Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34372e302f32342d3234203d3e20323636333638.roa
File:                     3137302e38302e34372e302f32342d3234203d3e20323636333638.roa (raw, json)
Hash identifier:          FVOovjQfKsPslSPC0mZC42KfyzqdHw1VHzoO+fvQc5k=
Subject key identifier:   D0:B6:28:10:B9:81:8A:01:E2:31:7E:3D:23:8C:8F:83:C2:4B:37:1B
Certificate issuer:       /CN=536DE1C52594C50A13E5683BE9F9A3133E1884CE
Certificate serial:       3E6ACADA9E2015F039676AA492F5A510678316AB
Authority key identifier: 53:6D:E1:C5:25:94:C5:0A:13:E5:68:3B:E9:F9:A3:13:3E:18:84:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/536DE1C52594C50A13E5683BE9F9A3133E1884CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34372e302f32342d3234203d3e20323636333638.roa
Signing time:             Sat 28 Jun 2025 19:05:23 +0000
ROA not before:           Sat 28 Jun 2025 19:00:23 +0000
ROA not after:            Sat 27 Jun 2026 19:05:23 +0000
asID:                     266368
IP address blocks:        170.80.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/536DE1C52594C50A13E5683BE9F9A3133E1884CE.crl
                          rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/536DE1C52594C50A13E5683BE9F9A3133E1884CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/536DE1C52594C50A13E5683BE9F9A3133E1884CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6a:ca:da:9e:20:15:f0:39:67:6a:a4:92:f5:a5:10:67:83:16:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=536DE1C52594C50A13E5683BE9F9A3133E1884CE
        Validity
            Not Before: Jun 28 19:00:23 2025 GMT
            Not After : Jun 27 19:05:23 2026 GMT
        Subject: CN=D0B62810B9818A01E2317E3D238C8F83C24B371B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:60:81:12:0f:66:56:9b:62:8a:89:e9:58:
                    13:4d:b9:a1:a3:18:93:59:6b:8e:0d:26:45:de:3b:
                    3f:4f:87:97:da:1a:40:e5:e9:6a:ac:38:86:7b:78:
                    31:66:a3:41:8f:7d:6c:a1:52:db:cd:ab:a6:cd:f4:
                    79:b5:34:16:fd:7c:6e:fe:ee:2e:ed:1d:71:49:36:
                    c3:e5:65:97:85:44:0b:19:55:7d:89:25:d6:98:a8:
                    57:b6:a3:ea:dc:60:ac:eb:e7:d9:4c:9b:7b:5f:2d:
                    90:f0:51:9d:e3:a8:fe:5a:33:d7:d5:af:9f:ca:89:
                    c6:2a:11:d8:9e:7c:5e:64:75:44:8a:56:88:26:f5:
                    60:e1:33:39:da:8d:9a:46:7c:e2:11:9a:63:cd:fb:
                    c6:93:ce:46:ec:7d:56:fc:5d:be:55:4c:c2:83:24:
                    ea:7b:26:e6:8e:58:2d:48:2b:52:dd:3e:d9:18:a9:
                    4a:24:1c:d9:43:c0:d7:c6:d2:e1:fb:f2:50:dc:75:
                    9a:72:27:99:23:8a:7c:fe:cc:02:19:22:86:bc:94:
                    70:a6:d0:bc:32:49:e6:02:94:32:01:33:09:e3:3a:
                    9c:fc:28:96:ea:79:b4:26:e4:24:aa:16:84:c8:e9:
                    ae:db:4d:5e:5c:e4:ea:10:62:59:01:11:03:38:68:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B6:28:10:B9:81:8A:01:E2:31:7E:3D:23:8C:8F:83:C2:4B:37:1B
            X509v3 Authority Key Identifier:
                keyid:53:6D:E1:C5:25:94:C5:0A:13:E5:68:3B:E9:F9:A3:13:3E:18:84:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/536DE1C52594C50A13E5683BE9F9A3133E1884CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/536DE1C52594C50A13E5683BE9F9A3133E1884CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34372e302f32342d3234203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:83:4d:e0:4e:f5:4b:97:d5:46:63:32:fb:c5:b7:7f:7b:af:
         2d:99:98:ff:01:bf:4d:79:e9:f8:bb:de:6d:e2:8d:12:7c:73:
         e3:bb:12:f3:59:2c:94:bd:12:fb:6e:7a:cf:7d:c9:27:89:ca:
         df:27:8e:31:aa:60:30:3a:cf:bf:71:b5:df:d2:cf:38:ff:aa:
         b4:5f:74:ad:5f:7e:6e:a7:91:90:52:b2:9a:2a:5b:a7:30:09:
         09:0c:6c:f3:5c:2d:28:f2:a5:b2:14:e8:c0:1c:66:98:2e:de:
         f6:98:95:a4:47:8e:ae:32:69:35:5a:c2:ad:96:8b:aa:87:27:
         ee:bf:56:01:eb:68:3a:9a:fc:83:74:31:c9:db:8d:9d:85:e7:
         d2:5c:3d:42:a1:28:6c:ec:7d:91:ce:32:c1:7e:0b:0b:fc:7a:
         52:ab:a4:0f:4c:df:78:a5:88:35:18:45:a7:f5:a6:ec:60:7b:
         46:b2:d1:e3:80:96:23:0c:17:54:43:e2:59:e2:2d:36:a6:90:
         46:a8:ba:d7:18:05:e9:c1:85:ef:42:6c:bd:12:b4:7e:9d:78:
         77:0b:03:af:fc:71:14:0a:92:67:d7:24:a6:eb:bb:b8:f6:a0:
         04:98:d1:18:ae:ce:41:28:21:ff:3b:3d:37:1b:09:c9:79:bb:
         0c:7e:4a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:00:13 2025 by rpki-client