Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137302e3235342e382e302f32322d3234203d3e203532353733.roa
File:                     3137302e3235342e382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          bXgZVf4Cm4+3inOBUU8FHt8TflklWn+ZzQRP90/+/hg=
Subject key identifier:   0E:C1:4A:46:81:B3:F4:C5:BE:7B:66:60:0F:3C:92:40:2E:80:30:F5
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       3CD1170ECC8A0E85D7FE23AA1E575DCFBEA3347E
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137302e3235342e382e302f32322d3234203d3e203532353733.roa
Signing time:             Sat 31 May 2025 14:17:06 +0000
ROA not before:           Sat 31 May 2025 14:12:06 +0000
ROA not after:            Sat 30 May 2026 14:17:06 +0000
asID:                     52573
IP address blocks:        170.254.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 16:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d1:17:0e:cc:8a:0e:85:d7:fe:23:aa:1e:57:5d:cf:be:a3:34:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: May 31 14:12:06 2025 GMT
            Not After : May 30 14:17:06 2026 GMT
        Subject: CN=0EC14A4681B3F4C5BE7B66600F3C92402E8030F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a5:ed:a5:80:1d:35:fe:f3:98:0b:d0:7e:90:
                    ef:a5:7c:67:06:85:50:b5:3f:8d:e7:37:8a:8c:71:
                    ef:d9:c2:ec:d0:92:48:2f:8b:12:c2:45:bf:5b:ab:
                    af:84:5e:f1:8c:80:2c:38:28:65:57:b3:fb:51:4e:
                    35:b0:5d:a0:81:f1:e6:e0:7b:d7:1c:3c:33:c4:af:
                    ed:5e:ab:92:da:bb:8e:98:96:48:4d:42:d4:db:94:
                    3c:cb:71:f1:4c:8c:ee:e6:fb:53:2c:56:d9:f9:e4:
                    fb:73:02:db:52:84:04:f8:f9:22:6c:b3:9c:be:db:
                    8b:f9:47:66:04:3c:84:12:f5:19:92:f6:db:67:68:
                    8b:74:02:4c:4c:e2:93:9f:94:48:2f:39:e7:8d:81:
                    bc:58:45:e2:6a:7e:75:76:3c:02:02:28:48:04:01:
                    07:72:72:bd:76:75:63:41:84:ba:1a:a4:de:74:45:
                    46:33:5b:2a:8a:3f:3d:9c:5b:2a:a6:1d:b6:06:06:
                    26:45:01:b1:c9:d5:cd:61:2c:ec:5e:ff:02:c5:7b:
                    7f:06:57:91:15:af:c5:5e:f6:c3:49:a1:82:43:21:
                    f0:67:11:8b:07:d5:91:b3:29:71:fc:04:22:7f:bd:
                    2b:14:9c:61:6d:fc:fa:61:05:d6:ce:70:64:74:ea:
                    f3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C1:4A:46:81:B3:F4:C5:BE:7B:66:60:0F:3C:92:40:2E:80:30:F5
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3137302e3235342e382e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:cc:ec:16:a3:9e:45:93:a8:77:35:45:db:46:bc:f6:8f:c0:
         bf:9b:a5:79:16:28:df:27:87:f0:26:4b:a0:48:c1:06:e1:bc:
         2e:54:d4:32:29:c5:3c:54:c3:68:06:2a:e7:c1:c3:d4:42:a8:
         4a:77:9d:0e:a9:87:93:3c:82:e3:83:64:22:a3:90:89:0e:f8:
         50:42:cc:ab:55:60:94:29:03:2b:0f:04:f6:6d:7d:a3:dd:9c:
         bb:27:30:d9:0c:f0:55:32:0b:45:74:47:8c:75:b1:42:93:79:
         33:ee:ba:9d:b9:53:a2:18:7c:d3:32:f7:7d:1a:f8:1d:ab:3d:
         77:4e:c2:45:39:18:d3:01:77:f1:ae:f4:c4:ab:21:a4:d4:cc:
         5d:43:9f:33:43:0b:32:c0:fe:93:47:75:00:cf:11:f3:68:35:
         81:55:a6:b0:34:98:83:ed:dc:32:fc:f2:6d:a4:40:94:ee:26:
         ee:c0:2b:5e:c6:44:32:19:f5:46:be:0f:99:bb:00:c9:6b:8b:
         7d:f9:5b:81:80:fc:61:fa:03:9a:a8:78:f9:5a:02:f3:36:50:
         b5:1b:79:38:d1:54:88:7b:4c:e2:a8:ab:cb:3b:8a:ac:72:63:
         b1:d8:8e:f5:cb:c9:7d:dc:73:14:d5:d5:77:03:81:47:7d:3a:
         ef:fe:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:17:08 2025 by rpki-client