Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/3137302e3233392e3231362e302f32322d3234203d3e20323636333539.roa
File:                     3137302e3233392e3231362e302f32322d3234203d3e20323636333539.roa (raw, json)
Hash identifier:          C1Do8lr28o/0LX0JVYTO/jyL9WyQkZOixXtNZIMTbig=
Subject key identifier:   21:3D:DC:46:BB:42:BC:39:BB:52:C3:4F:50:E6:99:FC:89:B4:52:EF
Certificate issuer:       /CN=C706C191D8AE31F9DF14D6C11474BCE58841AD0F
Certificate serial:       60188CCB64BA7C16DA1AE75961D066334973CE10
Authority key identifier: C7:06:C1:91:D8:AE:31:F9:DF:14:D6:C1:14:74:BC:E5:88:41:AD:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/3137302e3233392e3231362e302f32322d3234203d3e20323636333539.roa
Signing time:             Thu 06 Mar 2025 18:10:55 +0000
ROA not before:           Thu 06 Mar 2025 18:05:55 +0000
ROA not after:            Thu 05 Mar 2026 18:10:55 +0000
asID:                     266359
IP address blocks:        170.239.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.crl
                          rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:18:8c:cb:64:ba:7c:16:da:1a:e7:59:61:d0:66:33:49:73:ce:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C706C191D8AE31F9DF14D6C11474BCE58841AD0F
        Validity
            Not Before: Mar  6 18:05:55 2025 GMT
            Not After : Mar  5 18:10:55 2026 GMT
        Subject: CN=213DDC46BB42BC39BB52C34F50E699FC89B452EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:b2:49:a4:b5:1b:05:78:88:a7:a9:cb:03:
                    03:42:77:06:6f:d9:40:14:66:f2:2b:5a:72:0c:fd:
                    bf:b0:b7:05:95:a6:13:01:a5:41:ff:a0:f5:d9:29:
                    00:1c:43:d0:81:96:5c:39:0f:81:39:cf:46:37:de:
                    21:a4:91:36:01:db:a8:0e:0e:f6:02:29:c1:64:2a:
                    ee:9c:8c:57:54:82:22:f3:7d:80:ab:e2:75:0e:76:
                    be:9d:7a:d9:ed:a7:13:5a:2d:53:38:5c:af:1e:cd:
                    91:f2:71:4e:87:16:bc:36:08:ed:2a:f8:0d:92:4d:
                    7c:a2:10:15:a4:90:66:72:3f:33:05:61:62:fd:d5:
                    15:a2:82:e2:1f:7f:04:69:85:dc:9d:fe:dd:e6:12:
                    e4:f8:ed:09:ed:93:34:9f:3a:d1:c7:fd:ed:f8:3e:
                    ea:4a:df:3a:00:0f:71:41:a7:b8:de:2a:92:fb:48:
                    e1:31:bc:10:32:31:3f:4a:c2:a3:ea:40:71:e8:b7:
                    1c:1a:9d:1c:9a:7f:f2:34:ec:e0:02:6e:cc:95:2a:
                    ba:f9:3e:5c:61:aa:14:06:b3:10:b2:21:23:ec:25:
                    1b:d4:78:01:db:17:81:6f:40:56:37:94:bf:e5:64:
                    5e:e6:60:29:c1:a6:16:b1:59:38:8e:f6:8b:e9:a4:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3D:DC:46:BB:42:BC:39:BB:52:C3:4F:50:E6:99:FC:89:B4:52:EF
            X509v3 Authority Key Identifier:
                keyid:C7:06:C1:91:D8:AE:31:F9:DF:14:D6:C1:14:74:BC:E5:88:41:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C706C191D8AE31F9DF14D6C11474BCE58841AD0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/1/3137302e3233392e3231362e302f32322d3234203d3e20323636333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:b2:ea:69:0c:59:51:e1:70:9f:da:f2:78:7e:9c:45:7a:23:
         07:8e:4b:88:62:86:90:14:b4:72:7d:87:16:39:92:d6:5b:13:
         3b:17:6d:18:c4:07:d4:51:93:9b:e9:d5:37:77:11:03:68:83:
         99:d1:57:94:47:e3:fb:49:34:4b:f6:30:a8:b5:3b:cd:7e:76:
         98:29:5b:02:c9:02:11:0d:53:f4:62:c7:af:52:29:a2:e3:72:
         57:97:5f:e6:1b:b7:f5:73:96:75:be:87:76:53:a0:14:54:72:
         d0:42:f6:79:bf:e8:fe:81:15:24:cd:27:c8:fc:03:3e:70:e0:
         e3:9a:de:c9:cb:26:82:4e:29:23:1a:95:4a:62:56:cd:d8:26:
         f9:b7:0d:3f:b1:b4:71:a8:72:ae:da:6c:ea:2c:7d:17:db:08:
         39:09:38:14:e6:b7:ee:3e:b7:4b:64:c6:b6:5f:63:f0:43:59:
         b3:4e:02:08:0b:d0:a4:19:1b:32:8b:3d:6d:bc:2b:f0:8b:e8:
         32:82:71:07:f1:59:eb:1b:26:1d:39:d9:e7:35:d2:3f:b2:05:
         76:7d:b5:34:d7:b0:fd:69:ad:fa:d1:7f:fd:d7:62:7b:b1:15:
         df:32:2c:bd:e5:f4:6c:fd:6c:e7:db:e1:a9:58:65:3e:9a:d0:
         02:18:19:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:16 2025 by rpki-client