Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa
File:                     3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa (raw, json)
Hash identifier:          SF9OtTMupNxkrACSlezG/YdrpKWJ+qI0lSdc/nkXNlU=
Subject key identifier:   22:AE:85:8F:6C:0A:A5:92:8C:D6:82:95:40:D0:C7:69:09:C6:2E:DE
Certificate issuer:       /CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
Certificate serial:       42F39F7FEF11E24241E840067C6DC3ADDCFDD97C
Authority key identifier: E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     264440
IP address blocks:        170.233.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl
                          rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f3:9f:7f:ef:11:e2:42:41:e8:40:06:7c:6d:c3:ad:dc:fd:d9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:98:79:54:1a:7c:9f:2f:ae:a4:f4:10:c0:aa:
                    5e:66:be:78:a1:85:68:2c:ec:f9:b2:25:f9:ce:80:
                    49:83:e1:5f:84:0e:24:a7:68:ab:c7:75:80:6a:ba:
                    9f:e3:eb:3e:79:45:52:03:ec:1f:25:d1:43:cd:f5:
                    39:aa:4e:a6:59:60:77:73:4d:97:83:e2:df:50:70:
                    bf:b0:99:66:65:28:9b:6e:5f:18:03:e4:51:f1:26:
                    b6:c3:c3:c6:01:41:ba:e0:0d:e2:57:f2:da:f7:e9:
                    33:cf:e5:be:33:09:92:53:d1:7f:0a:3e:84:fa:72:
                    27:93:85:cb:58:94:71:60:84:b7:fe:84:ea:dc:60:
                    8d:ff:6e:53:fd:50:e0:ed:ae:20:99:e0:de:a4:0d:
                    c8:cf:aa:68:b8:cd:90:95:4c:97:6b:07:96:81:27:
                    ac:e8:d3:56:ca:d2:e9:0b:2e:8d:55:24:69:e5:3b:
                    7d:b0:36:d6:85:b1:f1:f5:c0:a3:cd:22:32:cf:f2:
                    d2:ad:e9:ae:98:44:79:ca:a0:5c:54:69:03:bb:c5:
                    d0:3f:fe:89:18:79:f6:07:7b:c7:c8:a7:91:d6:77:
                    fb:e7:12:be:d0:f2:49:ba:78:61:7c:97:e7:c1:32:
                    90:2b:15:8d:15:32:cd:cf:1f:53:d4:9b:37:da:3f:
                    36:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AE:85:8F:6C:0A:A5:92:8C:D6:82:95:40:D0:C7:69:09:C6:2E:DE
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3137302e3233332e3135362e302f32322d3234203d3e20323634343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:be:2c:d6:02:87:28:04:76:3b:40:46:88:a8:af:72:7b:0d:
         79:76:db:b7:5c:75:38:b2:5b:9f:9c:9e:ec:c4:34:36:69:a7:
         40:91:72:9e:69:29:ed:62:72:98:71:6e:8b:94:ee:55:ac:4a:
         38:ff:41:72:66:52:36:2e:2f:d1:9d:12:d1:26:6c:13:4a:87:
         cc:ed:42:b3:30:8f:ce:ef:c9:85:33:43:8c:86:56:28:08:1d:
         30:27:c3:65:de:90:44:86:b0:bc:92:54:5f:38:05:1b:87:ce:
         02:6b:24:77:34:81:3f:62:9d:1f:d1:25:d1:f0:89:dc:0d:67:
         ac:20:be:77:97:a7:4e:9a:51:88:2f:d6:4d:af:19:ef:54:8f:
         fe:50:f1:a4:5a:c9:6b:1d:f9:10:bb:2b:01:17:09:11:f6:e1:
         55:3c:f8:1f:8d:b7:82:16:ae:56:5c:36:5a:a1:da:7a:e3:71:
         85:c9:3c:35:e1:1b:7d:83:8d:55:9b:ae:e9:bd:f3:60:8f:eb:
         a8:09:9f:13:20:80:4a:fa:07:f5:cb:80:09:cb:8c:9b:9e:89:
         52:88:54:e8:0f:4d:28:43:86:10:51:da:e5:4c:23:7c:08:89:
         93:72:b5:9a:09:8b:71:08:e7:be:c8:6c:a3:c2:cc:a9:6a:2c:
         f9:54:71:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:23 2025 by rpki-client