Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/3137302e38302e3135362e302f32322d3234203d3e20323636333838.roa
File:                     3137302e38302e3135362e302f32322d3234203d3e20323636333838.roa (raw, json)
Hash identifier:          R6z/wPbqSsz+C83fzHUZ39TjQY9q9qp6tiOUrjuSIWQ=
Subject key identifier:   CA:21:CF:96:52:C0:04:46:87:EC:D7:8C:45:BE:D5:57:C8:B8:50:D8
Certificate issuer:       /CN=5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A
Certificate serial:       7282AC7B6AC2598509C2A091C22893C96C3EAC05
Authority key identifier: 5C:E6:10:AA:B9:80:AB:0F:31:7F:CD:00:4D:2D:0A:36:4D:DB:CC:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/3137302e38302e3135362e302f32322d3234203d3e20323636333838.roa
Signing time:             Wed 05 Mar 2025 20:55:13 +0000
ROA not before:           Wed 05 Mar 2025 20:50:13 +0000
ROA not after:            Wed 04 Mar 2026 20:55:13 +0000
asID:                     266388
IP address blocks:        170.80.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.crl
                          rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:82:ac:7b:6a:c2:59:85:09:c2:a0:91:c2:28:93:c9:6c:3e:ac:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A
        Validity
            Not Before: Mar  5 20:50:13 2025 GMT
            Not After : Mar  4 20:55:13 2026 GMT
        Subject: CN=CA21CF9652C0044687ECD78C45BED557C8B850D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:0e:34:ec:f1:b0:8c:0b:3b:de:5e:4b:97:
                    6e:ef:1c:7b:98:c3:f0:b8:39:50:4b:86:fb:e2:97:
                    f8:de:f8:05:3e:88:d0:10:61:d6:5d:9d:2e:33:be:
                    19:b4:fb:63:f6:c8:38:34:dc:8b:cf:97:42:ca:fb:
                    58:f3:aa:a4:a4:0f:4c:e4:fb:74:db:5c:19:1e:5e:
                    ba:f9:82:2f:b9:d6:69:69:02:22:f6:71:fa:9c:de:
                    de:ef:48:4c:26:7e:64:93:89:68:86:7a:89:32:a0:
                    35:0f:89:66:1e:53:3a:7d:0e:fb:43:e5:c7:76:8e:
                    09:8f:b4:8a:82:c2:47:5b:58:36:f1:66:17:0d:46:
                    9e:0e:00:2f:8a:31:98:fd:32:e9:56:48:87:10:6f:
                    62:7e:25:bb:02:c6:62:de:0a:df:2f:92:52:03:7d:
                    63:92:44:38:51:5d:76:d7:38:1a:a6:2c:08:92:3c:
                    f9:1f:27:f1:3f:2a:40:61:b6:74:e5:5e:1a:ea:3f:
                    ca:63:82:8f:33:be:28:6c:b5:91:06:33:90:51:04:
                    87:e0:e8:80:3c:f3:1e:65:22:6e:e7:8c:72:b7:62:
                    05:3a:e6:7f:48:12:86:2f:db:d8:9f:76:30:58:2a:
                    70:da:44:43:da:f8:b5:fb:ff:69:09:f9:80:f4:62:
                    aa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:21:CF:96:52:C0:04:46:87:EC:D7:8C:45:BE:D5:57:C8:B8:50:D8
            X509v3 Authority Key Identifier:
                keyid:5C:E6:10:AA:B9:80:AB:0F:31:7F:CD:00:4D:2D:0A:36:4D:DB:CC:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE610AAB980AB0F317FCD004D2D0A364DDBCC1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/1/3137302e38302e3135362e302f32322d3234203d3e20323636333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:e6:90:9d:40:16:67:d3:45:bd:54:2d:d7:16:0e:08:21:76:
         d7:66:a8:6f:4a:07:72:6e:4f:8c:aa:21:a9:36:bb:5b:f5:d5:
         34:6e:da:8b:c8:99:fe:eb:15:c8:d1:ab:de:8c:40:db:36:98:
         72:0d:1d:8a:7a:e6:30:cf:61:88:0b:7b:5e:84:0a:ba:10:e9:
         64:21:fc:cf:e1:e7:cc:a0:3b:79:22:2a:ec:bf:e1:f8:e2:e5:
         65:26:c8:6b:56:d0:f5:71:22:c2:19:f4:62:1b:cf:5d:d7:cf:
         c2:49:cd:e6:a4:e6:7b:53:b4:47:6f:d4:2e:ed:ee:31:46:2b:
         b3:38:4b:02:e5:85:53:a2:1f:73:0f:4c:94:33:fa:4e:1e:e2:
         0d:f0:a7:2f:51:92:16:89:d8:b2:a0:b6:f5:36:2b:9c:a2:44:
         0c:c2:38:a1:ba:b5:ec:69:73:9d:94:d7:bd:df:f5:5b:33:41:
         ce:7d:77:38:8f:ea:7b:00:92:e8:9c:0d:f6:70:84:01:7a:08:
         c1:15:9b:d7:b1:8c:e0:9b:ba:1a:24:53:0c:1a:9b:48:87:b8:
         0e:d0:bc:db:f0:9b:f6:b0:1f:c8:78:f4:48:94:01:1f:7a:a7:
         ff:25:90:db:76:ad:f9:62:de:04:52:81:5d:b9:4b:5c:67:12:
         39:d0:2c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:48:29 2025 by rpki-client