Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa
File:                     3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa (raw, json)
Hash identifier:          PVZgZ80ec1MnnTWZFJhH3Pekch5EzlVCo00ByHvruS8=
Subject key identifier:   F1:8A:40:7F:E0:25:A9:AB:F1:73:0D:5A:74:D4:90:4A:C7:DF:D2:48
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       2B11CCB2D00D735BA4804947E790032AF4749C73
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     266505
IP address blocks:        170.244.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 16:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:11:cc:b2:d0:0d:73:5b:a4:80:49:47:e7:90:03:2a:f4:74:9c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=F18A407FE025A9ABF1730D5A74D4904AC7DFD248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bc:aa:44:04:6b:35:30:22:9c:37:c0:2a:61:
                    1e:4e:93:cc:4d:13:72:81:f7:f9:4c:f5:bb:47:24:
                    74:5f:0e:b1:de:6d:ef:a2:c0:96:5a:1a:a4:da:60:
                    53:e9:a3:10:d7:de:ae:fe:35:b9:e1:53:c0:dd:c0:
                    1b:f1:50:fd:00:83:61:5d:39:43:35:fa:49:b7:ff:
                    bc:7f:86:78:52:b3:da:26:ec:65:00:76:61:d0:ea:
                    19:82:38:ee:87:26:a0:5a:a0:ea:05:3d:c5:1e:90:
                    bb:ba:97:a4:bc:e2:db:65:f4:1a:91:e6:89:af:c5:
                    0e:f5:59:d1:a8:99:e5:7f:9b:08:e7:03:f2:4b:a2:
                    48:7b:a5:fa:40:ad:31:43:43:87:fd:01:e3:3a:54:
                    b8:58:db:f4:b1:48:cf:78:cc:de:b8:a5:42:58:34:
                    dc:f5:35:83:47:e4:c8:84:51:04:95:02:a9:15:87:
                    7d:4f:59:09:aa:d7:b5:bd:14:8e:5e:8f:6b:72:73:
                    89:81:52:1a:00:0e:a3:aa:9b:d9:a4:d1:5e:e1:35:
                    5c:61:56:ca:5b:cd:32:05:47:3b:e0:09:af:ac:8d:
                    6b:82:22:1f:42:df:3c:77:23:05:8b:86:33:17:2b:
                    2f:eb:73:b9:bf:ad:e9:51:f8:da:a1:49:60:af:4d:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8A:40:7F:E0:25:A9:AB:F1:73:0D:5A:74:D4:90:4A:C7:DF:D2:48
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:4a:63:c9:c3:9f:8e:bf:9e:75:65:4a:70:db:19:c0:31:1d:
         7b:38:3f:59:34:95:13:4d:56:d7:ce:82:7f:fe:40:65:a3:b5:
         20:c1:bd:5a:ed:dd:e6:5a:23:6a:eb:ae:ce:52:6d:91:5d:f7:
         14:64:2e:cb:98:31:e9:09:5d:44:50:9a:6c:da:ae:2d:5d:e4:
         e7:c2:25:5c:db:62:8e:32:09:47:67:a7:5b:53:26:02:84:5c:
         ad:fb:62:18:50:2b:c7:59:fe:45:68:73:90:de:a8:f7:04:39:
         89:a3:e1:02:a5:b8:1c:d5:14:18:8c:a9:6c:e2:f7:a7:b5:d4:
         9b:da:57:96:45:98:a0:ab:4b:2c:49:3b:94:a0:20:ac:8b:d6:
         35:5d:b3:d0:5f:1f:74:f6:99:e1:ac:73:39:7f:26:88:b5:2a:
         32:04:22:49:40:2d:c1:76:b3:20:d5:81:79:3b:9d:da:65:c1:
         63:68:6b:56:4d:2c:f9:a1:e0:e3:01:cc:31:88:51:8f:95:d5:
         3b:5a:cd:eb:0d:f1:08:77:1c:7d:6a:a2:c6:a4:cd:2b:f2:47:
         2a:e8:b2:ea:76:2e:37:ff:63:0f:30:47:b3:e3:4b:3f:b5:56:
         66:f8:d6:48:03:08:64:fc:26:0e:1e:71:56:7e:7f:c3:a6:fb:
         b8:1a:04:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:03:13 2025 by rpki-client