Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3131302e302f32332d3233203d3e20323636333438.roa
File:                     3137302e3233392e3131302e302f32332d3233203d3e20323636333438.roa (raw, json)
Hash identifier:          2G1o5WJlq5IALUAutwFbBSeViOxxjh6YeX4Yx0RSaC0=
Subject key identifier:   35:08:3E:D4:FB:20:22:AF:3C:3F:4C:DD:41:44:3A:5D:73:D3:60:54
Certificate issuer:       /CN=273782B997878A9415F132214E8D09CFA971572F
Certificate serial:       7F44738996DCF64EFCB6A34D516280D37F97EECC
Authority key identifier: 27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3131302e302f32332d3233203d3e20323636333438.roa
Signing time:             Wed 05 Mar 2025 19:00:08 +0000
ROA not before:           Wed 05 Mar 2025 18:55:08 +0000
ROA not after:            Wed 04 Mar 2026 19:00:08 +0000
asID:                     266348
IP address blocks:        170.239.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl
                          rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 19:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:44:73:89:96:dc:f6:4e:fc:b6:a3:4d:51:62:80:d3:7f:97:ee:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273782B997878A9415F132214E8D09CFA971572F
        Validity
            Not Before: Mar  5 18:55:08 2025 GMT
            Not After : Mar  4 19:00:08 2026 GMT
        Subject: CN=35083ED4FB2022AF3C3F4CDD41443A5D73D36054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b9:98:75:05:ec:12:2d:7f:60:4d:23:6d:7b:
                    cf:19:a0:ad:6c:a1:ce:b5:ff:93:3c:85:e2:a0:ea:
                    5e:45:dc:89:d1:a2:f6:8f:d8:d4:2a:31:1d:cf:e3:
                    86:e5:b8:9b:76:b4:10:00:62:b6:92:5c:7e:d3:74:
                    6c:fa:72:37:21:72:29:f0:64:c4:94:23:c8:23:20:
                    78:70:ed:eb:a2:22:15:7e:74:44:52:01:6d:9a:36:
                    b0:e4:41:44:f5:20:bd:ad:55:d2:ec:e0:19:b8:cd:
                    4e:18:58:a2:d1:a5:15:7c:90:7d:99:f2:36:e0:3a:
                    3f:a7:60:d1:d6:d4:76:e4:79:87:2f:42:56:ed:e2:
                    ff:f5:96:4d:b6:5b:9e:07:3b:6a:56:3c:36:33:97:
                    ec:67:37:d1:4f:c9:c5:93:3c:c4:ed:04:7b:5d:08:
                    27:d9:db:b0:3b:33:fc:70:e4:8e:6e:d3:50:6c:75:
                    d5:4b:bd:15:b0:7a:50:45:8d:80:2c:35:95:ff:f4:
                    65:75:33:0c:83:1b:ca:14:3a:aa:48:0e:d3:66:66:
                    ee:29:f1:24:3c:f2:43:8b:37:c2:83:c2:fa:30:50:
                    c6:e3:e8:dc:11:95:25:dd:48:67:7b:ae:6d:05:b3:
                    ec:20:1f:d0:c5:73:17:9b:e1:25:2a:48:53:eb:59:
                    5a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:08:3E:D4:FB:20:22:AF:3C:3F:4C:DD:41:44:3A:5D:73:D3:60:54
            X509v3 Authority Key Identifier:
                keyid:27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3131302e302f32332d3233203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:6d:3a:05:ca:d7:2a:f4:86:1d:6e:96:cf:45:c3:fa:0f:b2:
         01:87:08:fc:b2:ca:91:42:ea:31:fc:c1:50:f4:90:5a:06:00:
         6a:d7:e7:7c:d5:f9:fa:45:2a:6d:f9:9b:a1:7b:22:37:32:0a:
         63:1a:b6:b9:dc:57:e4:b2:e7:d6:72:53:81:d8:b4:90:74:d5:
         2f:a8:4a:cc:bf:05:a8:4b:b8:ff:07:9d:2a:b3:35:5c:5f:9d:
         bb:23:3d:de:97:09:f6:0f:db:d4:4e:dc:bf:ef:31:0c:2b:2a:
         e8:ee:af:a0:36:2d:4b:5e:66:a5:08:79:64:81:82:03:8a:63:
         27:c0:a7:10:de:e9:31:a7:06:6e:2c:4e:37:88:6c:db:37:5b:
         19:31:3c:df:f8:1b:13:b3:31:8b:70:fe:e7:58:90:e4:b5:12:
         e1:b9:fd:97:77:2e:4e:d4:78:47:de:41:eb:73:63:04:e1:74:
         aa:15:95:ba:45:40:36:58:04:0f:21:01:fe:83:65:a8:35:7f:
         f2:3e:f7:ea:6d:0f:d0:76:e5:b6:bf:8c:06:6e:a0:d2:e0:b0:
         79:59:38:40:b3:13:cb:17:0e:12:14:7d:56:31:0d:e6:f5:6a:
         30:fa:05:a0:26:5f:4e:27:f1:a9:59:0c:c9:fd:46:a6:9d:c9:
         69:4d:b2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:24:59 2025 by rpki-client