Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa
File:                     3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (raw, json)
Hash identifier:          GZELRNfuplahvPNzTKoCXKCGe7m/TvcDFJFlJBobK9k=
Subject key identifier:   F2:DD:CF:30:12:3A:41:A3:8B:7D:AF:0F:B7:46:A4:A8:45:CD:5D:AE
Certificate issuer:       /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Certificate serial:       5A8CE6A4AA47049A62E5E5CE55CAA6671901AECA
Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa
Signing time:             Thu 06 Mar 2025 15:33:22 +0000
ROA not before:           Thu 06 Mar 2025 15:28:22 +0000
ROA not after:            Thu 05 Mar 2026 15:33:22 +0000
asID:                     264233
IP address blocks:        170.80.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl
                          rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8c:e6:a4:aa:47:04:9a:62:e5:e5:ce:55:ca:a6:67:19:01:ae:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
        Validity
            Not Before: Mar  6 15:28:22 2025 GMT
            Not After : Mar  5 15:33:22 2026 GMT
        Subject: CN=F2DDCF30123A41A38B7DAF0FB746A4A845CD5DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:22:30:64:2e:3f:a5:98:1f:30:5b:cc:04:
                    f4:15:5a:c7:98:ac:fc:46:79:42:f1:1f:8e:a1:9e:
                    0f:74:5f:25:88:31:8d:da:db:09:3e:d9:d3:f3:61:
                    92:03:3d:6c:62:b1:b2:99:8a:3c:a1:a5:34:50:5c:
                    bb:ae:db:23:ca:f7:74:ca:c9:14:63:0f:0f:07:18:
                    4b:98:ad:c6:a3:fa:63:7e:04:0c:7a:1d:d0:2d:ab:
                    75:e5:de:2b:28:b2:e6:0d:4d:53:2d:b2:ee:34:32:
                    56:44:e6:aa:50:1e:e5:71:5d:13:a6:f3:66:49:98:
                    84:0d:00:b0:97:6a:24:50:f9:a8:73:00:ee:15:dd:
                    aa:ab:4f:5a:57:34:17:b1:05:d9:15:28:fe:17:78:
                    bb:77:a6:f4:8b:4a:b0:05:58:2a:91:b0:b0:49:41:
                    55:c2:12:b7:8b:c4:f4:f8:08:ad:89:7c:83:21:80:
                    84:42:72:a3:ce:fe:81:c1:ab:02:7e:74:8a:26:81:
                    af:0f:9c:5d:23:27:2c:b0:98:b7:3d:d5:6c:18:39:
                    30:f1:55:8c:0f:af:25:1a:f8:8a:66:8b:0b:b5:07:
                    f7:eb:ec:4b:de:c0:05:20:16:e8:0a:b6:29:7d:d6:
                    d8:ca:cd:ff:8b:66:f7:33:c9:e6:48:6d:a5:af:3b:
                    fb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DD:CF:30:12:3A:41:A3:8B:7D:AF:0F:B7:46:A4:A8:45:CD:5D:AE
            X509v3 Authority Key Identifier:
                keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:dc:f4:a8:7e:e6:3b:10:02:58:af:bd:1b:64:1e:85:43:25:
         1f:99:e9:6f:0d:12:49:69:f3:5b:e6:d1:16:1a:a9:cb:13:8e:
         51:aa:41:8d:9c:a6:4d:58:f0:17:a6:ae:54:fe:cc:e1:e1:a9:
         f4:8d:b3:76:25:01:55:e9:3e:b4:55:0a:95:7b:fc:a7:35:1f:
         29:87:38:c9:ca:79:63:54:1a:55:09:f5:ff:db:fd:c7:0b:ac:
         3f:43:72:4a:56:1c:40:c1:33:32:a8:3c:24:89:c7:67:a3:56:
         1f:6c:d8:88:ce:85:0d:bf:a5:5f:96:0f:ae:66:6a:af:36:eb:
         2d:d1:de:6a:c8:99:ee:55:c6:31:ef:c1:cc:de:25:96:f1:d1:
         6c:a6:5e:d4:e8:a3:7a:e8:7b:ae:49:52:65:ae:a3:49:da:90:
         44:ce:c3:ff:20:dd:2f:6e:e5:8a:99:de:91:c5:4a:42:41:a7:
         89:2d:3b:90:88:fb:2c:8c:54:e4:24:39:bd:c3:74:25:19:d1:
         c3:3e:ce:76:e8:97:df:44:37:80:4f:61:5c:9f:73:f1:b9:72:
         98:09:15:39:59:74:41:04:33:39:22:c4:44:85:a7:10:6a:30:
         0f:a0:45:1e:52:c7:3e:28:27:b2:33:70:9c:9d:38:91:da:06:
         ad:14:33:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:13 2025 by rpki-client