Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/3137302e38342e3139362e302f32322d3332203d3e20323635303138.roa
File:                     3137302e38342e3139362e302f32322d3332203d3e20323635303138.roa (raw, json)
Hash identifier:          GMqVz+pNv4jlVq8AM/MysXTepHhSdbVZyc7Np+Ty+wo=
Subject key identifier:   89:05:55:42:DC:FC:04:8F:F1:1D:E8:97:FA:85:41:26:33:1A:BE:C9
Certificate issuer:       /CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14
Certificate serial:       48B82335ED68505599A9DB74DEFD5EBF0FE41075
Authority key identifier: 1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/3137302e38342e3139362e302f32322d3332203d3e20323635303138.roa
Signing time:             Wed 16 Apr 2025 10:35:01 +0000
ROA not before:           Wed 16 Apr 2025 10:30:01 +0000
ROA not after:            Wed 15 Apr 2026 10:35:01 +0000
asID:                     265018
IP address blocks:        170.84.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl
                          rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b8:23:35:ed:68:50:55:99:a9:db:74:de:fd:5e:bf:0f:e4:10:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14
        Validity
            Not Before: Apr 16 10:30:01 2025 GMT
            Not After : Apr 15 10:35:01 2026 GMT
        Subject: CN=89055542DCFC048FF11DE897FA854126331ABEC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:66:e2:18:24:6a:0e:17:ec:5b:fc:1c:17:
                    d2:be:d6:98:f4:ab:4d:c5:e8:21:c4:b3:8e:4d:af:
                    c2:69:5d:01:1b:ad:d2:77:20:67:44:c1:9c:ab:c6:
                    a7:c8:47:67:11:9b:f0:73:ce:68:d1:82:c5:1b:a1:
                    a9:d1:6e:99:3b:6c:65:cb:61:57:6a:89:54:59:12:
                    f7:ce:26:ff:53:d1:f9:15:61:3f:01:95:f6:86:cd:
                    0f:ba:b4:4a:e2:72:bb:5f:89:57:d8:de:2b:6c:db:
                    b8:ad:e8:97:8b:c9:99:a6:c0:ca:01:6a:f3:25:55:
                    5e:18:6e:0d:73:8f:7d:c7:d5:74:6c:c9:4e:fc:2a:
                    f2:17:b3:f6:c5:bc:c8:36:54:85:ee:66:69:d9:10:
                    75:6b:f4:64:f5:1b:ed:69:2b:70:65:2e:4d:0d:6a:
                    79:c9:a2:ce:3f:c8:b1:b4:8f:47:f3:15:2a:68:d8:
                    e8:bc:e5:45:2b:54:dc:35:01:c8:0a:5b:30:12:f0:
                    13:a5:fd:e1:95:0a:9d:6e:84:01:29:6a:fd:c4:51:
                    c6:76:9f:e9:c4:0a:16:a1:71:92:4c:39:4b:5f:ac:
                    65:5f:3c:8d:cf:e5:95:cf:2c:53:1b:d4:42:15:ff:
                    0a:71:c9:f8:d9:13:ca:34:f2:8f:b0:ad:22:e9:d2:
                    3b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:05:55:42:DC:FC:04:8F:F1:1D:E8:97:FA:85:41:26:33:1A:BE:C9
            X509v3 Authority Key Identifier:
                keyid:1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/3137302e38342e3139362e302f32322d3332203d3e20323635303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:0f:4b:4f:1e:37:11:a5:20:2e:09:72:a9:8d:4b:41:12:62:
         08:19:b3:28:48:85:50:df:40:d0:80:22:57:25:82:42:ee:2e:
         7d:2e:8d:dc:40:8a:d2:0a:6e:97:f4:d7:76:78:52:4f:f0:c7:
         5a:27:db:54:8b:d0:8c:01:ab:8f:16:a0:e7:f0:a3:12:7c:bb:
         6a:57:a0:e0:06:92:91:27:47:f8:b5:31:ed:1a:d1:87:a8:33:
         39:19:29:f5:b5:7e:78:05:5d:a7:e6:fe:af:aa:7b:7a:c4:65:
         a7:30:a5:8a:16:81:e0:38:3c:81:a8:ca:9b:68:a3:45:93:e7:
         56:ad:14:d8:fb:30:85:f3:a9:89:4d:ea:86:cf:84:af:c6:3c:
         f3:91:53:35:6a:30:45:29:df:60:90:f4:c9:de:f4:f3:95:d7:
         fc:62:7c:b1:ad:5b:4b:97:78:32:20:1e:c7:57:69:f8:96:72:
         45:fa:ef:a1:45:c4:3e:26:2b:79:78:2d:d4:76:aa:17:68:34:
         f5:82:88:f7:e4:2b:06:fc:55:71:ab:a2:7d:1f:ab:96:69:ae:
         12:b6:1e:3d:06:95:7f:64:91:0e:6e:da:83:47:7b:5b:fa:52:
         ff:aa:9d:90:62:05:eb:c3:dd:9f:30:30:10:de:3e:a9:fa:9e:
         fe:2a:b7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:03:19 2025 by rpki-client