Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130362e302f32342d3234203d3e20323635303933.roa
File:                     3137302e3233332e3130362e302f32342d3234203d3e20323635303933.roa (raw, json)
Hash identifier:          A1/pPkisDqvRrkw5T8P+2zfx/mYAGJ4PXQyXcSl6Jzs=
Subject key identifier:   CF:C2:63:17:7F:78:97:0F:32:8F:EC:55:AD:AB:61:44:17:A1:9C:06
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       44AA8D1B85751DA2A20E1176FFBFC8A9B54A7518
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130362e302f32342d3234203d3e20323635303933.roa
Signing time:             Fri 16 May 2025 06:00:48 +0000
ROA not before:           Fri 16 May 2025 05:55:48 +0000
ROA not after:            Fri 15 May 2026 06:00:48 +0000
asID:                     265093
IP address blocks:        170.233.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 23:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:aa:8d:1b:85:75:1d:a2:a2:0e:11:76:ff:bf:c8:a9:b5:4a:75:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: May 16 05:55:48 2025 GMT
            Not After : May 15 06:00:48 2026 GMT
        Subject: CN=CFC263177F78970F328FEC55ADAB614417A19C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:ed:06:64:d8:fa:d4:43:6a:1e:f7:1b:50:
                    04:26:5d:28:16:16:ae:47:19:40:02:5f:a3:de:21:
                    f5:6c:8f:58:1e:1a:3c:63:a9:6e:41:22:d4:d8:22:
                    be:30:f8:3c:b2:cf:0d:e3:c4:a4:17:16:49:e2:e6:
                    4b:7a:bd:99:a2:14:08:9b:60:48:67:f6:bf:7b:7c:
                    a1:96:72:4b:46:c4:79:8d:86:75:73:eb:ff:01:ec:
                    be:45:97:4a:39:8d:d0:4f:c9:f0:bd:0f:e4:fd:ff:
                    94:1f:5f:13:87:2c:2a:1a:a3:93:6f:0d:fd:98:c3:
                    31:48:7d:03:e8:d5:14:3d:78:29:34:15:18:56:f5:
                    41:c7:d6:83:a4:e0:8d:29:68:dd:b4:77:a3:4a:bd:
                    86:d6:8b:19:06:fd:35:d5:ac:b5:43:f0:32:ff:47:
                    1c:6a:56:5b:27:6f:7b:b6:61:26:00:ee:62:dd:4d:
                    2b:9a:1a:9e:95:e0:31:a3:6a:5a:1e:15:1a:32:c9:
                    5b:24:18:c0:33:47:a8:51:30:11:23:c9:ff:b9:92:
                    9b:49:7c:64:cb:6b:0e:10:1a:21:e8:1e:e9:02:e2:
                    a3:a0:20:a9:be:e9:33:55:06:14:1d:ce:d4:76:db:
                    3a:04:2f:00:b0:ee:a2:6b:ff:8d:ae:e5:14:80:58:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C2:63:17:7F:78:97:0F:32:8F:EC:55:AD:AB:61:44:17:A1:9C:06
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130362e302f32342d3234203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:cf:9c:3e:44:13:2c:f5:57:b7:3d:56:f6:a2:9c:82:a0:7a:
         e1:0a:dc:b1:a9:fe:64:43:2d:10:a2:cb:75:3d:d0:06:bd:cb:
         7f:e1:d9:e9:a1:df:66:7b:30:08:7e:85:ce:f7:20:4d:ae:c1:
         e8:91:26:de:f3:d5:32:9c:d3:50:e2:e2:b4:1f:c4:2a:48:6e:
         b6:46:cf:61:7b:19:d2:c6:84:1a:1a:10:8c:3c:42:98:2e:7d:
         e0:3f:b8:25:6a:1e:84:a8:cc:8f:bc:38:f3:9a:00:52:d7:2e:
         e7:35:f2:ee:a8:9a:a8:3e:66:53:eb:1e:d9:48:c6:03:e3:5e:
         23:e0:76:fc:58:10:67:bc:6d:84:2e:dc:6e:ca:2c:bd:34:7f:
         4b:ae:d3:20:c0:c8:1f:0f:d8:87:fd:06:da:35:2b:ec:3d:03:
         02:fa:1d:39:56:30:15:13:69:e0:c5:5d:79:ed:ae:d1:93:91:
         83:e3:c3:2f:3b:cc:22:1a:b9:aa:47:0a:4a:98:69:fd:4a:89:
         b3:55:f1:98:3e:f4:73:35:c6:7f:21:d3:0f:7e:e6:e2:2f:76:
         09:f5:e7:77:98:84:b4:db:47:81:f3:a5:53:e4:c6:d2:bf:d7:
         0d:3c:69:0d:4a:db:44:85:b9:b2:7e:c9:69:43:cb:d2:d2:08:
         a5:98:e3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:46:27 2025 by rpki-client