Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dJt5PL1bgrJ121tE487SX9WPGJrW6ALJkHKieXFcCq1/0/3137302e37392e36342e302f32322d3234203d3e20323636323935.roa
File:                     3137302e37392e36342e302f32322d3234203d3e20323636323935.roa (raw, json)
Hash identifier:          fLbUiaf5BroGQx4kc+OPhi31+x+uSYsM/CpbHKSQ5K4=
Subject key identifier:   F3:B2:54:49:BD:D6:70:CA:18:D1:29:FC:B0:B7:4F:0C:EF:2E:D2:BE
Certificate issuer:       /CN=87E79B8AAB220AB9FCF51235BC77BCD4BA57BCD0
Certificate serial:       18271661B60FA4E57EA4322694A7117E66F630BD
Authority key identifier: 87:E7:9B:8A:AB:22:0A:B9:FC:F5:12:35:BC:77:BC:D4:BA:57:BC:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87E79B8AAB220AB9FCF51235BC77BCD4BA57BCD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dJt5PL1bgrJ121tE487SX9WPGJrW6ALJkHKieXFcCq1/0/3137302e37392e36342e302f32322d3234203d3e20323636323935.roa
Signing time:             Mon 28 Apr 2025 15:03:56 +0000
ROA not before:           Mon 28 Apr 2025 14:58:56 +0000
ROA not after:            Mon 27 Apr 2026 15:03:56 +0000
asID:                     266295
IP address blocks:        170.79.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dJt5PL1bgrJ121tE487SX9WPGJrW6ALJkHKieXFcCq1/0/87E79B8AAB220AB9FCF51235BC77BCD4BA57BCD0.crl
                          rsync://rpki-repo.registro.br/repo/5dJt5PL1bgrJ121tE487SX9WPGJrW6ALJkHKieXFcCq1/0/87E79B8AAB220AB9FCF51235BC77BCD4BA57BCD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87E79B8AAB220AB9FCF51235BC77BCD4BA57BCD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Jun 2025 19:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:27:16:61:b6:0f:a4:e5:7e:a4:32:26:94:a7:11:7e:66:f6:30:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E79B8AAB220AB9FCF51235BC77BCD4BA57BCD0
        Validity
            Not Before: Apr 28 14:58:56 2025 GMT
            Not After : Apr 27 15:03:56 2026 GMT
        Subject: CN=F3B25449BDD670CA18D129FCB0B74F0CEF2ED2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ae:5d:e7:fa:9d:f6:58:9c:40:c2:a1:e4:e8:
                    02:69:34:a8:4e:eb:8d:55:4f:40:02:0a:84:dc:7a:
                    8a:be:e6:03:63:69:97:24:98:70:db:15:51:c4:cb:
                    bb:08:98:ab:1c:6b:3d:57:39:07:b1:6e:86:31:66:
                    b2:8f:6f:c9:1d:f1:cc:c3:4e:1c:cc:3a:25:e2:98:
                    e0:0d:d7:cc:f6:55:17:32:b0:dd:f7:3c:e8:e2:21:
                    f3:d6:1a:02:c3:43:8f:23:67:c2:d8:39:7c:9f:9f:
                    25:84:8f:66:d9:6a:eb:7e:2e:aa:f5:a0:77:70:8b:
                    dc:4b:6c:e3:e0:e8:32:f1:8a:88:2d:9e:44:18:77:
                    e9:26:22:bc:27:40:67:2d:46:0b:c9:d6:2d:74:c5:
                    85:1f:c2:cc:30:e6:7c:41:cc:93:45:d7:c9:30:04:
                    e6:f3:b6:12:ab:2c:a4:8e:05:20:54:e7:7d:76:50:
                    dd:b8:71:d0:0a:f8:2e:d9:76:96:a0:b3:ef:78:3c:
                    56:3a:4b:b2:ff:f9:4b:0c:e5:65:7a:62:46:86:94:
                    92:10:6a:66:01:b9:2b:87:ff:07:a1:7c:a5:bd:74:
                    b5:ae:d4:17:15:6f:15:ab:14:c6:ba:fa:21:44:93:
                    1c:31:f9:4e:8a:60:99:51:ca:90:05:4e:0d:5b:c7:
                    18:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B2:54:49:BD:D6:70:CA:18:D1:29:FC:B0:B7:4F:0C:EF:2E:D2:BE
            X509v3 Authority Key Identifier:
                keyid:87:E7:9B:8A:AB:22:0A:B9:FC:F5:12:35:BC:77:BC:D4:BA:57:BC:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dJt5PL1bgrJ121tE487SX9WPGJrW6ALJkHKieXFcCq1/0/87E79B8AAB220AB9FCF51235BC77BCD4BA57BCD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87E79B8AAB220AB9FCF51235BC77BCD4BA57BCD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dJt5PL1bgrJ121tE487SX9WPGJrW6ALJkHKieXFcCq1/0/3137302e37392e36342e302f32322d3234203d3e20323636323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:90:5c:2e:c9:3c:b4:54:59:8f:a9:ef:d9:de:7a:31:2d:f0:
         0e:30:b2:ba:76:34:98:66:bc:fa:58:26:a9:17:a4:38:95:08:
         31:c9:fd:67:24:03:3f:7b:64:4d:7d:71:5b:59:03:21:55:e6:
         7a:65:42:30:8b:86:57:b1:a2:bc:f2:55:cb:eb:ac:58:37:9c:
         a8:a1:3e:26:f8:03:38:5e:f8:6b:9f:8c:c6:7f:0c:22:2b:e1:
         14:55:18:36:74:17:30:4c:4f:b8:45:69:86:2a:ae:b3:81:15:
         51:43:81:8f:7a:d3:f7:47:4a:01:33:1a:28:ed:68:27:17:db:
         85:91:73:09:24:e3:f0:15:08:a2:8c:49:37:3b:cc:5e:cf:18:
         45:9f:82:a9:e9:76:25:9a:bc:b2:77:3a:01:51:7b:86:4a:c4:
         07:33:9d:25:a5:c4:c7:03:fd:25:a2:d8:f8:91:5b:9e:b8:58:
         62:61:f8:9c:ea:2b:03:50:97:53:f1:0d:a8:63:4a:ba:d8:f1:
         f4:19:fd:09:31:8c:8d:d7:14:85:3b:ab:b6:af:b5:bf:af:f9:
         17:f9:e0:9d:82:15:45:d7:28:09:25:63:e7:d5:fd:88:6f:0d:
         17:56:6c:45:f9:8b:59:b7:ef:60:02:89:1b:66:d5:95:c9:43:
         07:52:9b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:41:59 2025 by rpki-client