Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32342d3234203d3e203631373937.roa
File:                     3137302e3234362e3233322e302f32342d3234203d3e203631373937.roa (raw, json)
Hash identifier:          THHBjE3exJns1OtGOwxlGWH02O5jXQjsvmoWZhWjVRk=
Subject key identifier:   50:85:36:28:89:6A:B8:43:B2:A9:DD:3D:E7:08:43:0E:C5:14:05:D0
Certificate issuer:       /CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
Certificate serial:       703AE1C2565D846AD0A979329E431464F50314D0
Authority key identifier: FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32342d3234203d3e203631373937.roa
Signing time:             Fri 06 Jun 2025 11:44:49 +0000
ROA not before:           Fri 06 Jun 2025 11:39:49 +0000
ROA not after:            Fri 05 Jun 2026 11:44:49 +0000
asID:                     61797
IP address blocks:        170.246.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3a:e1:c2:56:5d:84:6a:d0:a9:79:32:9e:43:14:64:f5:03:14:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
        Validity
            Not Before: Jun  6 11:39:49 2025 GMT
            Not After : Jun  5 11:44:49 2026 GMT
        Subject: CN=50853628896AB843B2A9DD3DE708430EC51405D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:f7:28:85:fc:fe:98:d3:8d:aa:d8:d1:93:
                    fb:3b:d2:4d:a6:63:71:52:5a:e5:f2:78:e7:67:ec:
                    af:f7:d5:d4:0c:e4:56:3c:25:d5:18:43:86:2b:bd:
                    82:ba:98:0f:fa:10:7c:76:c4:d3:b4:23:17:76:ae:
                    d6:44:76:b7:d5:f8:fd:21:6c:0c:00:ec:ec:74:98:
                    27:5f:35:87:42:b8:85:34:01:95:3d:13:cc:eb:07:
                    a5:74:b5:1e:8d:84:a6:ef:32:3c:16:92:81:62:cb:
                    29:82:1e:b3:d4:d1:c0:16:3a:b4:53:a0:cf:7c:26:
                    0d:81:22:61:59:ca:77:4c:7b:72:5c:f5:b0:40:da:
                    7f:f2:c9:fa:d4:41:bc:95:b6:9b:9c:f3:d6:f4:b4:
                    21:65:6a:7c:e2:52:76:58:4e:25:e8:ba:dc:04:f9:
                    a6:9b:8b:28:07:49:5a:81:64:f9:12:cd:ae:27:c6:
                    84:fa:8d:b0:15:dd:e9:e7:0f:aa:d7:a2:72:86:32:
                    1b:20:20:b2:65:f4:8c:5c:9d:51:20:21:c1:53:d4:
                    eb:86:62:00:c4:71:73:27:bf:5c:16:06:35:63:0f:
                    7c:d1:25:46:1e:e4:a5:cc:54:f8:c1:47:78:04:b3:
                    e3:49:10:d0:1f:21:9a:1c:eb:16:0e:ec:85:f7:73:
                    64:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:85:36:28:89:6A:B8:43:B2:A9:DD:3D:E7:08:43:0E:C5:14:05:D0
            X509v3 Authority Key Identifier:
                keyid:FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32342d3234203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:a9:b5:da:97:cf:3d:2f:94:ab:6b:ca:cd:5e:74:92:b8:57:
         29:c0:78:77:77:ff:0d:02:84:1d:cf:65:88:59:5b:72:b3:d9:
         fd:9f:af:98:8f:a2:ad:fa:23:02:ec:31:e2:2d:10:c0:36:bf:
         b6:45:8e:2a:c7:36:b3:54:51:08:e3:9c:66:5a:c0:08:a0:d4:
         c1:d8:cb:26:79:b2:9a:21:39:0d:d1:5c:ee:5b:f6:72:42:6a:
         4a:7a:f4:2b:ef:6a:05:fe:a9:51:62:b1:22:0a:68:79:48:35:
         8a:df:d9:9d:12:8a:b7:0b:f1:1f:fd:aa:58:83:7d:0b:88:5c:
         40:b7:00:5f:49:54:a4:27:18:17:78:bf:2d:4a:99:7f:5d:3b:
         3f:b4:8d:f5:fb:00:e0:bd:dc:6a:0a:5b:a6:1e:cd:c2:70:d7:
         3b:72:6b:52:72:0c:bd:fa:00:6a:33:bc:6a:13:e4:99:ad:ba:
         96:76:2e:59:81:24:56:40:79:1b:89:da:84:93:1d:05:36:3f:
         59:2f:15:e5:7b:59:61:41:67:f3:85:b8:4b:e9:48:ae:2e:07:
         5f:88:cf:43:b3:a5:ad:93:ba:59:47:54:50:4d:a7:cb:64:6e:
         97:4b:ac:14:2c:9e:95:3e:b7:a3:83:9f:66:5c:f9:d6:7a:ed:
         85:d6:92:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:32:43 2025 by rpki-client