7f:06:a6:
                    14:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:32:6B:A1:01:7B:E7:26:75:8E:9D:C9:00:C2:76:06:54:18:04:D9
            X509v3 Authority Key Identifier:
                keyid:5F:D4:E6:E1:ED:FB:75:29:B3:E6:62:21:5D:DD:A6:DA:02:6A:25:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD4E6E1EDFB7529B3E662215DDDA6DA026A2569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/3137372e38342e3134342e302f32312d3234203d3e20323632353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b5:91:69:1e:e2:6e:93:db:28:03:37:2e:05:91:41:ff:8d:b0:
         75:03:0a:92:a6:60:dd:4b:cd:a7:34:6a:13:9e:41:55:9c:88:
         e5:f3:42:c1:76:06:3e:2a:d9:c3:21:b8:fa:1d:3e:f8:31:8b:
         00:c6:fd:bf:fb:93:59:c4:37:83:92:90:6f:c9:bf:7e:53:c4:
         95:07:75:c7:a8:35:9c:7e:de:4f:14:90:d3:0d:46:f0:38:83:
         aa:ad:4b:bb:12:80:e2:5d:1f:48:44:a2:7a:24:98:8d:68:dc:
         b1:d2:e3:6e:d4:7e:49:08:0e:4d:4e:22:af:d6:1e:6f:28:c9:
         5e:86:40:0e:9c:7a:b7:e9:94:25:46:c8:67:b1:1a:19:09:2a:
         9a:7d:a2:01:b8:3e:44:95:15:53:d7:47:92:55:50:8f:70:ca:
         f9:01:e3:7b:5c:dc:5e:96:15:dc:4b:42:87:bd:6e:50:cf:ed:
         77:06:4f:94:f4:a5:aa:b3:1c:e1:23:54:a4:1c:37:1e:2a:94:
         eb:20:c8:2f:77:a2:8a:4f:21:b3:54:8b:26:5e:32:35:95:a0:
         7b:64:46:a7:75:6b:23:c5:6b:2c:28:d3:e7:4c:42:98:b2:4e:
         a1:9f:c4:cc:fa:9b:ea:90:ee:b4:db:22:82:a4:4e:2a:dc:cf:
         cf:c6:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 13:05:09 2025 by rpki-client