Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32332d3233203d3e20323636353134.roa
File:                     3137302e3234342e3233342e302f32332d3233203d3e20323636353134.roa (raw, json)
Hash identifier:          Aj+C0UGXWd6z7fjJlwqi0f0Acwn+X+pgVsu0eV8M6lI=
Subject key identifier:   6E:A2:91:10:43:0D:B8:F2:AC:07:DC:13:9A:9B:5E:2B:77:95:59:0F
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       131DFE6AD4306C6EEBEFC7D6FB62D1F18EAAABDA
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32332d3233203d3e20323636353134.roa
Signing time:             Thu 06 Mar 2025 08:50:07 +0000
ROA not before:           Thu 06 Mar 2025 08:45:07 +0000
ROA not after:            Thu 05 Mar 2026 08:50:07 +0000
asID:                     266514
IP address blocks:        170.244.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1d:fe:6a:d4:30:6c:6e:eb:ef:c7:d6:fb:62:d1:f1:8e:aa:ab:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Mar  6 08:45:07 2025 GMT
            Not After : Mar  5 08:50:07 2026 GMT
        Subject: CN=6EA29110430DB8F2AC07DC139A9B5E2B7795590F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9e:a8:9e:37:c5:5d:f1:15:a1:77:7b:8d:77:
                    8e:79:ef:c4:65:2e:6c:35:d0:d6:ec:d5:e0:e4:15:
                    64:44:57:8b:a3:ec:f2:11:16:13:4b:aa:1b:ad:48:
                    83:15:32:c1:d1:4d:d7:26:e4:9e:e3:55:1d:bf:d2:
                    3a:17:f0:36:56:08:46:7f:9c:eb:e7:96:7b:5d:f5:
                    74:66:98:7e:6e:7a:64:c1:ac:16:91:7a:1b:48:79:
                    21:2d:b1:d5:74:43:b2:9d:26:53:fb:d0:ee:f8:25:
                    83:71:fe:91:85:9d:27:51:12:16:b8:fa:12:73:f2:
                    4d:33:37:ab:7a:9c:d6:6a:a5:cd:ac:75:e3:32:48:
                    15:e0:1a:7a:7c:88:51:df:3e:c9:d8:3f:c9:2e:17:
                    0a:ef:57:04:a6:88:2c:f7:29:15:5b:cb:1e:6c:1a:
                    96:44:c1:0b:b1:2e:e4:cf:e6:be:02:c5:c4:bf:23:
                    d4:50:ef:7f:ca:e8:47:da:37:fc:56:c3:e5:45:d8:
                    29:6a:58:f8:f7:68:18:3f:ca:5b:bf:75:dc:66:35:
                    46:21:fb:80:07:47:83:05:71:41:c0:76:d4:be:b3:
                    da:4e:1e:42:77:c8:7b:39:6b:f6:c3:4c:e0:fc:33:
                    16:a4:b7:ac:1a:e5:c8:ab:c9:27:39:2d:57:ca:1f:
                    11:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A2:91:10:43:0D:B8:F2:AC:07:DC:13:9A:9B:5E:2B:77:95:59:0F
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32332d3233203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:df:d1:9e:80:76:72:d6:e1:37:ae:a4:05:32:6e:51:ea:29:
         26:dc:00:72:5a:7a:f7:fe:40:ea:c6:b4:7f:28:f8:cb:f3:f6:
         ed:ff:b3:69:31:fe:87:85:31:a4:65:89:5a:d4:3d:b7:8d:d1:
         80:12:93:50:78:0c:67:cb:c5:9b:c0:02:42:13:a9:51:f4:dd:
         78:e9:7b:67:80:d9:aa:97:60:53:21:f4:55:21:95:bb:63:6f:
         8e:c0:7c:c4:e6:2f:d9:06:1d:a1:a0:cb:50:5d:a0:4b:5e:40:
         54:fa:ed:dd:b3:56:ee:42:5d:d6:75:a5:81:16:7d:83:c7:60:
         c6:46:4a:91:35:6c:fb:c5:60:25:f3:c0:d0:83:0a:be:a6:79:
         82:f1:6b:e9:fd:6f:c4:38:a4:87:e8:b6:10:bc:49:d0:4d:0a:
         4e:9c:b1:0a:c1:3a:90:22:a0:ed:4a:de:ef:d2:37:f6:09:8d:
         4a:26:bc:05:2a:7e:96:7a:e9:42:31:e4:c3:ff:6f:70:d2:77:
         19:ed:d9:ce:fb:7d:de:da:94:fd:7a:6e:00:3e:cd:35:0d:3c:
         ac:1f:05:0f:35:09:71:1d:3a:18:48:29:93:1d:82:1d:c6:66:
         ea:e3:09:34:7c:09:e3:48:6d:f0:d5:16:74:99:03:ca:01:30:
         eb:61:a9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:43 2025 by rpki-client