Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233392e302f32342d3234203d3e20323731373031.roa
File:                     3137302e37392e3233392e302f32342d3234203d3e20323731373031.roa (raw, json)
Hash identifier:          R2bY9sJW8lOWWq6F3LgmkDvMIgraft7DvUbgGTyDAoo=
Subject key identifier:   FC:41:82:FA:F0:D4:B7:C2:2F:9B:65:DA:02:45:BB:39:6B:38:51:69
Certificate issuer:       /CN=05563772FA5F7F02E46B10D42952096452B02F7E
Certificate serial:       34734313928626CF8F96443DC643FCBF904CD4F0
Authority key identifier: 05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233392e302f32342d3234203d3e20323731373031.roa
Signing time:             Tue 13 May 2025 14:00:23 +0000
ROA not before:           Tue 13 May 2025 13:55:23 +0000
ROA not after:            Tue 12 May 2026 14:00:23 +0000
asID:                     271701
IP address blocks:        170.79.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl
                          rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 17:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:73:43:13:92:86:26:cf:8f:96:44:3d:c6:43:fc:bf:90:4c:d4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05563772FA5F7F02E46B10D42952096452B02F7E
        Validity
            Not Before: May 13 13:55:23 2025 GMT
            Not After : May 12 14:00:23 2026 GMT
        Subject: CN=FC4182FAF0D4B7C22F9B65DA0245BB396B385169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d3:8c:ea:a5:10:7b:6f:26:03:ba:df:be:77:
                    37:a6:53:3d:29:98:0d:d9:ff:51:c5:c4:fb:e3:fe:
                    63:36:24:02:f6:8d:c2:af:9c:73:b7:01:fe:1c:e3:
                    7f:49:c9:5f:82:2f:72:d7:6b:b6:6e:c1:71:6b:36:
                    78:2b:b0:0f:c1:e8:1c:5f:02:1e:63:5c:6d:59:39:
                    60:95:c2:be:c5:8a:bb:cc:50:75:e1:cc:58:43:47:
                    a3:a8:d8:27:88:1d:77:e3:82:ba:b3:e5:13:c3:fb:
                    89:4a:ea:7f:92:61:74:aa:66:db:63:18:3e:2e:21:
                    d4:65:01:01:8b:8f:09:67:5a:9a:f7:37:b9:d6:b1:
                    ed:95:7d:9e:6f:61:af:95:7d:d5:70:bc:aa:cc:eb:
                    a7:a2:3c:c1:b6:91:ab:c2:b4:4b:74:37:a8:dd:c2:
                    c0:fc:e0:b1:e8:ae:b2:16:93:80:ab:36:a0:1d:a1:
                    49:0e:b3:2a:fa:bd:e1:b5:02:57:ab:a9:6f:43:33:
                    60:ef:9b:23:9a:11:73:e3:16:25:19:52:ae:12:3c:
                    48:10:8c:ca:be:e8:68:31:27:d5:85:00:d6:bf:3b:
                    14:2d:e7:b0:47:af:75:0e:d9:1b:ab:11:75:e9:99:
                    7a:e2:bb:0a:9d:f9:e4:c9:71:79:2e:5e:cf:aa:95:
                    02:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:41:82:FA:F0:D4:B7:C2:2F:9B:65:DA:02:45:BB:39:6B:38:51:69
            X509v3 Authority Key Identifier:
                keyid:05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233392e302f32342d3234203d3e20323731373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:d5:21:91:e5:98:14:00:b1:15:f0:20:5f:27:82:5d:cb:75:
         be:4c:4a:c2:fd:3c:42:6b:fe:02:e5:b3:24:76:1d:7b:75:5c:
         2c:95:6c:cf:9f:d4:ba:2c:8b:f9:92:f6:5e:f9:27:9e:16:6e:
         2f:48:22:af:39:59:fe:78:7e:f2:ac:b6:4d:9a:ff:b1:95:87:
         69:f0:17:06:44:a1:7d:af:b1:3a:6e:75:86:ad:d9:7e:3c:a1:
         5e:36:39:a6:d8:09:30:98:75:58:51:04:af:ca:e2:d8:43:ed:
         0a:a8:e7:1a:d1:ce:cb:29:37:de:7c:03:d8:79:27:c6:0d:a0:
         56:9d:20:57:9e:b1:6b:9c:7d:15:0f:c6:b8:72:98:66:70:9d:
         b3:30:f0:56:56:59:6c:f4:49:99:8e:cf:a7:de:07:8b:d2:ab:
         ce:d9:20:c0:34:3c:89:2d:d2:f2:34:d6:a3:40:5f:08:8c:20:
         43:bb:e6:15:14:3a:4a:75:ff:90:9a:23:eb:30:5b:67:42:52:
         5f:93:c2:93:89:ac:0a:73:19:e4:f5:ca:1f:a6:c4:75:e2:6c:
         d4:18:b5:ef:78:03:45:3f:78:e3:a3:6d:12:43:b6:90:15:ad:
         af:59:55:c1:3e:c8:8e:f8:46:f4:61:a7:60:91:b8:b2:77:84:
         cd:f1:32:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:21:50 2025 by rpki-client