Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130322e302f32332d3233203d3e20323634393637.roa
File:                     3137302e302e3130322e302f32332d3233203d3e20323634393637.roa (raw, json)
Hash identifier:          3v3De93Fh5ZNtrUOtz0+3dEednb1p+hQC6tLX6BeF9s=
Subject key identifier:   4C:3E:54:2C:B2:54:72:C2:EC:DB:31:54:54:59:7A:20:A4:28:E4:DC
Certificate issuer:       /CN=26F1864FE8FB04F586F022A4A61BDEB4D05ECF86
Certificate serial:       365FA34E109E5FDFA3932662EE7DEB40E0D8A444
Authority key identifier: 26:F1:86:4F:E8:FB:04:F5:86:F0:22:A4:A6:1B:DE:B4:D0:5E:CF:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130322e302f32332d3233203d3e20323634393637.roa
Signing time:             Wed 21 May 2025 20:42:27 +0000
ROA not before:           Wed 21 May 2025 20:37:27 +0000
ROA not after:            Wed 20 May 2026 20:42:27 +0000
asID:                     264967
IP address blocks:        170.0.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.crl
                          rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 21:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5f:a3:4e:10:9e:5f:df:a3:93:26:62:ee:7d:eb:40:e0:d8:a4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F1864FE8FB04F586F022A4A61BDEB4D05ECF86
        Validity
            Not Before: May 21 20:37:27 2025 GMT
            Not After : May 20 20:42:27 2026 GMT
        Subject: CN=4C3E542CB25472C2ECDB315454597A20A428E4DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:fb:51:fa:12:70:d6:62:ed:b3:21:8c:56:
                    6d:87:f3:7a:75:bf:e9:48:4f:2a:d2:f4:a4:fd:d6:
                    e4:3c:f0:48:c7:ae:2f:53:93:d2:80:f5:19:9b:b4:
                    98:d0:51:86:e1:6e:eb:2d:01:28:55:30:c0:68:f9:
                    f9:c8:a7:fa:cb:9e:b0:67:34:82:ed:1e:a3:ca:2b:
                    7d:6f:c9:e6:22:6b:4e:e6:89:7a:4d:50:03:e6:51:
                    9f:ae:61:6a:d3:6b:9a:40:39:04:47:84:aa:f4:e9:
                    ac:26:e5:df:e7:2c:fc:bf:98:ff:88:b3:62:16:46:
                    f1:6c:fb:b8:7c:95:b0:33:db:7e:d9:f8:00:33:11:
                    5b:57:6a:dd:73:64:38:e3:9c:26:44:b5:4a:65:5f:
                    43:09:1d:82:47:7a:a7:bf:b7:f7:b0:7f:6e:b8:1b:
                    fa:ea:4d:f5:80:89:e1:74:45:1d:3a:b8:ca:a9:08:
                    1d:19:e9:31:1a:55:01:c0:c1:77:aa:c0:56:e1:ff:
                    79:d8:58:fc:83:f9:87:6e:ce:be:57:d8:ae:b3:c4:
                    5f:ad:d4:4d:e4:a5:14:46:60:de:0e:c2:39:b3:29:
                    a8:a5:b5:01:fd:d3:66:10:49:07:f9:5d:ee:e1:9b:
                    4a:bf:59:e0:e2:cc:7b:a7:f0:fe:c0:6b:f9:ef:03:
                    0d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3E:54:2C:B2:54:72:C2:EC:DB:31:54:54:59:7A:20:A4:28:E4:DC
            X509v3 Authority Key Identifier:
                keyid:26:F1:86:4F:E8:FB:04:F5:86:F0:22:A4:A6:1B:DE:B4:D0:5E:CF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130322e302f32332d3233203d3e20323634393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:5d:e4:94:58:b6:1b:2a:2d:77:b3:33:88:ac:38:46:7b:de:
         b5:f4:07:0e:b1:cc:da:03:8a:7e:c2:70:ba:6f:e6:ab:7d:b7:
         12:9c:86:1c:fb:40:a7:bb:f8:64:e2:5e:f8:e4:82:11:99:30:
         69:fb:97:a7:09:06:65:69:f4:71:21:c8:e5:30:64:5a:49:82:
         40:1b:02:ae:27:b7:c2:d5:a7:fe:75:85:45:48:4c:e6:cf:75:
         cb:b2:61:90:e1:e3:83:00:8d:eb:9c:fb:d3:12:6d:a5:3e:2a:
         94:f8:11:cf:8a:da:3b:ff:47:b2:16:03:23:ba:79:0e:d4:23:
         74:3a:39:79:8b:59:31:0f:b3:46:ed:6e:12:dc:92:c7:1e:05:
         15:96:da:71:47:ff:5b:98:0f:8e:7f:5a:41:2c:1e:cb:b9:e6:
         65:5d:77:be:ce:ca:ff:ae:38:7b:81:64:52:2f:78:b6:92:61:
         bc:ca:58:25:b1:e9:ee:43:d5:5e:2d:47:d0:c6:0b:a4:88:1b:
         40:7c:dd:ef:ac:38:91:94:91:f5:b1:2c:d8:ef:fa:8a:15:1f:
         6f:cc:c6:ae:af:41:03:38:2e:e3:a5:c6:d4:0f:2d:6c:d3:c1:
         3d:a8:0c:f9:f1:f0:1a:9c:91:b8:04:70:bb:00:01:75:61:9a:
         4b:5e:92:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:37:02 2025 by rpki-client