Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa
File:                     3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa (raw, json)
Hash identifier:          pqbQlUbyzam3cz9H2ezI2lvB/+MSH7nUpMmHaIxPnYY=
Subject key identifier:   2F:6B:18:03:7E:9F:3E:93:6D:58:CD:CF:2C:B6:F7:FD:F2:AF:B4:2A
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       7FFCCBD0B983CC29549BC8692F27210D6343B5DC
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa
Signing time:             Wed 05 Mar 2025 19:00:12 +0000
ROA not before:           Wed 05 Mar 2025 18:55:12 +0000
ROA not after:            Wed 04 Mar 2026 19:00:12 +0000
asID:                     61918
IP address blocks:        170.150.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fc:cb:d0:b9:83:cc:29:54:9b:c8:69:2f:27:21:0d:63:43:b5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Mar  5 18:55:12 2025 GMT
            Not After : Mar  4 19:00:12 2026 GMT
        Subject: CN=2F6B18037E9F3E936D58CDCF2CB6F7FDF2AFB42A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:68:d6:dd:1c:5d:84:41:dd:4f:8b:be:9b:
                    2a:01:8c:04:b3:4f:8c:87:75:e4:fd:a7:da:82:15:
                    32:fb:23:53:71:ae:fa:50:42:fc:b9:52:a3:ef:d1:
                    65:a7:5a:0b:d8:a2:b2:2e:a8:01:7d:a3:66:4e:57:
                    9f:52:4e:58:62:82:35:cd:b2:80:af:d5:fd:8d:48:
                    a0:e4:71:05:9c:c9:96:3b:5d:48:6c:2f:39:52:8f:
                    88:fe:2b:3b:93:0d:a0:fa:3b:fe:72:10:c1:a7:4e:
                    34:aa:2e:3c:9d:db:12:0c:4e:0d:4f:aa:6a:68:89:
                    9e:16:5a:72:65:4b:02:6b:89:cb:71:bc:d0:b9:e2:
                    33:5f:33:31:ce:d5:c9:9e:f4:16:71:a8:9b:d1:76:
                    78:f9:fe:fa:88:81:d8:a8:4e:83:1c:3b:a9:14:f4:
                    18:7f:99:5a:4f:c5:e6:34:fa:08:5a:7a:46:bf:65:
                    03:2b:be:81:35:66:5b:fd:8f:ef:3a:9c:45:c1:1a:
                    27:48:41:28:d4:aa:4f:d0:bb:6e:a0:0c:9f:6c:12:
                    d4:fd:70:62:aa:9d:40:21:9f:bd:17:48:52:6a:5a:
                    1b:af:a4:46:21:15:68:f9:6f:f0:5c:55:ad:93:73:
                    02:13:bd:09:9c:c2:33:5a:3d:af:92:58:75:3e:09:
                    ad:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6B:18:03:7E:9F:3E:93:6D:58:CD:CF:2C:B6:F7:FD:F2:AF:B4:2A
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:9c:97:ab:84:47:45:9d:17:ec:28:5c:c3:22:21:df:50:42:
         80:a2:d9:61:f1:7a:d1:f2:84:4f:5b:d8:38:3c:0c:f9:86:a2:
         a8:be:fa:8f:7a:e0:22:86:ec:a4:4a:d4:41:fe:b3:82:20:e1:
         72:44:e3:8b:72:2a:70:c1:f3:0f:12:94:08:53:3e:e4:3b:ee:
         96:3c:bb:46:99:2e:4e:b3:73:95:a7:8a:21:3f:00:e8:4f:c7:
         49:a8:c4:93:f3:f8:37:31:34:97:29:25:cb:7b:ab:35:44:a2:
         3f:d9:36:27:af:cd:bd:cc:06:68:a6:4a:d1:38:96:0a:ce:e2:
         d9:3d:59:08:b6:e8:de:a0:f0:fa:ee:75:7b:69:e7:88:40:99:
         da:73:d2:18:6b:70:22:d9:2a:72:f3:c2:d0:bb:e1:a0:10:50:
         72:20:f2:c8:36:9e:44:c5:45:24:51:16:c4:62:f5:8b:48:d8:
         37:de:09:01:43:78:b1:b7:2b:b7:77:88:fa:bf:99:52:24:c4:
         35:cf:12:eb:f3:19:33:75:28:48:ba:12:46:07:65:74:5d:5a:
         6f:45:b1:d6:e1:a4:4b:b0:8e:7c:19:48:81:75:3a:2d:5c:29:
         d9:48:7f:41:77:bb:b5:4e:b2:91:3b:6b:dd:92:6d:1b:eb:54:
         c1:c6:12:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:45:07 2025 by rpki-client