Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3234352e3231362e302f32322d3234203d3e203238313436.roa
File:                     3137302e3234352e3231362e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          pB2dcf8Cminq6zpagKZ8/LkXgpTvf4fxiD5SJlo5UpE=
Subject key identifier:   C9:0C:6F:A4:AE:45:A4:CB:B6:C2:57:F6:F5:34:26:07:23:02:8F:38
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       30FF2EA3F5EC1C7CC43692D9E890B97C76A9A1A0
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3234352e3231362e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:58:58 +0000
ROA not before:           Mon 12 May 2025 12:53:58 +0000
ROA not after:            Mon 11 May 2026 12:58:58 +0000
asID:                     28146
IP address blocks:        170.245.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 07:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ff:2e:a3:f5:ec:1c:7c:c4:36:92:d9:e8:90:b9:7c:76:a9:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:53:58 2025 GMT
            Not After : May 11 12:58:58 2026 GMT
        Subject: CN=C90C6FA4AE45A4CBB6C257F6F534260723028F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:96:1a:c9:d0:75:10:e7:e7:68:f1:0d:6c:
                    68:31:19:22:52:8d:20:6b:ff:61:be:4e:8c:67:ff:
                    58:03:06:74:28:19:c0:df:d8:3c:5f:6d:38:fd:ff:
                    32:44:6d:b7:de:3e:37:3a:13:2b:7a:31:20:4d:19:
                    c0:57:ca:b0:c4:68:2f:7a:94:e0:df:62:f0:da:f3:
                    47:cf:61:a5:0f:3b:ed:54:8e:32:c5:86:24:d0:60:
                    00:05:43:26:29:2c:ce:a5:79:aa:e6:77:11:33:90:
                    75:6f:71:34:67:f5:38:9a:68:ee:09:12:ef:a0:d9:
                    da:a7:69:6e:55:b0:a7:39:1e:22:a5:10:d3:bb:fd:
                    3e:6b:f8:a3:40:92:f0:ff:da:e3:52:90:6e:1d:66:
                    d6:9e:6f:94:39:71:17:ba:e5:cd:66:93:84:40:24:
                    66:c3:73:a8:b5:e1:f5:ee:3c:a7:6f:6c:b7:a2:7e:
                    04:a9:ce:26:4d:6f:fd:2b:b0:eb:62:6e:55:1d:ef:
                    f6:85:be:7a:a8:dd:1d:15:e8:3d:ac:3e:86:36:88:
                    3e:1e:ff:eb:9a:59:2b:a0:10:76:2b:7c:fe:20:2e:
                    15:ce:9a:bc:f2:f7:86:fb:84:d1:ff:89:9c:54:37:
                    a2:d0:43:70:28:03:53:04:8d:ef:ad:76:eb:2f:c9:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0C:6F:A4:AE:45:A4:CB:B6:C2:57:F6:F5:34:26:07:23:02:8F:38
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e3234352e3231362e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:02:71:fb:fd:aa:57:e8:41:3a:f4:7f:2f:4b:fe:79:66:80:
         ee:b8:81:84:c5:9e:b5:47:96:e6:a4:1f:c7:24:c6:67:78:90:
         c5:ba:77:63:82:f8:ea:7a:a4:b4:23:de:51:34:a4:f3:03:77:
         02:5d:c4:dd:de:00:16:98:37:9b:c9:0a:dd:cb:c6:5d:82:a6:
         e8:17:ed:15:1e:c3:f5:62:4f:47:6f:bd:5d:83:0d:af:3b:28:
         93:2a:14:42:82:c8:1a:f0:09:3d:89:aa:77:75:c5:4f:45:47:
         00:a0:26:d5:f1:ad:26:0f:e1:a4:7f:ad:a3:b7:ed:a8:a3:64:
         61:2a:86:3e:82:3a:0d:6d:9b:01:1d:5b:e5:cb:e3:75:c8:b8:
         dc:52:55:84:31:fb:5b:e1:91:be:a2:46:2c:5f:94:1d:d9:16:
         73:12:a9:2e:dc:1b:0a:72:11:63:33:0d:9e:07:a9:98:e9:44:
         aa:04:1f:45:6f:88:0d:74:f2:2a:f5:41:26:cc:c4:8c:2d:1f:
         24:96:38:4b:06:ea:bb:23:ac:5d:c1:e6:9a:fe:ec:55:85:a7:
         9c:27:b6:61:68:7f:77:f0:0f:23:fa:3b:66:3e:f4:48:ab:8a:
         a9:49:72:38:9f:91:4c:cb:79:34:36:c4:87:a3:f0:12:2b:5c:
         04:73:04:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:05:34 2025 by rpki-client