Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32322d3232203d3e203631393138.roa
File:                     3137302e3135302e3233322e302f32322d3232203d3e203631393138.roa (raw, json)
Hash identifier:          gD/X3w0mWls19T4583KO8PKZ9/6QT33fLR6YYXPFV8A=
Subject key identifier:   6B:1F:3D:BB:63:BB:1A:2D:57:21:6D:9C:7C:6B:ED:7E:51:72:BE:4D
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       3617C4C6F88433FF74939B6A6244B65287147E33
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32322d3232203d3e203631393138.roa
Signing time:             Wed 05 Mar 2025 19:00:11 +0000
ROA not before:           Wed 05 Mar 2025 18:55:11 +0000
ROA not after:            Wed 04 Mar 2026 19:00:11 +0000
asID:                     61918
IP address blocks:        170.150.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:17:c4:c6:f8:84:33:ff:74:93:9b:6a:62:44:b6:52:87:14:7e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Mar  5 18:55:11 2025 GMT
            Not After : Mar  4 19:00:11 2026 GMT
        Subject: CN=6B1F3DBB63BB1A2D57216D9C7C6BED7E5172BE4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:29:e4:1d:86:6f:0b:72:75:78:54:7b:e5:5a:
                    10:09:61:50:f8:6a:a5:5e:fa:15:3c:c4:d8:4a:05:
                    0e:d5:a3:82:4d:73:d3:95:23:db:57:e9:34:1d:23:
                    9d:ad:d7:b2:46:f7:7c:50:b3:90:84:07:cb:bf:3d:
                    fb:ce:f9:c3:06:ff:25:8e:38:57:fd:d9:13:90:6b:
                    f1:ee:4b:3f:42:92:b9:f6:08:64:1a:f6:6b:41:92:
                    ca:8a:ae:2a:d4:39:aa:4c:2d:fa:22:89:02:33:25:
                    59:32:9b:cd:6f:d9:fe:0f:91:c4:b0:60:2e:ec:df:
                    a0:0b:36:0c:1e:f2:f1:e7:5d:df:50:b6:1f:f4:2c:
                    bd:b0:74:a1:69:b0:2a:cd:db:4a:58:42:72:d8:3e:
                    f9:31:90:74:da:80:06:41:4e:43:3e:ab:cd:94:8c:
                    97:ad:94:a1:bb:c2:51:65:79:d4:86:26:e7:5a:85:
                    17:63:5b:91:df:03:44:28:a1:4d:5d:26:e0:43:5d:
                    64:28:7e:7a:50:c0:08:ee:88:55:9c:1b:a4:9c:1b:
                    e0:99:84:3f:0a:05:1c:d6:92:41:13:7d:c5:80:fa:
                    e3:55:26:82:0f:60:6f:1a:34:23:99:4b:c8:8b:ec:
                    6a:75:69:22:e1:b6:6f:c4:a0:56:37:69:f1:ef:ac:
                    56:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1F:3D:BB:63:BB:1A:2D:57:21:6D:9C:7C:6B:ED:7E:51:72:BE:4D
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32322d3232203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:cb:e5:4d:95:4a:39:57:68:f8:50:5f:b4:b3:10:c6:8d:bb:
         5c:3e:a8:49:20:eb:de:5d:2f:80:32:60:ac:d4:cd:fb:ef:d2:
         5a:93:24:2e:e8:eb:3f:41:79:48:2b:e8:14:0e:ec:1e:13:eb:
         02:bd:5c:a5:f9:86:f5:5e:1a:85:ec:13:06:e4:0a:59:b8:ad:
         76:69:49:51:be:91:dd:2d:95:bb:72:12:74:37:ba:49:d3:e7:
         02:0e:1a:a3:15:2a:70:b8:41:d1:1d:3f:8f:23:c4:f5:42:b0:
         44:9b:41:10:a1:db:3b:9e:30:8b:28:9f:a4:61:8d:73:ed:9a:
         0c:e5:3f:4f:9b:a6:57:f6:7f:05:55:e4:23:79:63:39:8d:58:
         6e:90:bd:74:36:92:fe:75:50:df:79:84:d5:a5:7d:1a:5b:b9:
         94:07:69:95:26:c8:23:2c:de:20:ca:35:27:f8:68:11:6e:58:
         64:ce:a6:ad:8a:d5:05:d4:fb:7d:ec:9e:7c:89:65:fd:31:77:
         bc:b7:d0:31:bc:b2:56:b9:c6:b5:9f:1a:6b:f0:0c:cd:10:57:
         ef:81:a4:9e:b7:c8:15:93:06:d4:61:c8:ee:c9:f5:e1:1f:51:
         ec:1d:7c:41:ad:1b:68:e9:86:39:32:98:6d:01:aa:79:39:21:
         bf:4a:86:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:34:27 2025 by rpki-client