Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa
File:                     3137302e38322e38352e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          aRBVhq2UVOQeGnsWoDc0SIg69/q1CdrlS8JobTRtFQg=
Subject key identifier:   44:04:27:75:75:45:3F:7D:BF:5A:8C:1D:E0:E9:1B:6E:8F:9C:67:59
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       231C2F0377043A5F0B335CA06687CF4B5CD50615
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 06 Mar 2025 03:50:00 +0000
ROA not before:           Thu 06 Mar 2025 03:45:00 +0000
ROA not after:            Thu 05 Mar 2026 03:50:00 +0000
asID:                     262642
IP address blocks:        170.82.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1c:2f:03:77:04:3a:5f:0b:33:5c:a0:66:87:cf:4b:5c:d5:06:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Mar  6 03:45:00 2025 GMT
            Not After : Mar  5 03:50:00 2026 GMT
        Subject: CN=4404277575453F7DBF5A8C1DE0E91B6E8F9C6759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:79:18:83:7b:93:1c:9e:bc:c5:a0:f3:2a:
                    83:9a:79:b7:c6:92:f8:57:26:1a:b6:50:71:da:db:
                    30:42:0f:98:0d:17:f6:8d:b1:fa:df:0b:c6:16:f0:
                    bb:d1:c4:c0:6a:b1:09:f3:cc:1b:a8:b3:28:2d:a1:
                    e8:76:8b:79:e7:31:c0:64:c5:08:c9:ab:2e:b1:9c:
                    e8:bb:09:30:05:60:3c:71:9c:1b:28:f6:3f:6e:9c:
                    ac:8b:0b:f4:78:35:36:c2:10:a3:f6:fd:13:b5:e5:
                    0f:6d:70:ea:fc:d6:c1:3a:da:8a:06:db:b3:15:83:
                    de:76:c1:5b:ab:a2:50:b4:27:1a:18:96:43:b8:39:
                    ec:43:1f:d6:a1:81:2b:c2:78:f1:65:a2:22:cd:bf:
                    56:a4:89:26:6e:a7:dc:3a:58:6f:c8:fd:8d:20:32:
                    ee:29:c4:5d:0c:67:c8:0c:ce:64:db:da:d6:ae:5f:
                    4a:a1:58:42:a9:bd:f9:58:ce:49:01:75:58:ec:80:
                    f6:c7:1c:b5:35:29:2e:1d:04:7f:f3:66:60:ce:ac:
                    7e:ff:83:dc:54:64:4c:b1:5b:1f:53:3b:9b:c6:08:
                    eb:6b:84:14:cb:9f:20:41:8f:a5:16:61:dc:c7:6c:
                    1e:b0:b1:af:40:c1:81:5f:c8:50:ee:e6:25:57:2a:
                    9e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:04:27:75:75:45:3F:7D:BF:5A:8C:1D:E0:E9:1B:6E:8F:9C:67:59
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38352e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:16:8f:ef:42:a3:b3:08:e0:4e:19:47:d3:dc:41:6c:2f:8c:
         c6:7b:da:2e:6a:b3:96:c6:3e:28:6e:66:23:5c:70:df:06:a1:
         1d:63:ba:bf:db:47:51:c1:82:14:3f:08:22:b0:1a:f2:ae:61:
         d2:56:f9:91:1a:78:c0:97:0d:b5:1c:c0:b1:6a:21:7e:e6:21:
         b1:fd:30:ed:c2:c3:d3:60:4c:5b:5a:f3:8c:7b:2f:36:f7:2b:
         6a:95:23:1d:b7:7e:3a:7d:98:b8:16:c3:db:33:f1:9c:c1:63:
         68:75:dd:3c:ef:93:e4:31:34:50:98:aa:c5:de:f7:78:fe:7a:
         26:d0:9d:16:ae:96:ef:55:ba:f2:57:12:47:05:a6:e2:e3:2e:
         10:8e:4e:eb:4c:88:ca:f1:29:3f:67:79:aa:56:55:3d:27:01:
         ae:fc:80:6d:f9:36:69:f7:d5:68:7d:cf:b3:b9:17:a7:39:fb:
         38:e8:92:92:a1:a2:41:bf:40:df:72:c8:8b:d8:3e:c2:9a:53:
         25:fc:1f:39:7f:c7:ec:23:6e:5a:c6:cd:64:bb:14:86:b7:1b:
         b3:0f:a0:6f:2a:1f:d0:ad:e2:7b:a8:69:17:06:83:27:2d:01:
         5f:bb:53:62:bf:5e:41:4c:54:5f:c6:ab:68:01:cf:62:73:f4:
         a9:5c:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:31:59 2025 by rpki-client