Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e362e302f32332d3234203d3e203631393030.roa
File:                     3137302e3234372e362e302f32332d3234203d3e203631393030.roa (raw, json)
Hash identifier:          UqT87zgHLxCBAbQzE96j8R5vAIQLYDnHidmwJ28TMXs=
Subject key identifier:   C9:F0:F9:02:42:CF:B6:29:44:86:74:96:60:14:BB:03:0B:DA:32:AC
Certificate issuer:       /CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC
Certificate serial:       13E57C34F20B0D0A1A7F82625DAE683F014A45B3
Authority key identifier: C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e362e302f32332d3234203d3e203631393030.roa
Signing time:             Tue 13 May 2025 18:54:39 +0000
ROA not before:           Tue 13 May 2025 18:49:39 +0000
ROA not after:            Tue 12 May 2026 18:54:39 +0000
asID:                     61900
IP address blocks:        170.247.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 11:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e5:7c:34:f2:0b:0d:0a:1a:7f:82:62:5d:ae:68:3f:01:4a:45:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC
        Validity
            Not Before: May 13 18:49:39 2025 GMT
            Not After : May 12 18:54:39 2026 GMT
        Subject: CN=C9F0F90242CFB629448674966014BB030BDA32AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:ae:68:da:4b:96:5f:1a:13:54:7b:af:e7:
                    65:66:e1:bd:cd:ad:48:5b:61:7a:00:5e:81:36:96:
                    c3:73:9e:a5:01:ba:50:53:c4:c1:e9:14:57:ad:ab:
                    ae:e2:2f:b8:86:42:8c:6b:d9:88:6e:3d:df:e9:66:
                    3a:4c:a1:9e:2f:a8:a8:b2:3b:b6:09:2e:10:d8:fa:
                    14:5c:73:d5:09:c5:fb:fc:61:91:c6:b2:8b:33:d5:
                    b2:0f:3e:de:4b:35:36:bb:79:15:e2:bb:b6:8a:d9:
                    31:d9:19:fd:e6:b9:9a:5a:8f:c5:fc:61:8b:7c:15:
                    be:cc:5d:e4:96:f2:65:fc:95:3b:79:17:27:43:cd:
                    5b:7f:3f:d0:16:48:3d:1d:ec:82:cb:70:c0:af:d4:
                    4c:5a:94:49:a7:1b:da:0d:e4:f3:da:c4:77:ec:26:
                    65:da:2a:2b:13:c7:8b:64:b8:a3:dc:50:27:45:58:
                    ed:de:3f:24:38:16:e4:25:4d:8a:f1:f1:3e:d1:5f:
                    53:49:aa:0a:ed:35:e8:d1:bb:cb:a0:97:80:82:ea:
                    3c:73:b9:2e:4e:a4:78:a4:78:2b:18:c4:81:5e:04:
                    53:d6:71:60:eb:f0:f3:e2:e4:bf:f6:c9:8b:11:33:
                    eb:04:fa:ba:41:32:10:1e:da:2f:3d:48:ce:84:56:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F0:F9:02:42:CF:B6:29:44:86:74:96:60:14:BB:03:0B:DA:32:AC
            X509v3 Authority Key Identifier:
                keyid:C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137302e3234372e362e302f32332d3234203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:dd:09:83:52:0e:d2:fe:7f:a9:75:29:ea:3d:41:68:01:07:
         05:a1:31:58:19:4c:2b:bc:0f:f7:b4:f8:21:58:5c:c4:aa:c3:
         0a:7a:49:b1:6f:b6:c0:72:4a:7a:ec:f4:a7:50:26:c0:3e:e1:
         84:c7:40:8a:3e:bb:64:a9:c5:72:fa:6d:81:47:2e:7d:6f:7f:
         c6:50:4c:b0:e6:5e:61:51:bd:8d:69:51:b0:0e:b6:33:11:b9:
         a0:4a:de:90:4b:69:d3:10:04:30:67:4e:c7:9a:65:1b:48:ab:
         d9:cd:fd:d4:38:de:d4:87:1f:d4:f1:23:b7:05:71:18:c7:9e:
         42:8f:8c:8a:d1:5c:bc:31:80:88:69:91:f4:1a:62:e5:7f:dd:
         1d:d3:98:19:47:89:6d:a3:ba:29:2d:e3:ba:8c:d8:9d:16:e0:
         64:a7:0d:2d:7a:88:20:68:4b:dc:6f:cc:b6:10:28:7b:c9:b9:
         b4:31:1f:9b:bf:71:6a:bf:3a:aa:44:fa:cd:6f:07:26:6b:42:
         69:57:08:6c:5f:89:ce:52:90:63:77:61:06:27:4e:32:64:ec:
         67:a1:59:80:4a:6f:2e:6e:f5:19:bd:a1:42:e2:53:af:ff:d1:
         d5:ce:b6:46:c9:82:1b:a9:61:61:60:fb:b6:9b:8d:39:38:bd:
         d0:66:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:57:11 2025 by rpki-client