Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/3139302e3131322e3136342e302f32322d3232203d3e20323730333036.roa
File:                     3139302e3131322e3136342e302f32322d3232203d3e20323730333036.roa (raw, json)
Hash identifier:          WlI1tMJFrpr8ffhXoebqrfUQSS+WgvjtCx8HhGuBb9c=
Subject key identifier:   2F:D7:7A:90:9F:ED:E0:E1:CB:57:25:73:A2:3B:C5:D1:56:6D:B2:5B
Certificate issuer:       /CN=F3370651CDE1B6FD1325E85772142F6C758D8CB8
Certificate serial:       515DF7345CCA649B54388AEABF0970986321BBC6
Authority key identifier: F3:37:06:51:CD:E1:B6:FD:13:25:E8:57:72:14:2F:6C:75:8D:8C:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3370651CDE1B6FD1325E85772142F6C758D8CB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/3139302e3131322e3136342e302f32322d3232203d3e20323730333036.roa
Signing time:             Sat 03 May 2025 16:05:55 +0000
ROA not before:           Sat 03 May 2025 16:00:55 +0000
ROA not after:            Sat 02 May 2026 16:05:55 +0000
asID:                     270306
IP address blocks:        190.112.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/F3370651CDE1B6FD1325E85772142F6C758D8CB8.crl
                          rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/F3370651CDE1B6FD1325E85772142F6C758D8CB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3370651CDE1B6FD1325E85772142F6C758D8CB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 06:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5d:f7:34:5c:ca:64:9b:54:38:8a:ea:bf:09:70:98:63:21:bb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3370651CDE1B6FD1325E85772142F6C758D8CB8
        Validity
            Not Before: May  3 16:00:55 2025 GMT
            Not After : May  2 16:05:55 2026 GMT
        Subject: CN=2FD77A909FEDE0E1CB572573A23BC5D1566DB25B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:32:88:a8:19:29:dd:b8:9b:56:39:db:06:
                    82:68:79:80:5b:95:03:81:ab:9f:06:6e:03:34:6d:
                    11:2d:de:97:84:a6:01:2d:21:a6:84:9c:e2:e2:6a:
                    7c:b7:51:b8:ab:94:79:06:0d:33:0c:e0:8d:d2:7a:
                    ed:a4:e3:70:ff:b3:51:b3:bf:bf:e3:05:dc:8c:b3:
                    23:b6:39:e9:21:d3:90:3b:d9:ee:e8:45:6f:21:13:
                    51:7d:8a:3f:8f:c1:e9:ca:dc:62:18:31:b8:b3:46:
                    29:be:0a:a4:39:9d:95:80:e9:06:ef:cf:6f:d4:e3:
                    60:ba:ad:ed:1b:18:a5:8a:20:ff:e9:46:de:af:d4:
                    7c:60:ad:f0:77:b4:a7:b0:d3:98:d9:e3:e0:a8:66:
                    16:1c:fc:a8:22:68:60:d7:19:ac:b2:ae:65:f7:89:
                    ef:e4:a3:be:1c:0e:4a:e3:26:84:33:74:68:d7:12:
                    a1:a7:25:d8:46:9b:c7:94:32:6a:e3:9e:ed:70:2e:
                    88:e9:f8:e0:5b:84:23:fc:de:5c:f9:87:8f:a0:67:
                    7b:5e:77:97:7d:2a:83:0f:0d:08:de:4c:b3:3a:a1:
                    81:0b:25:25:89:64:55:56:09:06:ac:9c:d2:95:8d:
                    3b:b4:c2:0b:b9:69:9e:48:8e:5d:08:e4:a1:15:05:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D7:7A:90:9F:ED:E0:E1:CB:57:25:73:A2:3B:C5:D1:56:6D:B2:5B
            X509v3 Authority Key Identifier:
                keyid:F3:37:06:51:CD:E1:B6:FD:13:25:E8:57:72:14:2F:6C:75:8D:8C:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/F3370651CDE1B6FD1325E85772142F6C758D8CB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3370651CDE1B6FD1325E85772142F6C758D8CB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/3139302e3131322e3136342e302f32322d3232203d3e20323730333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:4c:25:fc:22:b6:b0:cf:13:64:48:73:71:06:d2:bb:0b:39:
         24:49:25:90:01:32:de:a1:3d:e2:3c:15:ec:0f:ed:61:33:63:
         d1:c0:ae:85:ec:be:85:16:51:73:dc:e2:22:50:ce:46:df:26:
         a6:7f:96:b0:5f:f2:57:a3:de:6f:d2:45:9c:a1:91:94:07:55:
         f0:65:bd:87:e4:f4:f0:5f:6b:41:97:f5:2a:60:d0:8f:78:10:
         a4:2a:b8:03:b9:8c:52:fb:b5:0b:24:25:66:6d:98:3d:0e:23:
         d5:59:e7:40:83:f8:12:ba:67:2d:3f:69:dc:a8:bb:2a:c1:08:
         d8:14:39:a9:3f:d0:ae:06:de:4a:49:f6:9d:68:3b:a7:40:43:
         31:ba:c3:f0:33:f8:04:83:45:b3:24:dd:34:79:57:70:d1:9d:
         be:7f:b8:e2:7b:cb:f2:de:50:db:da:c8:0a:f2:3e:83:1f:07:
         09:33:15:ae:26:16:c9:e5:57:da:4b:90:12:c0:82:4e:12:05:
         80:35:36:bf:0f:5b:58:c3:80:36:10:2a:22:d2:e6:f4:cf:80:
         31:78:07:38:ce:8e:be:e9:41:63:bf:3e:db:55:51:37:50:8d:
         38:d8:a9:a1:b3:b3:8e:ff:99:7e:99:53:bc:45:58:29:3d:ad:
         34:33:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:03:45 2025 by rpki-client