Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37362e302f32322d3332203d3e20323636333934.roa
File:                     3137302e38312e37362e302f32322d3332203d3e20323636333934.roa (raw, json)
Hash identifier:          wvA5Hzn+0u7XENCLypkz0h5GItMUCoBMCPVnh3nV9W4=
Subject key identifier:   AC:B4:F1:5E:5D:BC:A6:A8:15:33:F4:41:01:DA:1F:8F:BE:67:7E:72
Certificate issuer:       /CN=025F1CD695A03927B6C43B9CCE128361E24CC47C
Certificate serial:       1B66889DB0992E7A815DA1EA825488EEA96A8D9F
Authority key identifier: 02:5F:1C:D6:95:A0:39:27:B6:C4:3B:9C:CE:12:83:61:E2:4C:C4:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/025F1CD695A03927B6C43B9CCE128361E24CC47C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37362e302f32322d3332203d3e20323636333934.roa
Signing time:             Thu 07 Nov 2024 12:23:41 +0000
ROA not before:           Thu 07 Nov 2024 12:18:41 +0000
ROA not after:            Thu 06 Nov 2025 12:23:41 +0000
asID:                     266394
IP address blocks:        170.81.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.crl
                          rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/025F1CD695A03927B6C43B9CCE128361E24CC47C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 04:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:66:88:9d:b0:99:2e:7a:81:5d:a1:ea:82:54:88:ee:a9:6a:8d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025F1CD695A03927B6C43B9CCE128361E24CC47C
        Validity
            Not Before: Nov  7 12:18:41 2024 GMT
            Not After : Nov  6 12:23:41 2025 GMT
        Subject: CN=ACB4F15E5DBCA6A81533F44101DA1F8FBE677E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d8:d8:a4:41:fd:62:a7:5a:ca:0b:6f:68:75:
                    7c:21:08:bf:39:4a:3e:3c:79:1f:69:26:50:70:1d:
                    a1:91:6b:73:13:38:79:0f:22:34:31:5b:86:00:46:
                    88:d2:95:5e:1a:44:c3:e4:58:a3:10:e7:f2:5a:84:
                    99:3f:2f:a3:f1:f8:0a:61:e6:86:ab:e8:62:79:e0:
                    9c:b6:a9:12:a9:a0:42:ce:7a:2d:42:ad:cb:5e:aa:
                    55:00:6d:38:c9:be:0c:e6:86:cf:89:9c:80:1f:af:
                    57:2c:f0:4d:b8:11:a1:d9:da:e2:50:a7:27:4b:3a:
                    9b:5f:37:94:9f:c1:e4:8b:5d:f3:ce:08:5f:4f:5d:
                    2f:3a:83:58:67:e1:33:e5:5e:31:35:b2:ad:ed:74:
                    88:6c:f1:61:27:f3:2d:fa:60:b7:87:50:74:c1:88:
                    c3:5e:95:2d:da:bf:68:64:23:f7:65:de:8c:fd:f9:
                    65:2a:13:1d:3e:cb:d6:4e:2b:e0:40:bd:b1:68:9b:
                    51:e2:9e:66:33:ac:e0:03:04:e9:ed:7f:54:96:3c:
                    30:f2:09:1f:52:70:c7:3e:68:b0:cd:bf:89:07:02:
                    d3:5e:e7:b9:6b:77:10:bf:ec:9c:f6:31:66:af:eb:
                    92:50:b2:00:c2:7d:c6:c0:c5:24:62:d9:c6:8d:f8:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B4:F1:5E:5D:BC:A6:A8:15:33:F4:41:01:DA:1F:8F:BE:67:7E:72
            X509v3 Authority Key Identifier:
                keyid:02:5F:1C:D6:95:A0:39:27:B6:C4:3B:9C:CE:12:83:61:E2:4C:C4:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/025F1CD695A03927B6C43B9CCE128361E24CC47C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/025F1CD695A03927B6C43B9CCE128361E24CC47C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37362e302f32322d3332203d3e20323636333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:57:c9:e5:f5:fa:22:b4:7f:c8:6e:a1:6d:bc:39:cd:d9:2f:
         dd:46:40:02:b0:55:02:a8:ab:9e:63:54:f6:d7:95:8a:ca:9d:
         27:49:db:6b:85:e5:29:1b:07:b9:dc:6b:c4:6c:72:d6:f7:dc:
         63:b9:7d:bc:5a:0f:bc:da:b5:e1:56:1d:22:a9:f0:af:76:77:
         5a:ab:d3:f7:b2:57:1c:c6:73:1d:e4:8e:c2:2a:22:ce:41:5a:
         55:71:52:54:67:87:8e:8f:cd:5c:95:f3:0c:4e:a6:1e:7e:0c:
         3e:ee:54:ed:48:e3:60:33:a1:68:56:43:c7:56:f9:b2:c5:aa:
         78:8e:9b:78:46:03:94:fb:0c:32:1f:bb:fc:d6:07:87:03:07:
         c6:1f:23:ec:6a:19:29:c9:a5:05:e3:4e:dc:14:8f:f1:95:a1:
         ad:d5:2a:98:f3:7a:39:91:fd:08:9c:ec:ff:59:69:ea:a8:07:
         33:01:5d:f8:e7:04:b2:2e:7a:ac:45:6f:5c:3a:b0:57:6f:f9:
         e3:16:dc:7e:fc:11:83:a5:2a:ba:26:7a:f3:04:1d:2f:a6:87:
         2d:1d:8c:13:b0:f4:6f:c4:e0:4e:0c:e4:c4:91:c2:2f:99:06:
         a2:a7:d8:80:d4:d4:2d:3a:44:98:55:2f:e1:51:4a:44:66:4a:
         69:a1:d0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:34 2025 by rpki-client