Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137342e302f32332d3233203d3e20323632343835.roa
File:                     3137302e3233382e3137342e302f32332d3233203d3e20323632343835.roa (raw, json)
Hash identifier:          jiLexvt4fVHkOaGnSe7l5ILyLr556d1QKsGlCyh5IbY=
Subject key identifier:   F2:67:84:DE:2E:BD:AC:A2:47:14:8A:DB:A5:C4:08:1E:CE:1E:7D:81
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       656AEFDB77A13249214C89548689FA559487A0B5
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137342e302f32332d3233203d3e20323632343835.roa
Signing time:             Sat 28 Jun 2025 21:33:36 +0000
ROA not before:           Sat 28 Jun 2025 21:28:36 +0000
ROA not after:            Sat 27 Jun 2026 21:33:36 +0000
asID:                     262485
IP address blocks:        170.238.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 21:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6a:ef:db:77:a1:32:49:21:4c:89:54:86:89:fa:55:94:87:a0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jun 28 21:28:36 2025 GMT
            Not After : Jun 27 21:33:36 2026 GMT
        Subject: CN=F26784DE2EBDACA247148ADBA5C4081ECE1E7D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:95:78:92:37:54:4b:28:e4:fe:d6:04:3d:04:
                    c2:12:91:20:75:fd:27:d7:57:b6:a1:3f:f3:f2:27:
                    1e:0f:26:76:b4:fa:73:73:ac:94:10:6c:13:17:a7:
                    17:e9:b0:cb:aa:8d:06:a4:13:d5:38:7a:be:8e:94:
                    22:ee:22:ba:db:af:df:06:a8:89:c5:68:f8:35:36:
                    d5:e4:77:be:0e:b3:ad:53:b4:6f:87:fc:a7:ed:24:
                    3a:25:e0:44:fe:ac:24:9f:c5:b0:b2:34:e5:3c:84:
                    1f:fb:5a:51:c5:1f:2a:ce:be:d6:ae:4a:aa:03:7c:
                    05:76:81:f4:e7:34:78:18:40:27:9f:be:72:ca:ea:
                    e1:e0:80:7a:ad:87:fa:22:72:6b:6b:cf:9c:7b:f9:
                    e2:27:70:53:17:81:b3:3b:e3:f2:d2:b6:30:11:08:
                    63:69:f5:c5:3d:b7:5c:71:3d:50:08:c9:54:aa:db:
                    1c:b4:4e:3f:12:8a:aa:6b:da:f3:48:95:6b:26:2f:
                    cf:4b:bb:13:6f:25:a5:86:fc:26:6a:b2:45:b9:91:
                    2b:6e:83:5d:c2:1e:b3:1d:40:63:36:09:cd:d1:c2:
                    c0:ec:af:ec:3a:6b:93:87:c9:f5:9d:32:37:ac:8c:
                    48:0f:6b:d3:97:e2:7c:a4:2b:d7:fc:48:e7:bf:90:
                    b4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:67:84:DE:2E:BD:AC:A2:47:14:8A:DB:A5:C4:08:1E:CE:1E:7D:81
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137342e302f32332d3233203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:25:9f:6e:bb:b3:96:10:98:56:32:ee:46:1d:64:0e:8c:53:
         cc:2a:9a:1e:e9:ff:11:c5:0e:7c:cd:4f:d0:b4:33:4b:2b:68:
         a1:96:4e:14:ad:2a:1c:a6:6c:41:35:0a:53:ff:b3:2a:42:c1:
         da:04:e7:1e:d3:44:64:84:e4:ca:2e:d8:67:d2:11:53:16:79:
         b5:37:4f:69:4b:9b:77:5d:b5:ac:0f:df:d4:1a:3a:fc:79:f1:
         22:6d:e7:b2:56:c6:fa:e7:c5:1e:5c:cb:2a:09:9d:7e:35:70:
         31:6d:fe:81:ce:58:c9:54:69:71:95:73:51:2a:89:c1:94:45:
         c8:1c:32:82:59:c3:e6:fc:63:ea:57:e3:96:f6:54:99:64:4a:
         03:ff:8c:c6:2e:46:e4:89:b9:44:ca:c1:67:33:dc:a1:36:32:
         a0:25:f2:ba:e3:07:36:f0:d7:12:1b:e9:e1:9c:57:6b:8c:69:
         33:30:58:4b:71:cc:67:ac:de:82:57:d9:13:69:8a:e6:f6:9e:
         85:40:a8:04:39:5f:eb:24:4f:c8:ec:0e:6f:63:db:93:cc:eb:
         f1:33:5a:d0:df:f3:aa:8c:5a:77:27:24:93:a6:0f:b8:c2:88:
         7a:4d:cc:ed:aa:ae:9e:6a:d3:6e:7e:0f:d1:74:bd:52:d7:80:
         b0:e0:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:48:17 2025 by rpki-client