Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/3137302e38342e32342e302f32322d3332203d3e20323635303239.roa
File:                     3137302e38342e32342e302f32322d3332203d3e20323635303239.roa (raw, json)
Hash identifier:          6SFbmD9Am49Uue9GAKXbtK0BXa+1GDqmRXUer0F/z3c=
Subject key identifier:   CC:EA:3B:4C:C4:C3:8A:10:44:44:25:41:F9:15:ED:A9:29:9E:CE:80
Certificate issuer:       /CN=5F3969BC85188372D2CAFFD020E8133C1D23E4DD
Certificate serial:       6457F62739F1B2C1E1DEB68DE196B0299175535C
Authority key identifier: 5F:39:69:BC:85:18:83:72:D2:CA:FF:D0:20:E8:13:3C:1D:23:E4:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/3137302e38342e32342e302f32322d3332203d3e20323635303239.roa
Signing time:             Fri 21 Mar 2025 18:05:29 +0000
ROA not before:           Fri 21 Mar 2025 18:00:29 +0000
ROA not after:            Fri 20 Mar 2026 18:05:29 +0000
asID:                     265029
IP address blocks:        170.84.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.crl
                          rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 21:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:57:f6:27:39:f1:b2:c1:e1:de:b6:8d:e1:96:b0:29:91:75:53:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F3969BC85188372D2CAFFD020E8133C1D23E4DD
        Validity
            Not Before: Mar 21 18:00:29 2025 GMT
            Not After : Mar 20 18:05:29 2026 GMT
        Subject: CN=CCEA3B4CC4C38A1044442541F915EDA9299ECE80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:c1:ef:1f:e8:34:e6:51:3e:cc:7a:e0:e1:
                    bf:fb:46:35:a1:b0:2f:25:c8:ae:ec:c2:a4:0a:9a:
                    39:01:a7:38:ff:ee:0c:f3:e1:a9:a6:1f:5b:a4:28:
                    61:d3:05:ff:e8:57:bd:8b:be:2b:bf:56:21:b0:65:
                    a8:4f:ea:10:02:9a:17:b3:1b:ea:03:85:31:06:a2:
                    f1:95:b4:36:5e:63:72:b9:2e:34:09:b1:17:35:db:
                    76:d8:e8:67:cd:95:a3:e8:5c:bf:e9:14:85:a0:2a:
                    eb:0a:84:82:34:df:61:d9:6d:32:bb:bd:8e:dd:55:
                    99:b2:77:3c:76:bf:f3:c6:50:d3:55:7f:64:b9:57:
                    91:a2:ee:c8:63:55:c4:6c:dd:a5:19:df:c8:5d:7c:
                    01:a0:0b:61:11:66:5e:3c:99:f5:eb:b8:8c:fc:f2:
                    f9:a6:72:1b:c1:94:66:91:a0:85:bd:5f:57:3b:65:
                    bc:35:19:63:2f:56:52:e9:e5:dd:f9:38:a2:5c:20:
                    a7:8c:ff:60:dc:df:90:ad:3b:bb:7a:03:11:2e:92:
                    0b:cb:bf:b8:6e:03:7e:7b:0c:b1:2d:bf:02:75:6f:
                    f6:6b:68:0b:b7:d9:b2:06:5c:69:27:7c:78:a2:65:
                    71:07:b2:76:76:40:10:c3:38:ca:ab:ec:33:40:04:
                    6e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EA:3B:4C:C4:C3:8A:10:44:44:25:41:F9:15:ED:A9:29:9E:CE:80
            X509v3 Authority Key Identifier:
                keyid:5F:39:69:BC:85:18:83:72:D2:CA:FF:D0:20:E8:13:3C:1D:23:E4:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/3137302e38342e32342e302f32322d3332203d3e20323635303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:e4:f3:7c:b9:22:7e:96:b2:e5:89:d0:27:8b:f6:96:63:47:
         2d:ae:de:c4:02:08:c7:31:e2:f1:9a:3e:6f:68:3a:63:a5:fc:
         75:77:36:19:7e:32:40:16:cd:88:bc:6b:32:b6:b6:8a:54:b5:
         76:b2:cd:a6:16:19:69:8f:d1:65:3e:24:1a:aa:b6:ee:da:71:
         c8:ac:ed:4c:d9:ac:cc:45:b8:47:94:fd:65:a7:1e:b2:af:86:
         78:cd:8f:92:ce:79:1c:60:85:f5:f9:ae:c2:0f:91:26:37:3c:
         a9:79:16:43:eb:d1:7e:7d:3f:2a:e2:a2:2d:dc:fb:7d:0e:3f:
         7e:23:d6:fd:7b:e2:0d:45:e0:6f:a0:d7:27:3c:68:71:79:bd:
         a6:27:5a:24:b8:65:0e:78:f3:b7:8a:78:1e:f3:50:08:c6:dd:
         c3:9b:39:04:d4:19:ec:d0:94:e6:13:0a:07:b9:84:e4:5a:5c:
         d8:86:e2:bb:5d:5e:ed:03:c0:5a:10:60:31:69:f0:4c:41:77:
         be:50:94:01:18:3f:ae:de:8d:b7:fa:c2:63:91:70:9f:19:76:
         42:e6:09:43:e0:d7:6d:43:6d:fc:b8:57:a1:40:a1:36:de:73:
         35:ba:df:d3:01:fd:7a:c2:90:3f:e0:4b:c4:5f:0f:86:48:c4:
         3b:4e:d4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:14:37 2025 by rpki-client