Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3137302e302f32342d3234203d3e20323634353039.roa
File:                     3133322e3235352e3137302e302f32342d3234203d3e20323634353039.roa (raw, json)
Hash identifier:          jy5e2JKhr+xjwtW/7RqncMCkR8HwhmvA7DzjDB+d/yI=
Subject key identifier:   63:F9:1E:D3:25:D7:4A:70:86:79:01:30:43:DC:9A:AE:8C:0B:40:A5
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       0E3F794344CC790CB61C238F19FF54B57025E826
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3137302e302f32342d3234203d3e20323634353039.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     264509
IP address blocks:        132.255.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:3f:79:43:44:cc:79:0c:b6:1c:23:8f:19:ff:54:b5:70:25:e8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:c3:7d:c3:3d:21:0b:10:13:5a:87:db:63:
                    66:c1:44:a8:97:90:cd:22:77:7a:c4:80:fc:d1:e4:
                    74:4b:0d:c3:86:6d:58:29:d0:14:96:80:18:3b:47:
                    65:7b:1a:42:7c:9d:27:05:48:f9:41:70:1a:91:51:
                    b8:a8:af:21:44:4d:0c:f7:be:10:64:f0:62:36:ba:
                    36:1e:30:26:4a:16:66:d6:e7:e3:27:6d:b7:7f:e1:
                    8a:c5:d9:a2:b6:b0:07:e5:f9:0e:83:60:f6:fb:27:
                    1d:17:3a:cf:9e:97:68:f3:6e:be:66:8f:c1:e1:40:
                    12:6c:88:15:93:fc:6d:49:97:0c:e2:dc:31:83:58:
                    4c:56:69:d8:b1:8a:33:a8:5f:b0:63:f3:0e:a8:6b:
                    f4:50:d3:92:dc:38:61:cb:93:07:cc:5d:34:f3:36:
                    63:39:7d:25:81:aa:13:94:9a:da:d1:84:34:28:17:
                    52:6b:88:85:af:41:ba:5e:a1:af:c4:7d:4c:31:2e:
                    82:f6:15:eb:fd:35:99:d1:eb:82:d6:43:cc:a2:b1:
                    91:e2:c0:67:71:49:8f:f2:b9:45:fe:4e:b6:8f:ae:
                    bc:c2:e1:02:23:49:6e:65:7e:69:0b:f1:6a:01:52:
                    1f:93:27:1a:d7:5b:c9:f8:4a:3a:c1:39:5c:d0:0f:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F9:1E:D3:25:D7:4A:70:86:79:01:30:43:DC:9A:AE:8C:0B:40:A5
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3137302e302f32342d3234203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:14:b9:bc:b2:f1:7d:80:6d:f2:4c:7b:1b:1f:4a:8e:35:98:
         ab:05:b4:f1:8c:5b:c6:f1:00:6a:e5:35:41:f5:4c:36:cb:21:
         55:d8:00:aa:9f:be:af:b4:08:aa:31:72:05:25:5f:87:2f:c8:
         eb:28:b9:24:af:52:32:86:bd:36:92:b3:93:a7:ad:30:f0:4b:
         27:9d:b9:89:86:2a:e6:ef:37:00:c2:28:1d:68:1d:52:0b:a7:
         d0:f9:b8:05:67:44:11:4b:5e:ae:d5:4e:fc:85:0b:fa:b5:c5:
         ad:e2:25:3b:d8:2f:71:16:cc:5f:ab:6d:21:81:91:78:32:aa:
         5c:21:14:e9:cf:b6:e9:0c:4d:80:d2:81:85:a6:47:a6:fa:22:
         8d:79:6e:89:66:13:41:72:a8:2b:08:3e:5f:e1:a2:ca:4e:8f:
         f4:be:ec:10:e8:b8:e7:c6:fe:da:af:74:d9:82:d4:24:f4:86:
         76:75:d0:9f:e5:fb:ac:a8:45:f4:1c:c0:b3:1a:61:e4:46:27:
         87:27:a0:63:d0:a8:90:3b:87:2b:06:3d:33:14:f5:1a:ff:09:
         67:8d:c8:e1:39:1f:9a:43:76:30:aa:e6:70:e1:dc:fe:31:12:
         cb:ea:9a:2d:c8:1b:72:98:ec:44:73:5d:ab:fc:bd:46:78:eb:
         29:96:9c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:12 2025 by rpki-client