Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37362e302f32332d3233203d3e20323730343133.roa
File:                     3137302e302e37362e302f32332d3233203d3e20323730343133.roa (raw, json)
Hash identifier:          DGedRloelMqoGhmOwmwnWcO3qk/ho7SHt+5MHMv3xpc=
Subject key identifier:   EA:97:43:0B:19:C9:40:DD:F7:CB:FA:4E:A0:5A:B9:50:FB:14:1E:41
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       2808922B7DF1AFB4ED916857571C61EA01B70D98
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37362e302f32332d3233203d3e20323730343133.roa
Signing time:             Thu 06 Mar 2025 00:49:48 +0000
ROA not before:           Thu 06 Mar 2025 00:44:48 +0000
ROA not after:            Thu 05 Mar 2026 00:49:48 +0000
asID:                     270413
IP address blocks:        170.0.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:08:92:2b:7d:f1:af:b4:ed:91:68:57:57:1c:61:ea:01:b7:0d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Mar  6 00:44:48 2025 GMT
            Not After : Mar  5 00:49:48 2026 GMT
        Subject: CN=EA97430B19C940DDF7CBFA4EA05AB950FB141E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:6c:0c:07:c5:79:b2:75:bc:db:93:dd:34:
                    a6:0d:04:c3:66:56:1f:f6:b1:91:24:90:c0:82:c1:
                    0a:36:ef:cf:c9:c0:78:d6:95:4c:8f:42:df:8a:0c:
                    01:ee:f4:9f:de:77:e2:6e:a9:95:a4:9e:77:1e:1d:
                    fc:97:43:e6:f5:9e:dc:14:3c:fb:7e:ea:c9:17:7a:
                    64:44:d7:b5:21:9f:53:73:30:ab:1d:b4:f4:4e:4a:
                    84:ea:34:19:18:b6:26:b5:df:a5:6e:ef:81:74:4e:
                    37:d3:9b:f1:03:c9:80:45:8c:0d:f6:2e:78:a8:a3:
                    07:c3:28:f2:42:36:fc:e4:40:ae:d2:f2:fa:09:46:
                    3b:01:44:d3:ff:4a:bd:5b:bf:6b:c5:1a:b7:0c:48:
                    5f:3d:cf:35:4d:8f:49:3e:a9:a3:29:5d:0c:5f:8e:
                    8f:84:f5:37:9c:12:19:df:85:33:49:b9:f8:33:81:
                    b4:36:be:d5:19:10:f9:8a:c0:7b:91:07:85:a1:98:
                    cd:8a:92:5f:6f:2e:f3:34:9d:ba:9c:25:f8:d6:7d:
                    64:97:ca:9a:41:42:31:b3:49:02:2c:e8:09:97:87:
                    c3:99:6a:36:bf:03:77:e1:3a:f0:f6:67:3a:7b:5f:
                    4d:5e:14:d8:a1:2e:88:99:58:07:88:05:62:e8:84:
                    07:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:97:43:0B:19:C9:40:DD:F7:CB:FA:4E:A0:5A:B9:50:FB:14:1E:41
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37362e302f32332d3233203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:80:f3:a3:2f:83:9b:8f:cd:95:c0:06:15:e4:1e:d0:f8:
         43:01:42:ca:e8:c0:3d:94:ae:32:27:4e:00:d0:ea:04:dc:b1:
         b8:bc:c2:24:12:fc:1e:6c:5a:21:d5:0f:64:73:a4:8d:a4:c3:
         fa:75:9d:c3:8c:94:6b:79:af:31:25:2c:60:45:49:a8:1b:45:
         e2:0e:86:9a:c7:0e:00:a5:18:b6:97:48:95:ae:96:f2:49:f5:
         5e:b1:4c:b0:05:9a:cf:d8:d6:75:ae:6b:8c:fb:2f:a7:72:22:
         73:06:e0:ed:2d:7e:0c:75:0d:ee:58:56:38:ff:01:09:c3:d7:
         34:0e:e2:be:4b:dd:db:10:d6:ba:6f:80:bb:6f:8f:42:66:2b:
         51:2f:e1:85:1d:cd:9b:30:60:f1:06:da:ce:07:ee:39:2c:8a:
         b3:e9:93:f9:57:fa:75:89:83:28:05:aa:f8:38:8e:84:74:3b:
         ff:11:92:e8:2e:64:2b:92:2c:65:3c:b4:38:2b:c9:81:9f:87:
         2d:03:11:e2:49:7f:b3:da:d5:41:75:64:23:47:68:43:de:6a:
         5b:73:ef:a4:62:e5:a6:cb:fe:84:46:73:68:a0:76:f2:bf:d1:
         e0:1a:27:24:a3:9a:fc:79:58:ab:64:0e:af:fa:24:2d:41:63:
         b7:9e:97:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:12:52 2025 by rpki-client