Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e37302e302f32332d3233203d3e20323633323839.roa
File:                     3137372e3139302e37302e302f32332d3233203d3e20323633323839.roa (raw, json)
Hash identifier:          DQSKoE+j6i6cZNjOyJDd10hn+Okjg2eX8dPsGxJoJY8=
Subject key identifier:   18:3E:52:BB:D7:0E:92:0B:1A:21:E9:CC:14:C1:09:77:0F:E8:77:D3
Certificate issuer:       /CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
Certificate serial:       627135DA51CA56991B4258A8A959A5D7F7EF9750
Authority key identifier: 15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e37302e302f32332d3233203d3e20323633323839.roa
Signing time:             Thu 06 Mar 2025 10:50:17 +0000
ROA not before:           Thu 06 Mar 2025 10:45:17 +0000
ROA not after:            Thu 05 Mar 2026 10:50:17 +0000
asID:                     263289
IP address blocks:        177.190.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl
                          rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 08:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:71:35:da:51:ca:56:99:1b:42:58:a8:a9:59:a5:d7:f7:ef:97:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Validity
            Not Before: Mar  6 10:45:17 2025 GMT
            Not After : Mar  5 10:50:17 2026 GMT
        Subject: CN=183E52BBD70E920B1A21E9CC14C109770FE877D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7b:66:e2:e7:b3:6c:68:b3:fd:d8:31:19:5f:
                    f1:c4:a0:24:08:22:f9:be:ee:2d:2f:55:ce:94:db:
                    e2:1c:3d:f5:6d:02:f0:4e:cf:c5:e4:73:49:55:c9:
                    f6:f6:51:37:c1:fc:d6:ce:a9:00:17:db:a8:c3:63:
                    6b:fa:e0:4c:1d:8b:ac:cf:16:97:a5:f0:12:69:29:
                    15:b7:db:76:77:2b:5b:94:bf:54:15:19:3a:2e:3e:
                    92:0b:3d:0c:40:8a:63:78:35:23:20:2f:30:90:a8:
                    0f:c4:32:fc:0a:29:9c:d6:81:83:9f:20:84:95:3d:
                    7d:94:56:7c:79:f5:8f:61:9d:44:13:2c:22:85:6a:
                    b4:ce:5c:e4:88:57:69:69:59:9d:4c:f9:e7:b7:d8:
                    4e:a1:04:27:9d:19:08:15:8a:94:b9:a8:67:ce:cd:
                    d0:31:90:ba:e6:57:d8:5b:4e:98:ea:1b:97:12:5d:
                    2c:db:b7:f2:c3:99:69:40:e2:a3:fe:8b:94:4d:4b:
                    6a:91:c9:97:4a:65:00:3f:ef:96:ad:05:0e:1b:e5:
                    32:df:09:ad:24:bb:b8:22:5b:64:70:59:7b:29:ab:
                    f4:98:4e:86:bc:47:7e:67:40:1c:74:aa:4d:2c:26:
                    3a:73:9c:29:4b:36:31:b1:58:d0:73:17:82:fb:80:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3E:52:BB:D7:0E:92:0B:1A:21:E9:CC:14:C1:09:77:0F:E8:77:D3
            X509v3 Authority Key Identifier:
                keyid:15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e37302e302f32332d3233203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:d1:7e:fd:25:f3:0f:d4:20:5a:84:be:b8:d6:46:ae:11:
         21:dd:f6:56:ed:b3:cf:8c:02:06:64:9e:45:56:7e:90:99:8d:
         0e:c7:01:a3:ec:7e:65:36:e9:10:b0:d6:cb:26:9d:b6:76:68:
         12:fb:dd:65:94:b6:74:01:18:27:7b:86:55:ec:af:6b:85:a2:
         05:60:9f:5b:7b:61:6c:31:5b:21:db:95:44:13:d6:a8:a1:9d:
         37:5c:01:2e:d9:19:13:43:04:46:aa:ba:7d:04:1d:1e:5c:a4:
         d6:0f:01:18:95:6a:68:aa:fe:ac:55:9a:1e:e8:a6:75:a5:43:
         94:af:fb:c8:2a:9f:d5:5e:de:90:dd:bc:ad:6e:75:7c:1e:75:
         88:58:5b:e3:b9:5e:40:c3:0c:17:d6:fa:2a:69:0b:e3:51:36:
         d4:af:69:32:53:60:dd:9f:28:86:c9:5b:20:30:36:17:16:a3:
         bb:47:16:98:12:c7:46:cf:8f:54:81:be:8e:55:b9:27:e5:29:
         3e:82:9b:9b:34:8a:d4:07:19:ae:d9:49:f8:a8:80:28:f1:b8:
         74:b2:90:cb:81:c2:ea:fd:5d:fe:4c:71:8f:56:66:7f:1e:94:
         d2:0b:1b:d6:87:21:e7:d3:70:17:b2:f0:56:02:36:3e:d4:6f:
         6b:46:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:10:03 2025 by rpki-client