Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/3137302e302e3139322e302f32322d3332203d3e20323636323939.roa
File:                     3137302e302e3139322e302f32322d3332203d3e20323636323939.roa (raw, json)
Hash identifier:          30DhOqm2M90Ds5s+OzTCD+5M9ukc+Ih0rydkINiYO4M=
Subject key identifier:   0F:4E:55:05:3A:82:89:A1:AF:F0:F5:AC:A5:5A:7C:86:2C:CA:E5:29
Certificate issuer:       /CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1
Certificate serial:       178C7B0FF7475A460EAE7F90CA35DAC978B5D262
Authority key identifier: 31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/3137302e302e3139322e302f32322d3332203d3e20323636323939.roa
Signing time:             Fri 23 May 2025 21:52:08 +0000
ROA not before:           Fri 23 May 2025 21:47:08 +0000
ROA not after:            Fri 22 May 2026 21:52:08 +0000
asID:                     266299
IP address blocks:        170.0.192.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl
                          rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 22:58:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8c:7b:0f:f7:47:5a:46:0e:ae:7f:90:ca:35:da:c9:78:b5:d2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1
        Validity
            Not Before: May 23 21:47:08 2025 GMT
            Not After : May 22 21:52:08 2026 GMT
        Subject: CN=0F4E55053A8289A1AFF0F5ACA55A7C862CCAE529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:0b:53:a3:be:a7:16:fa:ef:d1:06:21:9a:
                    a4:55:fe:44:a7:cd:d1:74:bb:c9:8f:f4:35:08:9f:
                    c0:76:bf:9d:1b:b6:a4:2f:0e:a6:b4:f9:3d:aa:eb:
                    b7:0f:9f:52:24:4e:0e:65:c5:fe:f3:23:89:a7:15:
                    55:f9:2c:c0:11:da:75:04:ec:a8:9e:4e:2c:c3:80:
                    4f:5a:de:a8:8d:2b:2e:ae:b9:1b:98:f1:88:b7:e6:
                    2d:ff:ba:08:55:97:82:23:5e:2c:cb:dd:be:34:90:
                    e5:8f:3b:59:6c:4d:28:2a:59:66:27:28:70:3f:5e:
                    f3:e6:6e:b6:95:a8:46:0f:36:00:c8:d5:99:a4:77:
                    e8:d6:90:0d:49:05:51:6f:5a:47:2e:54:a4:36:41:
                    9d:23:3d:a0:6e:92:ff:47:f3:ca:ac:f8:2f:66:0c:
                    7a:b0:a8:5f:fa:66:fb:32:53:61:a6:46:89:9e:61:
                    be:94:1a:9e:45:a3:18:b8:0a:8f:64:87:b8:e3:4d:
                    97:88:31:7c:95:fb:cb:26:41:c4:e3:00:11:8e:c4:
                    58:00:9d:cc:e1:39:45:3c:d5:a0:28:27:d1:5a:37:
                    89:b7:b3:6d:a6:71:07:25:30:1c:b5:d1:ff:5e:26:
                    50:15:2f:7d:8f:c2:c0:02:c0:bd:57:6f:e5:c5:95:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4E:55:05:3A:82:89:A1:AF:F0:F5:AC:A5:5A:7C:86:2C:CA:E5:29
            X509v3 Authority Key Identifier:
                keyid:31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/3137302e302e3139322e302f32322d3332203d3e20323636323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:d6:90:e6:32:cf:78:bb:b1:70:78:4c:14:9f:3f:d5:30:03:
         e7:71:04:6b:17:ec:a8:6c:0f:ad:9c:a8:b0:33:ad:2f:6c:a6:
         7b:13:41:43:45:53:48:8b:de:17:63:1e:e9:18:90:68:ca:db:
         85:c0:d3:86:a7:68:b8:3f:2c:18:14:16:fa:f1:9a:2a:43:02:
         31:4c:84:2e:9b:b7:80:4b:bb:ca:b8:81:ae:c2:c5:92:25:74:
         17:10:83:6e:3d:4b:e3:24:e3:28:fd:7b:de:49:e2:48:79:6d:
         ad:b7:76:7b:2a:61:3d:37:70:28:32:a5:30:28:c7:a2:49:17:
         d6:4c:93:6e:d7:25:80:0d:fe:17:ca:47:3c:a7:aa:83:f3:d7:
         5e:08:2c:e6:d0:1b:86:e8:33:46:e9:a8:d5:31:49:b7:d2:5a:
         77:f4:ca:14:02:e9:72:3a:98:5e:3e:5e:48:5c:e6:e6:95:cf:
         6b:b2:34:99:32:57:3d:1c:6f:d3:7a:84:3e:3a:10:52:76:8e:
         c5:ee:70:e1:62:db:3a:b2:e2:bb:04:d5:47:8c:5c:22:67:4d:
         f2:b4:55:84:67:82:1c:15:43:ce:60:28:00:c4:5a:9c:58:30:
         f6:13:da:0c:4e:fa:10:3d:22:77:dc:e7:d9:d6:73:40:a1:e6:
         9d:53:7d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:02:47 2025 by rpki-client