Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233342e302f32342d3234203d3e203631373937.roa
File:                     3137302e3234362e3233342e302f32342d3234203d3e203631373937.roa (raw, json)
Hash identifier:          9fKe4nPf7rOlpS2bxIfWpVQE+4hR6sttxPgtmF81DyI=
Subject key identifier:   AD:9B:97:35:B6:A0:C9:B9:A4:17:02:36:93:E7:F7:9A:15:AA:30:58
Certificate issuer:       /CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
Certificate serial:       79668CDA6195B802504FEF54D7C85AD2D2E4D4E4
Authority key identifier: FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233342e302f32342d3234203d3e203631373937.roa
Signing time:             Fri 06 Jun 2025 11:44:57 +0000
ROA not before:           Fri 06 Jun 2025 11:39:57 +0000
ROA not after:            Fri 05 Jun 2026 11:44:57 +0000
asID:                     61797
IP address blocks:        170.246.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 19:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:66:8c:da:61:95:b8:02:50:4f:ef:54:d7:c8:5a:d2:d2:e4:d4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
        Validity
            Not Before: Jun  6 11:39:57 2025 GMT
            Not After : Jun  5 11:44:57 2026 GMT
        Subject: CN=AD9B9735B6A0C9B9A417023693E7F79A15AA3058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:95:ed:bd:91:3e:d7:3e:c1:b6:4d:89:78:a2:
                    a4:06:a7:fe:12:2d:94:f0:45:e3:ba:29:58:fd:48:
                    5d:c5:f8:25:e2:fe:2f:3b:5e:8e:26:e1:5b:44:5e:
                    8f:95:17:00:c7:4e:1a:9b:4a:9a:a1:27:22:37:b4:
                    36:70:96:a0:90:43:52:e9:7e:71:5a:e3:d6:50:62:
                    74:b0:60:05:b2:a1:7c:b6:9b:2b:8f:eb:61:95:c2:
                    f1:24:bb:f9:97:b0:c3:3d:1d:a9:d4:54:8f:05:e5:
                    74:f4:78:3a:12:2b:42:31:5e:16:8f:03:9f:fe:d0:
                    88:46:5d:e4:26:46:4a:f8:bb:48:ad:17:39:3d:7d:
                    f6:c7:bd:ff:32:d6:92:6a:99:c3:ff:a9:58:ee:92:
                    6f:0a:2f:66:e5:5a:d7:c8:11:9b:00:34:4d:96:a6:
                    45:20:05:09:8a:bd:09:1a:fa:a6:98:86:c9:c1:88:
                    95:ab:16:c3:40:95:f8:d7:43:8f:a7:5f:74:b4:49:
                    83:07:f0:0d:0f:ae:6a:37:c3:c3:28:5b:15:a9:5e:
                    d2:53:e1:91:37:f6:03:9f:9a:54:fb:ec:f6:e5:1a:
                    32:89:cf:05:32:6e:fc:94:f1:42:8e:67:65:f5:70:
                    d8:a2:fe:34:f8:10:5d:10:28:ec:8d:27:ed:0d:76:
                    be:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9B:97:35:B6:A0:C9:B9:A4:17:02:36:93:E7:F7:9A:15:AA:30:58
            X509v3 Authority Key Identifier:
                keyid:FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233342e302f32342d3234203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:10:2a:73:39:01:f3:a0:f5:76:54:90:f9:c5:37:e9:14:20:
         91:5b:6e:94:11:94:ce:ab:06:db:9d:f2:b7:88:65:a4:58:33:
         dd:74:2e:9f:9f:e7:a4:bb:d5:1f:29:42:34:e5:5f:79:dc:0c:
         6b:4e:5d:9b:27:1e:87:db:eb:d8:cc:70:2c:12:6c:e7:41:6f:
         54:34:cf:49:2a:4c:f6:41:61:76:dc:cc:36:81:e3:b5:7b:96:
         46:8c:ef:14:30:fb:6b:cc:13:66:78:45:fc:1c:04:30:44:74:
         d1:22:71:5b:2f:76:d5:e1:5f:41:3a:4d:56:c7:4b:4a:6a:d1:
         54:ac:d4:a7:a4:03:27:8d:16:2f:2f:9e:bb:85:20:31:07:c2:
         d6:ce:b4:33:88:48:6f:65:43:16:e5:f2:42:39:88:f9:93:a8:
         13:cc:72:03:2a:79:a2:42:ff:c6:f6:95:8d:8b:02:a3:91:96:
         8f:02:36:1d:ed:6a:c2:2e:7c:0f:32:4d:8b:91:04:5f:e7:18:
         77:c1:70:ee:90:6a:d6:1b:46:f6:1c:80:eb:1c:59:59:25:e5:
         b7:74:08:8f:f6:aa:0b:28:72:cd:41:7b:51:33:0d:d5:d0:6b:
         fe:89:ec:3a:0c:ff:81:df:df:56:d6:29:07:e9:cb:f8:6f:44:
         16:4e:e0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:07:08 2025 by rpki-client