Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230342e302f32332d3233203d3e20323733353134.roa
File:                     3137302e38302e3230342e302f32332d3233203d3e20323733353134.roa (raw, json)
Hash identifier:          axdcwmJ/9+hR5AWyMu0TplLGAiWlkpGHQvQrf1tuy34=
Subject key identifier:   D4:B5:5A:61:46:3D:4F:D2:E1:AC:84:E4:BD:2A:E0:6D:D3:70:B3:70
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       1DF3374226A86156C55BFEE27F815A2FA910B532
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230342e302f32332d3233203d3e20323733353134.roa
Signing time:             Mon 17 Feb 2025 14:43:13 +0000
ROA not before:           Mon 17 Feb 2025 14:38:13 +0000
ROA not after:            Mon 16 Feb 2026 14:43:13 +0000
asID:                     273514
IP address blocks:        170.80.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl
                          rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 04:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f3:37:42:26:a8:61:56:c5:5b:fe:e2:7f:81:5a:2f:a9:10:b5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Feb 17 14:38:13 2025 GMT
            Not After : Feb 16 14:43:13 2026 GMT
        Subject: CN=D4B55A61463D4FD2E1AC84E4BD2AE06DD370B370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dc:d2:1f:37:77:90:74:87:ed:b3:bc:a5:3a:
                    07:7e:67:c2:d4:3a:52:9e:99:81:42:84:d1:44:1c:
                    c9:5a:c1:73:da:a7:34:0d:10:4c:07:47:b5:ae:90:
                    00:ad:70:fc:72:8e:93:ae:a8:bc:10:bb:84:ad:ec:
                    d3:e9:8a:73:39:a3:e9:a3:03:fd:30:79:aa:15:8d:
                    37:fa:ec:36:02:f6:74:b2:b0:bd:e5:b2:a3:3b:31:
                    1e:68:41:ec:72:b1:25:0f:c2:15:b4:f6:16:35:98:
                    96:85:98:0c:d3:de:37:ce:8a:bf:01:10:47:1e:b2:
                    a3:77:b9:c4:d5:0c:73:d9:8f:e9:f0:4f:5c:e1:cd:
                    d3:3a:3b:43:f0:87:23:d2:07:20:79:9a:87:df:78:
                    fc:ca:f7:16:ea:fe:bf:6e:35:fa:66:e5:55:b9:8e:
                    6e:bd:c8:2c:ee:ef:ed:ef:99:26:ef:ad:85:ce:63:
                    b0:4c:25:b9:e7:64:28:bf:e7:fa:80:ec:a2:cf:c5:
                    42:8b:9e:e9:97:a4:5d:50:87:18:43:b0:72:d6:c6:
                    fe:4e:0c:3d:75:91:d1:50:83:cf:ff:51:6d:7b:43:
                    51:5a:1f:b7:80:68:80:b5:a5:0f:ae:c8:15:b3:87:
                    c2:b1:eb:97:73:9a:ba:a2:17:f1:4d:da:2e:62:83:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B5:5A:61:46:3D:4F:D2:E1:AC:84:E4:BD:2A:E0:6D:D3:70:B3:70
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230342e302f32332d3233203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:63:96:cf:5b:ba:ff:64:05:70:53:28:0b:7c:f9:73:ab:83:
         a6:d1:4e:b5:e8:38:34:1b:02:7d:9c:6a:2a:ee:68:6c:4e:7c:
         d0:2f:fe:b7:1d:e9:61:cb:75:84:e1:ea:dd:73:56:5f:00:db:
         ae:41:ee:a1:04:31:01:1f:dc:a8:07:89:28:57:02:c6:8a:99:
         a1:02:d2:ed:32:b9:e9:40:ae:cf:1e:b4:d0:7c:96:5a:85:00:
         1d:e3:9a:a5:92:61:a9:8f:ab:bb:32:ab:55:07:34:da:8f:80:
         80:cc:a7:33:4b:d5:c7:3f:30:42:89:c5:15:82:4d:f0:60:04:
         49:5d:ab:a2:4f:b1:00:49:2c:28:2f:59:b8:cc:16:08:41:29:
         9e:78:5a:dc:9a:81:86:ff:6b:58:d9:ca:b9:3f:d5:87:7e:7b:
         b6:19:0a:46:24:f1:2d:5e:8e:c3:73:5d:ac:0c:af:30:3e:25:
         e3:28:5e:ff:3a:72:a0:59:27:3c:ad:a4:6d:69:10:8e:8b:9d:
         1c:63:17:31:96:5d:4d:c6:88:d4:00:c6:ba:36:1e:3c:1a:21:
         01:a9:77:c5:01:78:e0:ad:44:c1:fb:46:7a:9c:2f:20:b0:39:
         49:e6:ef:ac:d4:ae:97:19:c1:04:cf:0c:2c:24:a8:55:ab:39:
         03:f0:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:46:07 2025 by rpki-client