Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32332d3233203d3e203631393138.roa
File:                     3137302e3135302e3233322e302f32332d3233203d3e203631393138.roa (raw, json)
Hash identifier:          fhAoCmpeCx+fPhr1dzGZvdcMLhgCLGyD0I2m+wMyAoo=
Subject key identifier:   C9:AC:E3:D7:A2:2F:08:FF:8D:8B:CA:C1:18:B6:FE:B7:2D:21:4C:6C
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       7BCF24B156ECA415895F0D33CDFEFC92744042F2
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32332d3233203d3e203631393138.roa
Signing time:             Wed 05 Mar 2025 19:00:11 +0000
ROA not before:           Wed 05 Mar 2025 18:55:11 +0000
ROA not after:            Wed 04 Mar 2026 19:00:11 +0000
asID:                     61918
IP address blocks:        170.150.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cf:24:b1:56:ec:a4:15:89:5f:0d:33:cd:fe:fc:92:74:40:42:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Mar  5 18:55:11 2025 GMT
            Not After : Mar  4 19:00:11 2026 GMT
        Subject: CN=C9ACE3D7A22F08FF8D8BCAC118B6FEB72D214C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4f:e1:dd:9b:e1:e3:cc:68:6a:a3:67:9e:3d:
                    b3:8a:60:42:8c:5d:76:06:34:8f:96:88:40:77:53:
                    eb:ca:2c:f6:06:5f:38:fd:e6:90:2b:48:e5:20:de:
                    7a:b6:b9:c2:ca:cd:08:91:be:e5:1f:c9:56:e0:0d:
                    1e:c8:b4:a5:42:e6:d6:92:29:9d:05:91:ab:9f:a7:
                    39:e1:94:88:88:fc:3c:81:8b:0b:d9:6c:9a:9f:38:
                    37:cd:39:14:21:37:0c:de:1e:e9:1a:0b:79:6a:a6:
                    3b:26:8a:f1:27:6d:7a:24:04:cd:55:10:83:ae:59:
                    b4:7c:cc:5b:8a:4f:b5:d7:e3:f0:f7:78:16:83:ff:
                    32:33:57:30:27:05:c4:5e:df:be:c4:b7:e9:71:53:
                    7a:7e:09:66:9c:56:8a:1e:ed:ec:85:af:4a:96:f7:
                    58:d4:58:a0:5d:10:a6:0e:f1:3c:4e:b2:f2:fb:b0:
                    f3:51:04:61:6e:99:2a:03:59:16:8d:0d:88:fe:2e:
                    19:80:82:4b:a3:71:43:7f:55:a9:d3:1b:e0:dc:88:
                    4b:07:65:d4:2f:6e:8b:5e:da:5d:22:57:bc:6c:5a:
                    df:09:26:b4:aa:13:62:b6:81:4b:20:4e:f5:dc:4e:
                    29:e8:72:b6:b7:27:ac:5a:a7:1f:85:09:9d:32:da:
                    33:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AC:E3:D7:A2:2F:08:FF:8D:8B:CA:C1:18:B6:FE:B7:2D:21:4C:6C
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32332d3233203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:6f:4d:41:8f:a2:b7:60:16:53:1d:6e:ce:78:fc:de:7e:9f:
         b1:7b:44:06:42:13:fc:09:6c:e4:0b:1f:92:06:e7:6d:8b:cf:
         83:bf:59:51:79:fa:ba:ab:c3:19:f0:0f:d3:03:5c:06:d6:1b:
         6a:40:9e:56:f5:1e:de:f0:b6:49:88:67:c3:4f:6e:ab:66:ed:
         b2:a3:0a:58:c1:1c:38:49:3f:c5:dd:c4:e8:00:86:90:2c:85:
         a8:c1:f1:88:6c:72:58:13:4d:08:b1:95:0d:b2:80:bd:d2:ce:
         13:2e:bb:ed:3d:fd:e6:14:43:8c:79:ff:77:db:17:0e:c3:df:
         b3:20:3c:1c:94:30:4c:75:6e:c3:70:6f:21:d8:c8:de:e5:8e:
         36:e7:ea:ab:83:11:8d:66:fe:69:55:76:30:5c:f3:9b:6f:74:
         eb:11:6c:13:8e:50:3d:1c:f9:f0:d3:46:45:41:e6:e7:16:be:
         f1:db:1a:37:10:20:c4:f2:94:49:55:f8:4d:e8:e6:61:85:b2:
         10:72:47:67:ff:9e:f6:7e:f8:14:34:62:bc:3f:25:ab:c8:39:
         b5:5e:14:9f:a6:09:b2:f4:08:6b:cb:ec:2c:97:89:79:c0:bc:
         30:67:3f:0e:06:f6:6d:3c:18:c3:01:b4:60:10:ac:77:a0:a4:
         07:b2:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:34:23 2025 by rpki-client