Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa
File:                     3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa (raw, json)
Hash identifier:          MzE2xpcz2KvmiRXSM1Ml01v/qyQW+mm86HgeiBkBuI8=
Subject key identifier:   B2:F6:D9:E2:BE:EE:39:56:B0:A9:1B:43:8F:13:C8:2A:12:9A:66:51
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       45596AA71B20B2DE44726BDB5F9B30D4721144CE
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa
Signing time:             Wed 05 Mar 2025 19:00:12 +0000
ROA not before:           Wed 05 Mar 2025 18:55:12 +0000
ROA not after:            Wed 04 Mar 2026 19:00:12 +0000
asID:                     61918
IP address blocks:        170.150.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:59:6a:a7:1b:20:b2:de:44:72:6b:db:5f:9b:30:d4:72:11:44:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Mar  5 18:55:12 2025 GMT
            Not After : Mar  4 19:00:12 2026 GMT
        Subject: CN=B2F6D9E2BEEE3956B0A91B438F13C82A129A6651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d4:00:fd:fe:21:48:3f:60:cf:db:8c:e0:59:
                    35:58:72:bd:54:46:6d:96:53:57:e4:5f:b7:6a:97:
                    b7:4d:48:51:54:79:55:b9:f6:08:01:1a:08:41:c3:
                    86:1a:19:37:10:31:8b:17:3b:18:35:36:2b:11:93:
                    89:03:02:90:56:3d:c7:49:53:f2:db:96:7f:d0:f9:
                    96:a3:55:49:ec:f7:60:70:91:51:d7:6f:a9:2e:5a:
                    54:dd:16:2f:f3:06:a6:6e:a9:a7:39:2b:e3:45:52:
                    2c:11:bf:c3:f4:89:be:be:20:56:14:df:29:f0:f2:
                    a2:0e:84:9c:0a:08:a3:5e:21:d3:ae:71:94:77:f2:
                    0d:b7:79:3a:28:77:31:1e:94:fb:21:37:68:9c:ad:
                    aa:6a:05:2c:d5:c3:7e:7a:59:5f:9a:27:26:3d:62:
                    99:b1:4b:fa:5d:0b:32:5c:a3:60:3c:65:18:c3:8d:
                    e5:62:ff:6d:f9:c2:cb:97:c0:27:4b:15:d2:71:97:
                    bf:27:54:c9:25:ab:ec:ff:6c:15:8c:3f:ea:de:c0:
                    39:54:18:6d:9c:e5:a7:af:a2:8f:b1:20:b4:16:8a:
                    37:fa:99:af:65:e8:05:f2:62:20:2b:be:55:98:81:
                    00:5f:9b:52:7b:d9:0f:fb:51:16:b6:31:f3:a6:8d:
                    69:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F6:D9:E2:BE:EE:39:56:B0:A9:1B:43:8F:13:C8:2A:12:9A:66:51
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:02:88:b7:26:f7:24:0c:b7:1c:52:95:c4:43:98:0c:6f:51:
         b4:d1:00:9c:67:d3:5b:54:10:3b:4a:7d:c3:1c:7f:e1:dc:88:
         f8:e7:10:01:02:74:5c:7d:d8:88:f3:e5:4e:c7:3c:7e:0d:9f:
         21:89:72:be:31:c1:98:e6:24:12:d2:61:63:5c:5c:4c:4a:8c:
         fa:d6:bb:17:4f:13:2f:5f:c0:30:93:52:03:37:63:40:0d:72:
         59:2c:f5:02:dd:a7:39:f2:b6:6f:9a:98:31:93:b5:57:5e:ef:
         c1:2e:e7:e8:66:cf:d5:ee:b0:cf:7a:ba:06:6c:c5:34:9c:5c:
         d6:da:a5:2e:e5:a8:27:b8:c2:0e:4c:3e:f8:3e:2b:c2:ec:e1:
         0a:b1:8f:40:76:1d:06:75:fe:10:f0:de:f3:52:4c:25:a6:8e:
         2f:15:6c:1e:af:cc:78:49:a5:63:db:ee:81:65:80:79:e2:37:
         16:3c:58:de:3a:f0:ff:dd:70:6d:ec:49:b2:8f:e3:75:0e:14:
         eb:fc:07:e1:04:70:90:07:fb:bc:66:b3:5b:ee:d2:90:1a:43:
         27:fb:22:5d:54:90:76:fe:de:7a:ab:ec:93:e9:72:81:57:0e:
         60:8b:ac:1a:73:47:97:67:2b:86:69:9b:56:b1:b2:68:4c:a1:
         13:ec:c8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:36:53 2025 by rpki-client