Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa
File:                     3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa (raw, json)
Hash identifier:          DVXwFyqN0imeQTPx6R3D3m6zemRSF6lzPAXT5hVEkQc=
Subject key identifier:   87:C9:D2:40:EA:FD:DA:B7:6B:70:3C:21:B8:D9:BF:9E:11:1B:05:44
Certificate issuer:       /CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
Certificate serial:       3B0084A5CAB577FFF067424FCA8C90E43EBCF666
Authority key identifier: E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa
Signing time:             Thu 06 Mar 2025 04:01:11 +0000
ROA not before:           Thu 06 Mar 2025 03:56:11 +0000
ROA not after:            Thu 05 Mar 2026 04:01:11 +0000
asID:                     265036
IP address blocks:        170.150.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl
                          rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 10:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:00:84:a5:ca:b5:77:ff:f0:67:42:4f:ca:8c:90:e4:3e:bc:f6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
        Validity
            Not Before: Mar  6 03:56:11 2025 GMT
            Not After : Mar  5 04:01:11 2026 GMT
        Subject: CN=87C9D240EAFDDAB76B703C21B8D9BF9E111B0544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:45:bf:6e:1e:3f:15:a4:79:a1:29:ab:1f:
                    a5:f0:2d:8f:38:db:9e:00:ee:3c:32:8f:ab:2f:ca:
                    eb:49:28:af:5b:58:fc:eb:a5:69:f4:89:27:a3:07:
                    8e:a9:52:6a:59:f2:6c:be:0e:8f:1f:c8:03:18:a7:
                    10:7f:46:63:78:5f:8f:1b:67:a3:72:1c:58:67:12:
                    ee:1d:51:2b:2c:63:4c:ad:2b:42:d3:8e:58:85:cc:
                    2f:17:e0:31:60:53:a0:32:1f:46:96:aa:ed:2e:70:
                    f5:ba:c2:43:13:0d:f6:15:ac:ec:cb:d0:70:c2:6a:
                    74:0b:cd:6d:8b:c3:da:c0:4c:43:79:e4:6c:1f:7a:
                    74:b9:ee:f0:8a:82:5c:17:19:6e:0e:bc:2f:5a:0e:
                    a1:f1:cc:ca:a9:d4:91:a5:6b:ff:d5:23:54:3b:91:
                    5e:ee:d9:ae:40:14:72:10:73:8c:81:3f:ea:00:9c:
                    7a:fd:d0:18:ac:9a:38:a9:63:d6:ad:61:10:9e:7c:
                    f0:59:56:f2:6e:fc:c4:e7:83:99:41:64:04:de:93:
                    e4:1a:be:56:03:a6:ed:0a:61:21:90:6b:5d:1b:c6:
                    30:38:d4:e5:f4:dc:ca:46:2e:c5:6f:6b:2e:67:d6:
                    85:3d:7f:cb:bd:39:aa:b6:fa:ed:68:e0:3e:24:20:
                    c9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C9:D2:40:EA:FD:DA:B7:6B:70:3C:21:B8:D9:BF:9E:11:1B:05:44
            X509v3 Authority Key Identifier:
                keyid:E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:d8:9f:dc:1e:a1:44:f3:c0:93:4f:9d:3a:9a:82:99:22:b0:
         88:07:fe:b1:18:dc:cd:32:66:a1:4c:09:e6:c1:b2:35:20:02:
         95:fe:1d:86:0d:39:e3:7a:cc:1c:c8:19:34:dd:a1:77:9c:94:
         c3:84:cd:d4:0d:7a:9d:e1:94:36:be:aa:13:81:3e:c4:92:58:
         7b:19:3c:ce:4d:f1:33:4d:c0:63:0f:10:d6:69:8e:16:ff:93:
         36:2f:53:bc:0d:ac:82:15:33:55:b3:79:26:1a:24:03:ad:4a:
         4f:ac:09:85:f7:54:25:26:66:d3:94:97:99:44:c1:1f:29:b3:
         9f:ab:e0:1e:e0:58:d7:93:f8:81:7c:4c:50:af:a0:ce:30:42:
         d6:f5:6d:bc:68:f2:1f:0c:a3:08:27:53:e8:da:46:87:27:cc:
         72:7a:fe:d9:9a:a0:b9:ad:58:ce:34:2c:de:49:36:be:62:b9:
         ac:ed:b2:a9:d1:b4:9c:a7:fc:c9:f3:23:18:38:b0:ca:2a:27:
         72:2c:38:7d:4c:2a:22:34:15:59:a2:3b:76:d3:20:f3:43:fe:
         1c:86:0f:3b:07:76:63:0c:30:c8:98:88:17:e1:0b:28:df:af:
         2e:55:1e:a3:0b:2f:87:4a:28:cf:30:62:e2:19:46:ab:af:df:
         41:40:12:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:51:33 2025 by rpki-client