Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32332d3233203d3e20323636333432.roa
File:                     3137302e3233392e38302e302f32332d3233203d3e20323636333432.roa (raw, json)
Hash identifier:          ff4TKHTYIMFyhef+iIXqE6pprudvKt52QDBVGmfMiFk=
Subject key identifier:   32:59:48:61:C3:BB:54:53:51:A7:6D:C2:C3:C2:A0:E2:AE:EF:05:4A
Certificate issuer:       /CN=F6088D67AA9EAECE20D46E4D20E46A3447420A58
Certificate serial:       348DBCFCD07E1C0763DE0BE6CA1042A154A8A259
Authority key identifier: F6:08:8D:67:AA:9E:AE:CE:20:D4:6E:4D:20:E4:6A:34:47:42:0A:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32332d3233203d3e20323636333432.roa
Signing time:             Wed 21 May 2025 19:42:26 +0000
ROA not before:           Wed 21 May 2025 19:37:26 +0000
ROA not after:            Wed 20 May 2026 19:42:26 +0000
asID:                     266342
IP address blocks:        170.239.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.crl
                          rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 09:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8d:bc:fc:d0:7e:1c:07:63:de:0b:e6:ca:10:42:a1:54:a8:a2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6088D67AA9EAECE20D46E4D20E46A3447420A58
        Validity
            Not Before: May 21 19:37:26 2025 GMT
            Not After : May 20 19:42:26 2026 GMT
        Subject: CN=32594861C3BB545351A76DC2C3C2A0E2AEEF054A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4a:ea:d4:66:44:58:9c:b2:4c:69:5a:99:30:
                    06:7c:08:12:2d:90:90:1c:b7:c8:ee:a8:89:e4:46:
                    9f:66:51:9c:61:57:c4:f7:4b:d8:81:b5:79:50:ad:
                    18:3f:13:d2:96:39:20:c9:33:a1:7f:37:65:c4:bb:
                    4f:f4:d2:e9:dd:06:ce:c8:2c:2e:60:aa:c1:c4:ce:
                    2c:05:4d:89:12:55:2b:35:3e:a6:df:44:56:1a:f8:
                    8f:b3:86:08:80:ae:67:01:4f:17:d7:92:48:36:29:
                    58:fe:62:f1:a1:f9:be:e3:ee:71:85:34:14:9e:4e:
                    0a:19:5f:06:21:00:25:24:c7:6d:94:b3:fc:b6:99:
                    de:bf:5d:3d:42:f1:d7:f4:86:87:33:5f:92:06:36:
                    ce:fa:f6:f0:54:7d:f1:8b:f5:19:ba:0b:cf:2f:e7:
                    ca:7c:ce:e4:01:81:68:b5:93:f8:03:d2:38:fd:57:
                    97:46:99:5a:d4:7c:67:f3:7f:a0:b4:d2:26:85:9f:
                    6e:b1:f8:99:02:3e:ae:1d:96:aa:31:64:ca:d2:81:
                    f2:54:c3:a7:92:14:d4:2a:c6:8f:8d:e6:54:ce:89:
                    ce:ad:a1:67:21:86:32:a4:ec:b4:47:bd:9c:84:47:
                    fa:59:65:c7:16:9e:02:c5:69:ae:38:34:86:b9:51:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:59:48:61:C3:BB:54:53:51:A7:6D:C2:C3:C2:A0:E2:AE:EF:05:4A
            X509v3 Authority Key Identifier:
                keyid:F6:08:8D:67:AA:9E:AE:CE:20:D4:6E:4D:20:E4:6A:34:47:42:0A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32332d3233203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:2d:81:f7:9c:8e:35:fa:48:c8:9e:01:7d:01:eb:8a:dc:49:
         5d:43:bc:81:6f:5a:c0:c1:85:73:77:74:bd:19:a0:4a:c9:1a:
         98:9f:9d:bf:ab:d4:36:52:3b:98:cc:d7:dc:28:bc:96:3f:ef:
         12:e8:0e:27:bd:b6:37:8b:1f:76:01:eb:d4:ea:c9:0c:77:55:
         7a:35:df:2e:f6:5c:31:e2:5b:84:97:37:3e:1a:61:6e:e4:8c:
         5e:f8:54:ba:91:32:aa:ad:58:05:de:50:49:52:72:d3:0e:af:
         62:bc:97:06:b0:cb:46:ca:8b:0b:f5:5b:62:d0:3f:48:f8:7e:
         f7:36:92:5a:3d:a7:ee:1a:59:40:27:73:85:93:87:8d:ac:d4:
         aa:f7:44:29:ff:3f:9b:5e:cf:0a:d2:1a:b4:b2:42:fa:56:60:
         c9:40:8c:50:74:0e:b4:23:94:48:09:34:6d:c6:2d:69:48:05:
         7d:e5:01:8f:c1:57:f6:70:7f:44:1d:b8:8e:0e:64:d2:b6:ef:
         4c:58:59:20:39:ec:2e:27:47:43:8c:59:38:a2:01:0e:9c:b2:
         ca:7f:98:13:bb:70:94:29:93:8d:5b:81:4c:d0:b6:6c:b9:7e:
         09:ec:96:c1:b1:ab:05:44:5f:cd:f0:44:bf:88:55:e3:54:42:
         b0:2a:32:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:07:08 2025 by rpki-client