Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35302e302f32332d3233203d3e20323636333734.roa
File:                     3137302e38302e35302e302f32332d3233203d3e20323636333734.roa (raw, json)
Hash identifier:          fgaktkZvREqEdKxhCwkQM0vrGN+uJ33xvruPLYDVzIA=
Subject key identifier:   15:DD:A7:23:E2:3B:E7:C2:8F:56:61:A9:0E:2C:50:86:B7:86:D8:3C
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       6C7B0A8A0F11FD4C094043EA6C6E5EE47E37BC59
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35302e302f32332d3233203d3e20323636333734.roa
Signing time:             Wed 26 Mar 2025 15:07:02 +0000
ROA not before:           Wed 26 Mar 2025 15:02:02 +0000
ROA not after:            Wed 25 Mar 2026 15:07:02 +0000
asID:                     266374
IP address blocks:        170.80.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 03:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7b:0a:8a:0f:11:fd:4c:09:40:43:ea:6c:6e:5e:e4:7e:37:bc:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Mar 26 15:02:02 2025 GMT
            Not After : Mar 25 15:07:02 2026 GMT
        Subject: CN=15DDA723E23BE7C28F5661A90E2C5086B786D83C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:21:0f:c2:8b:8f:18:90:c6:05:d8:5d:c1:
                    12:35:7e:fc:1f:75:29:3a:eb:f1:48:43:13:c0:31:
                    2f:7b:6c:bd:76:12:2f:2f:1c:de:67:86:09:0f:a8:
                    59:fc:e0:02:3b:a3:40:70:6e:6e:91:b5:b8:d7:6f:
                    ff:6e:18:ba:40:f0:4c:e6:0e:a4:5f:bb:8d:a6:c3:
                    2f:18:4c:d6:34:b6:e3:dc:4e:b1:35:25:fa:19:05:
                    9e:02:e4:cf:b6:7a:52:a2:a7:74:5e:b9:b1:c8:e6:
                    ad:a3:27:a0:8b:22:aa:19:5c:e0:c4:dd:9f:94:f7:
                    75:be:c9:c3:79:00:e8:f6:a5:9a:17:40:c1:be:fd:
                    d8:13:7e:68:5e:f7:46:2b:3e:ad:90:cc:40:e2:7c:
                    ac:9f:75:62:64:6f:2a:0d:0b:0d:b5:9c:ee:88:97:
                    d6:28:f4:4f:24:9e:04:d2:fa:98:6b:59:51:fd:83:
                    7e:cc:76:c3:ba:f2:fd:4c:d5:de:f1:5a:3c:dc:3a:
                    6a:c8:51:86:bb:a6:5e:fb:c0:96:0d:f0:a4:22:22:
                    0a:9b:1f:4c:7d:b1:da:15:5b:9b:c5:3e:83:d4:9f:
                    09:f1:ee:d7:7f:72:6c:21:db:49:1b:da:9f:c0:32:
                    59:0e:f0:11:8e:bc:77:6c:b8:82:a2:e9:df:5f:64:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DD:A7:23:E2:3B:E7:C2:8F:56:61:A9:0E:2C:50:86:B7:86:D8:3C
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e35302e302f32332d3233203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:f2:3a:a5:2b:04:13:a1:55:10:21:b7:07:1e:66:89:26:30:
         da:4f:f7:2e:63:01:e7:b7:b9:4c:32:0f:5b:23:a3:ad:ba:e0:
         05:4d:c8:59:0f:f8:c3:e0:3e:10:d6:b9:2b:37:7a:ad:7f:47:
         21:72:83:3a:eb:00:5f:58:b2:89:b2:cb:62:72:0e:dd:01:5d:
         be:20:e4:24:06:ad:1e:3f:9c:18:6a:21:2e:2a:aa:bb:99:15:
         63:5e:75:fe:6b:9c:44:bc:ff:a7:5d:90:96:da:09:3b:d6:20:
         24:9c:03:c6:39:57:ad:7f:ca:7d:c7:17:0c:fd:bc:1b:2e:f0:
         cd:4d:7a:ea:c9:6d:46:e5:0c:8d:3c:d9:11:e7:be:43:b7:29:
         f6:1b:ed:e1:0d:13:53:f2:f9:49:b4:36:de:6c:73:cb:35:d1:
         a8:2f:77:a8:53:96:4d:66:90:02:03:29:a3:c6:bc:c3:0f:07:
         ca:03:11:ae:0e:fa:3d:7a:5f:73:d5:b6:6f:d9:cc:3f:1f:c5:
         74:61:b8:6d:08:7c:c2:3c:8e:ad:b8:7d:6c:8d:6d:da:e5:45:
         26:4a:a6:06:52:ca:0c:34:ee:69:5b:1f:6f:87:2e:57:98:fd:
         5c:4f:58:5a:bb:96:55:bc:21:10:15:5f:6d:55:39:7a:4a:c4:
         06:ce:df:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:57:29 2025 by rpki-client