Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137302e3135302e38342e302f32322d3234203d3e20323633363439.roa
File:                     3137302e3135302e38342e302f32322d3234203d3e20323633363439.roa (raw, json)
Hash identifier:          rJ828zUX4cA5UZPEtkXNI6x5QdEBrMrPcfhZ9TfL/v8=
Subject key identifier:   02:5C:75:42:7E:5D:B2:B1:A5:E2:28:9A:E9:01:6D:EB:23:80:E1:40
Certificate issuer:       /CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
Certificate serial:       18192E93AF0704BFE20CCD461A4579F66973E4E7
Authority key identifier: 6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137302e3135302e38342e302f32322d3234203d3e20323633363439.roa
Signing time:             Wed 05 Mar 2025 21:04:32 +0000
ROA not before:           Wed 05 Mar 2025 20:59:32 +0000
ROA not after:            Wed 04 Mar 2026 21:04:32 +0000
asID:                     263649
IP address blocks:        170.150.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl
                          rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 02:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:19:2e:93:af:07:04:bf:e2:0c:cd:46:1a:45:79:f6:69:73:e4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
        Validity
            Not Before: Mar  5 20:59:32 2025 GMT
            Not After : Mar  4 21:04:32 2026 GMT
        Subject: CN=025C75427E5DB2B1A5E2289AE9016DEB2380E140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:26:9b:10:de:eb:d0:4f:76:5c:ed:bd:f6:
                    99:d6:19:15:1c:da:82:c1:05:da:3b:8d:52:da:3d:
                    7e:00:81:21:40:59:2f:08:a8:59:76:b0:2a:8d:e4:
                    33:4f:bb:49:fa:a6:ea:e0:03:ec:66:6d:fe:8e:00:
                    43:8a:4d:fe:ad:f1:e8:46:87:ab:2c:b8:0f:7c:05:
                    60:5d:06:c8:5e:46:df:54:8d:7c:07:33:2b:de:e4:
                    90:cf:b6:70:76:88:fe:7b:3b:e3:b8:b0:7c:55:72:
                    90:1d:6d:18:bb:3b:7c:b0:a2:0c:91:23:ac:c7:40:
                    d0:46:c0:93:09:61:a0:67:22:7c:7f:cf:bd:4f:c4:
                    2a:28:69:92:dc:3e:a1:c2:8d:e1:b7:ce:a5:de:6e:
                    17:ee:de:5c:f3:47:75:e4:1b:b0:d0:03:61:0b:92:
                    0d:67:85:47:57:41:a1:54:a5:f5:86:89:6b:37:ae:
                    00:7a:de:01:d6:b3:2e:81:34:dd:70:7c:bc:88:63:
                    ac:e0:ac:4f:fa:d6:92:85:10:83:74:f2:f3:4a:d7:
                    94:e0:5b:1d:0b:cb:ed:5e:ae:6b:50:11:02:fc:f7:
                    72:9f:e4:9b:60:af:fc:ee:73:43:ef:9e:8c:a4:17:
                    94:48:1d:c1:b2:a2:d6:fa:71:17:73:ed:25:b9:f1:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5C:75:42:7E:5D:B2:B1:A5:E2:28:9A:E9:01:6D:EB:23:80:E1:40
            X509v3 Authority Key Identifier:
                keyid:6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137302e3135302e38342e302f32322d3234203d3e20323633363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:65:d2:9a:76:2c:69:5b:ce:73:c1:d3:4e:a4:07:f0:db:4a:
         a5:ff:65:44:31:71:ff:9f:2f:f0:93:76:45:0f:1f:00:82:3c:
         bf:67:07:ae:d1:1d:18:53:4a:2f:70:9c:7b:57:bb:78:b2:a5:
         42:4c:6b:dd:b0:82:24:5d:04:25:6e:98:8d:ec:06:bd:46:76:
         91:f4:e2:7b:9c:38:f0:d8:2a:a7:ed:ca:d7:bb:4f:97:17:7c:
         3a:c5:ae:ed:09:3c:a0:f9:a1:1d:89:3e:fb:ab:fd:f3:ce:02:
         64:cb:86:7b:46:be:ef:93:9c:cb:14:d4:ae:ad:7f:bb:80:f2:
         dc:d3:51:8c:a3:10:c7:c6:a0:87:4e:1a:34:30:6b:df:af:1c:
         a1:15:64:34:4b:c7:42:da:59:fb:c4:61:f2:fc:7b:f3:e1:39:
         54:30:d1:b2:3b:8c:ed:df:8f:cb:76:60:ee:ef:0f:4d:de:8e:
         6a:63:19:ff:cd:38:93:6f:ca:3e:27:81:60:f7:56:12:cc:6b:
         cc:21:3d:1b:3a:5b:ab:eb:32:84:9f:f1:6e:dd:98:0d:52:39:
         01:9f:3b:32:b3:da:ef:92:9d:be:a1:90:59:9d:85:bd:6f:dd:
         1c:c6:d2:5a:7b:d5:0a:5a:43:f0:ad:20:48:97:fe:df:2a:e0:
         0d:9e:bf:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:40 2025 by rpki-client