Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230302e302f32332d3233203d3e20323636343537.roa
File:                     3137302e38322e3230302e302f32332d3233203d3e20323636343537.roa (raw, json)
Hash identifier:          UALx+SlLdLiJL02bzgV/he33Yi01ImgRgCnvIhh97Ek=
Subject key identifier:   25:A0:62:C5:CA:79:35:46:CE:5D:4D:00:E2:94:E5:76:12:7B:AE:F9
Certificate issuer:       /CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
Certificate serial:       4B6815C96B41F36A608853D0196D35D1D0EEB352
Authority key identifier: 1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230302e302f32332d3233203d3e20323636343537.roa
Signing time:             Fri 17 Jan 2025 11:46:30 +0000
ROA not before:           Fri 17 Jan 2025 11:41:30 +0000
ROA not after:            Fri 16 Jan 2026 11:46:30 +0000
asID:                     266457
IP address blocks:        170.82.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl
                          rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 10:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:68:15:c9:6b:41:f3:6a:60:88:53:d0:19:6d:35:d1:d0:ee:b3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
        Validity
            Not Before: Jan 17 11:41:30 2025 GMT
            Not After : Jan 16 11:46:30 2026 GMT
        Subject: CN=25A062C5CA793546CE5D4D00E294E576127BAEF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:7a:56:74:e2:19:6b:22:6c:a6:ea:cf:0e:
                    22:3e:11:5a:9a:42:97:ce:7c:fb:54:63:6e:04:c2:
                    6b:55:da:c2:cf:a7:34:8b:f0:ae:e6:fb:44:c4:6c:
                    b3:01:1b:65:66:02:26:b9:0f:b9:85:75:bb:a1:be:
                    88:b7:cb:f8:9a:cc:e6:59:7c:aa:5d:6d:de:29:55:
                    64:0e:5f:52:1f:30:25:04:25:44:30:13:69:b0:58:
                    6b:4c:18:51:a8:df:5a:a2:f8:76:5b:7a:63:a9:c7:
                    8b:90:10:e2:43:b9:08:56:c1:eb:b3:f7:77:5c:28:
                    b3:d1:27:76:ca:b3:80:8d:35:e6:fc:0d:49:37:f1:
                    ec:23:1f:2c:02:c5:cb:4e:e3:a0:06:6d:21:6e:09:
                    61:17:6b:50:6c:eb:ca:26:c2:af:19:73:c5:95:b4:
                    32:7f:ce:22:4c:b1:00:2f:e6:97:3d:b9:35:51:02:
                    38:a0:53:b3:0b:cb:45:cc:84:4f:c6:90:55:44:a2:
                    fa:9c:40:2b:1f:fb:7f:18:a7:2a:80:c4:ec:97:58:
                    e9:0a:ae:e7:c1:ab:a9:ef:b3:36:f6:ae:1c:e9:bb:
                    1f:6a:c5:84:06:8b:43:d6:9d:26:4a:5b:84:94:22:
                    6e:34:cb:ba:7a:b5:2b:41:de:da:5f:bf:05:8a:7c:
                    97:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A0:62:C5:CA:79:35:46:CE:5D:4D:00:E2:94:E5:76:12:7B:AE:F9
            X509v3 Authority Key Identifier:
                keyid:1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230302e302f32332d3233203d3e20323636343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:f8:92:9b:38:5a:f6:e1:9d:01:dc:f0:d1:c0:b4:35:02:e0:
         a6:95:52:20:ab:4d:e3:02:b1:e7:e2:a3:d4:35:0a:61:e9:f9:
         24:ef:f9:62:1b:29:a2:01:0c:95:b5:cd:38:b5:e4:5f:97:a5:
         46:21:14:15:30:9e:5e:6c:c5:87:93:1d:53:f1:5b:e2:90:b0:
         05:ff:d2:ae:99:02:de:d7:cf:70:27:44:43:09:3b:ea:b4:c8:
         e2:74:20:4f:e6:e1:de:56:d5:0f:7e:20:48:eb:40:94:87:96:
         02:84:f6:71:43:1f:4b:23:51:1e:a7:0d:4a:b9:b2:ee:c5:94:
         ce:fa:c5:1c:7e:b0:98:40:ef:3b:0d:e7:c6:89:ed:f4:cd:c1:
         5e:c9:e9:f2:98:ee:ea:f7:40:27:ed:96:e6:89:f0:62:70:80:
         00:61:06:8b:80:a2:4b:6e:5f:6e:b5:ef:9e:89:3d:8a:04:ed:
         df:b9:82:0a:63:89:69:16:da:20:c5:ff:3e:c2:9a:8d:fa:26:
         51:cf:b0:8c:3b:74:4a:1a:2f:c4:b4:57:69:2a:0c:2e:a6:be:
         c3:8d:6b:57:a8:75:74:c7:5a:66:b2:92:ca:19:1e:b8:6c:a7:
         fe:c4:1c:50:b8:79:8d:b8:db:44:b7:cd:d6:99:f4:e5:32:f8:
         2b:00:ac:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:20:07 2025 by rpki-client