Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/3137302e3234352e3134302e302f32322d3234203d3e20323632383739.roa
File:                     3137302e3234352e3134302e302f32322d3234203d3e20323632383739.roa (raw, json)
Hash identifier:          3k0MEdFSGHQcqOZKE0cksZ9DZ3Vx4wPdWpGItsfsnZI=
Subject key identifier:   F6:D3:C6:9C:C4:A5:AC:29:84:82:B5:EA:29:1B:99:16:26:B6:F0:57
Certificate issuer:       /CN=D5185EB6AF2331AEBE136E6B92FA533A35153197
Certificate serial:       0AC38B9558DBAF5FBA1BA0DFA3636BE1E5B277E0
Authority key identifier: D5:18:5E:B6:AF:23:31:AE:BE:13:6E:6B:92:FA:53:3A:35:15:31:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5185EB6AF2331AEBE136E6B92FA533A35153197.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/3137302e3234352e3134302e302f32322d3234203d3e20323632383739.roa
Signing time:             Mon 26 May 2025 20:58:58 +0000
ROA not before:           Mon 26 May 2025 20:53:58 +0000
ROA not after:            Mon 25 May 2026 20:58:58 +0000
asID:                     262879
IP address blocks:        170.245.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.crl
                          rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5185EB6AF2331AEBE136E6B92FA533A35153197.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 10:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c3:8b:95:58:db:af:5f:ba:1b:a0:df:a3:63:6b:e1:e5:b2:77:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5185EB6AF2331AEBE136E6B92FA533A35153197
        Validity
            Not Before: May 26 20:53:58 2025 GMT
            Not After : May 25 20:58:58 2026 GMT
        Subject: CN=F6D3C69CC4A5AC298482B5EA291B991626B6F057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:13:d3:ce:4b:7e:cf:a3:f9:76:49:2d:0d:
                    96:36:18:78:1d:8a:02:f6:4f:22:21:7f:ca:98:0b:
                    32:d5:89:57:f7:ef:e8:72:a7:68:31:7e:31:05:eb:
                    7d:64:e1:2b:50:54:b1:ee:c5:28:12:28:29:6d:6b:
                    ba:e0:1c:24:4f:36:f8:fd:dd:03:62:13:00:0b:ea:
                    f4:ca:5b:8e:b2:0f:84:59:c7:46:2d:10:82:8a:36:
                    30:c6:46:53:2b:c1:cb:a2:55:a2:f5:cc:25:eb:ec:
                    33:1e:3f:07:83:58:3e:29:9c:c5:e1:27:6c:96:d4:
                    5f:d4:fd:04:89:b9:60:68:4c:f2:72:08:77:12:b5:
                    d3:75:8e:02:1b:72:0a:17:71:c7:a4:6a:4a:d2:bd:
                    b2:6a:08:8e:a3:d8:aa:54:54:03:16:9c:22:2c:b3:
                    21:7c:06:09:b3:05:47:07:e3:46:a8:2b:09:fc:30:
                    e1:28:40:01:91:e0:29:ee:b2:6d:c3:c1:8c:d6:af:
                    14:67:bc:dd:9e:27:6a:39:f2:cd:44:1d:ef:49:61:
                    57:4c:6f:ce:c5:d9:9e:ff:c1:93:2c:08:c3:c0:fc:
                    08:98:88:4d:7e:c1:49:8b:09:3b:3a:50:09:1d:63:
                    d6:56:18:76:33:85:0d:a5:32:c5:64:3c:17:99:67:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D3:C6:9C:C4:A5:AC:29:84:82:B5:EA:29:1B:99:16:26:B6:F0:57
            X509v3 Authority Key Identifier:
                keyid:D5:18:5E:B6:AF:23:31:AE:BE:13:6E:6B:92:FA:53:3A:35:15:31:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5185EB6AF2331AEBE136E6B92FA533A35153197.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/3137302e3234352e3134302e302f32322d3234203d3e20323632383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:36:3b:ec:a1:bc:c8:d4:95:ac:b0:78:d0:ea:80:30:54:fd:
         b2:9f:08:0b:80:d1:e4:aa:7a:47:bd:dc:bb:d4:e4:d8:66:e2:
         1d:09:11:eb:56:d4:74:20:a0:53:c8:c2:9a:ef:e9:86:9e:3f:
         0f:cd:66:73:da:34:7d:9f:d5:30:ff:64:0d:5e:22:04:62:9a:
         42:ff:17:61:43:a7:ec:e8:27:25:b7:dc:ed:16:a7:be:95:c4:
         3f:92:f7:ff:d4:26:da:6b:65:04:4d:9f:6e:98:b3:79:0a:16:
         18:a4:7d:05:80:5d:0b:bd:30:62:5c:85:4d:59:53:d9:75:2f:
         6a:7b:d5:4d:59:55:c2:1b:19:ee:09:bb:6d:92:e4:56:bd:65:
         95:7a:16:cb:5f:85:72:9b:54:22:27:db:64:75:8a:41:39:a1:
         ee:b0:49:c5:e1:84:db:32:13:ae:af:54:ad:2c:ea:61:9b:e9:
         f7:0d:f1:f9:49:7b:71:55:01:cd:a2:cf:f5:a5:dd:9c:58:0a:
         9e:ad:dd:4f:dd:1d:3f:be:16:7c:42:91:6f:89:33:24:1c:ed:
         7f:00:e3:4c:8b:3d:f7:cf:ed:f1:14:d8:72:ae:62:20:f9:ba:
         6e:b5:00:da:4c:5b:d1:07:c4:a6:c5:c7:7d:d2:26:a8:90:19:
         ab:aa:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:17:05 2025 by rpki-client