Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/3136382e3132312e3137362e302f32322d3234203d3e20323635333135.roa
File:                     3136382e3132312e3137362e302f32322d3234203d3e20323635333135.roa (raw, json)
Hash identifier:          x4Uw4O32DViugChVvSmlID5wzRMyL8YJToHxsWvi/sQ=
Subject key identifier:   AB:21:79:8C:28:19:60:EF:FE:6D:57:72:9B:03:2C:B5:DC:E8:8B:2C
Certificate issuer:       /CN=BB5E0437800F9F11433D11504358A8DC6375C371
Certificate serial:       17FDDAAB526E3F4D1EA68C1094918B4017500252
Authority key identifier: BB:5E:04:37:80:0F:9F:11:43:3D:11:50:43:58:A8:DC:63:75:C3:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB5E0437800F9F11433D11504358A8DC6375C371.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/3136382e3132312e3137362e302f32322d3234203d3e20323635333135.roa
Signing time:             Wed 05 Mar 2025 19:00:10 +0000
ROA not before:           Wed 05 Mar 2025 18:55:10 +0000
ROA not after:            Wed 04 Mar 2026 19:00:10 +0000
asID:                     265315
IP address blocks:        168.121.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/BB5E0437800F9F11433D11504358A8DC6375C371.crl
                          rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/BB5E0437800F9F11433D11504358A8DC6375C371.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB5E0437800F9F11433D11504358A8DC6375C371.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fd:da:ab:52:6e:3f:4d:1e:a6:8c:10:94:91:8b:40:17:50:02:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB5E0437800F9F11433D11504358A8DC6375C371
        Validity
            Not Before: Mar  5 18:55:10 2025 GMT
            Not After : Mar  4 19:00:10 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:84:17:ec:33:c1:2a:bb:5f:81:c1:cc:db:
                    89:71:3c:d1:0a:2c:ff:80:33:4c:71:b2:c0:0d:dc:
                    95:cf:20:5b:68:20:bf:3a:17:bf:2a:8e:be:49:af:
                    d7:52:ea:6b:2f:b4:0c:49:40:91:93:c6:ca:93:df:
                    bf:f1:0b:fc:9c:60:8c:93:3b:a0:92:a8:4b:58:42:
                    d5:19:fc:f5:61:db:09:1f:89:a5:d8:64:2a:6d:7f:
                    9c:dc:61:15:19:c3:ad:4d:98:a0:0d:99:dd:b7:79:
                    ae:ab:1c:10:a9:ca:b7:15:c7:61:eb:fe:e5:03:d2:
                    6e:39:ff:db:5a:86:ad:24:11:3d:c9:43:4d:37:b1:
                    ca:d5:88:78:42:23:86:5f:9c:d4:f9:2e:4c:00:3c:
                    18:6e:c0:21:d0:42:ba:d6:48:dd:64:96:ad:c9:73:
                    9c:4f:49:2b:e6:af:fa:8b:3f:53:b8:75:f2:02:be:
                    d4:4b:23:a9:8c:81:60:4b:4d:b8:63:37:63:86:aa:
                    bb:0e:c2:05:b3:d9:c1:ea:0e:a2:97:3f:fe:58:f7:
                    34:00:86:29:ab:d1:5e:db:f8:d6:3d:87:42:6c:25:
                    1d:e3:92:b2:47:1c:e8:32:bd:4d:b6:39:74:7b:f9:
                    6e:3c:f4:f5:76:e0:84:85:77:04:4c:37:5c:00:df:
                    ea:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:21:79:8C:28:19:60:EF:FE:6D:57:72:9B:03:2C:B5:DC:E8:8B:2C
            X509v3 Authority Key Identifier:
                keyid:BB:5E:04:37:80:0F:9F:11:43:3D:11:50:43:58:A8:DC:63:75:C3:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/BB5E0437800F9F11433D11504358A8DC6375C371.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB5E0437800F9F11433D11504358A8DC6375C371.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/1/3136382e3132312e3137362e302f32322d3234203d3e20323635333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:1e:cb:78:69:ed:53:27:c2:bb:4c:ea:8e:e7:a5:fc:82:
         5c:38:47:53:eb:d4:61:8b:52:df:f0:78:b2:6d:c2:2b:65:95:
         97:ff:df:0c:c8:a5:9a:80:cc:31:de:7c:71:4d:d6:00:fb:aa:
         22:07:f6:f4:85:49:e9:f5:6b:16:95:27:87:0f:79:18:d1:0d:
         84:97:1e:bf:fe:b5:1d:15:e2:ce:0c:3b:2a:66:3a:a1:1c:75:
         4e:54:e0:6f:d1:dd:b5:f3:15:99:30:00:a5:d2:0b:40:08:f7:
         c9:1e:f5:31:5e:9b:2c:6a:e2:91:66:28:b4:3c:e1:cc:ed:65:
         2a:19:ed:25:e8:7c:be:fa:51:3c:6f:32:75:ea:b9:0a:63:48:
         1a:86:4d:70:14:6e:1d:75:73:80:72:13:37:4e:a2:ac:f4:04:
         c3:7d:30:c1:44:fd:4d:da:6e:37:31:3b:34:de:02:a2:c3:84:
         ac:a0:76:15:b3:bd:22:7f:9a:7f:c9:0e:21:2a:30:2a:46:f5:
         77:68:4d:33:07:0d:94:93:4c:6e:9a:e5:25:f5:0c:49:9e:4b:
         f6:72:77:6a:f4:43:a7:a1:96:64:ce:6c:08:b4:a2:c9:37:44:
         1d:21:ff:74:e6:7a:8f:85:9c:8d:b5:eb:5e:94:78:3c:14:cb:
         c3:66:e9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:19:00 2025 by rpki-client