Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3135302e3136322e302e302f31362d3234203d3e20323633333030.roa
File:                     3135302e3136322e302e302f31362d3234203d3e20323633333030.roa (raw, json)
Hash identifier:          RKd4FC8x/1vMCkVcoYkd67xsxq8Jl2/zUcvaQlOk2Po=
Subject key identifier:   41:C3:38:73:66:4A:60:2B:FC:62:42:3A:70:E7:C6:F1:E6:E2:AF:C1
Certificate issuer:       /CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
Certificate serial:       1A82D572471EAECBFC4D988545CC9D0BFD4EC610
Authority key identifier: E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3135302e3136322e302e302f31362d3234203d3e20323633333030.roa
Signing time:             Wed 05 Mar 2025 20:25:51 +0000
ROA not before:           Wed 05 Mar 2025 20:20:51 +0000
ROA not after:            Wed 04 Mar 2026 20:25:51 +0000
asID:                     263300
IP address blocks:        150.162.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl
                          rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:82:d5:72:47:1e:ae:cb:fc:4d:98:85:45:cc:9d:0b:fd:4e:c6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
        Validity
            Not Before: Mar  5 20:20:51 2025 GMT
            Not After : Mar  4 20:25:51 2026 GMT
        Subject: CN=41C33873664A602BFC62423A70E7C6F1E6E2AFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c8:46:fd:90:54:ff:34:73:1d:b3:7f:90:b3:
                    b8:2d:10:85:6b:09:3b:c6:21:7e:2e:cf:18:d7:ac:
                    a8:4f:73:e0:9b:4b:cf:5a:14:a1:f0:6a:65:dd:ae:
                    51:d6:5b:44:b3:94:d3:a9:0d:fb:64:a6:11:32:cc:
                    c9:30:d1:21:ad:eb:d5:f8:83:ef:43:d7:23:a6:84:
                    17:15:b7:1c:bd:2a:55:ab:53:df:85:9b:c7:64:00:
                    11:03:72:81:3f:79:c7:99:ae:72:e8:7f:5f:08:5b:
                    87:fe:df:f2:1b:4c:be:ab:e3:f2:7e:0e:4c:e5:47:
                    b6:2f:0a:05:e1:b6:ca:29:89:a9:95:91:0b:d4:08:
                    e4:cd:a0:7c:64:61:cb:47:0a:c5:4c:eb:1a:08:ce:
                    10:c1:08:2c:3e:78:2f:18:17:8e:db:6a:30:b8:cb:
                    f3:49:98:0d:bc:06:87:6c:35:1c:35:4b:6d:5c:4d:
                    31:18:21:ac:86:8e:ba:c5:70:bf:2d:b7:d1:dc:76:
                    ef:8c:ad:3a:0b:e8:b9:55:fe:1e:56:76:7b:45:73:
                    35:21:0f:67:ee:28:8f:ed:ae:cd:50:a9:2e:d3:95:
                    29:12:11:e2:43:98:f4:19:29:7c:03:40:ac:58:85:
                    d4:ac:ad:01:4d:3f:09:f3:f5:28:d8:e8:42:e8:1f:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C3:38:73:66:4A:60:2B:FC:62:42:3A:70:E7:C6:F1:E6:E2:AF:C1
            X509v3 Authority Key Identifier:
                keyid:E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3135302e3136322e302e302f31362d3234203d3e20323633333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.162.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:b8:9c:0e:c0:bb:ac:b9:43:b2:16:d8:44:db:99:38:41:a6:
         05:cb:4b:2c:c6:45:30:64:52:da:e1:97:75:39:5d:cb:f4:df:
         7d:fe:9c:9e:02:ad:59:64:0c:a2:81:7f:9c:3d:1b:b8:75:f9:
         8e:99:a8:61:37:d2:46:0e:a6:7a:c1:ba:9c:d0:41:51:c6:51:
         7c:b0:2b:46:8c:b9:4b:09:c9:c2:54:5d:0b:0b:15:e4:74:95:
         ed:97:b3:0c:6e:3b:dd:68:27:a0:41:7a:49:69:e2:9b:c4:53:
         3e:78:e3:da:05:9f:91:a5:ae:40:92:19:32:0a:bf:8f:bf:6f:
         43:fb:80:aa:16:88:66:87:c4:46:52:47:10:35:11:c0:98:35:
         0a:6d:17:80:03:f6:8a:4c:67:61:30:14:73:1a:02:bf:e8:b1:
         3a:66:9f:94:0f:41:0c:d2:93:7a:f9:f1:67:07:ad:75:63:fb:
         98:0a:aa:14:af:99:a2:6c:df:e8:40:04:ba:d3:d5:bf:0e:8e:
         22:08:de:03:a6:e3:1e:a9:f9:36:85:7a:74:38:0a:c8:cb:0d:
         20:f1:23:c8:47:ec:b2:f0:f1:d3:d4:98:78:63:4f:74:03:8a:
         94:e0:5d:d4:3b:9b:1e:89:49:2a:6f:be:5a:eb:73:0c:7d:31:
         3e:51:90:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:12 2025 by rpki-client