Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/3139302e3131322e3136342e302f32332d3233203d3e20323730333036.roa
File:                     3139302e3131322e3136342e302f32332d3233203d3e20323730333036.roa (raw, json)
Hash identifier:          hBi8G8iGqpmtI4g8FIBlcWr0XWRNvRAprouvFYcJax8=
Subject key identifier:   B5:65:64:38:CB:75:D6:59:1B:6C:D8:AE:53:E9:73:A2:22:5A:4D:EA
Certificate issuer:       /CN=F3370651CDE1B6FD1325E85772142F6C758D8CB8
Certificate serial:       47C704D8CA164B59A489F65C7B26B38E02395555
Authority key identifier: F3:37:06:51:CD:E1:B6:FD:13:25:E8:57:72:14:2F:6C:75:8D:8C:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3370651CDE1B6FD1325E85772142F6C758D8CB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/3139302e3131322e3136342e302f32332d3233203d3e20323730333036.roa
Signing time:             Sat 03 May 2025 16:05:55 +0000
ROA not before:           Sat 03 May 2025 16:00:55 +0000
ROA not after:            Sat 02 May 2026 16:05:55 +0000
asID:                     270306
IP address blocks:        190.112.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/F3370651CDE1B6FD1325E85772142F6C758D8CB8.crl
                          rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/F3370651CDE1B6FD1325E85772142F6C758D8CB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3370651CDE1B6FD1325E85772142F6C758D8CB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 06:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c7:04:d8:ca:16:4b:59:a4:89:f6:5c:7b:26:b3:8e:02:39:55:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3370651CDE1B6FD1325E85772142F6C758D8CB8
        Validity
            Not Before: May  3 16:00:55 2025 GMT
            Not After : May  2 16:05:55 2026 GMT
        Subject: CN=B5656438CB75D6591B6CD8AE53E973A2225A4DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e9:48:58:b4:ee:fb:b6:4c:97:14:50:a5:28:
                    78:10:6e:1b:d0:67:a3:cc:76:e5:86:cd:c9:6a:57:
                    3a:d2:98:a8:2e:ac:5b:c5:25:d2:1b:87:c6:eb:ee:
                    b4:7c:8b:49:a8:fc:ce:5b:c4:18:30:63:63:e7:e0:
                    43:e8:03:58:76:2f:c7:cd:5f:1b:ce:85:a4:81:ce:
                    37:81:80:16:da:b2:f1:94:ca:93:45:ee:ea:97:c2:
                    50:74:7b:3e:be:ec:c8:c9:97:96:74:e0:38:50:b7:
                    9d:dd:5b:a5:af:6e:61:36:d2:24:01:d9:57:7e:f6:
                    80:de:ee:37:3f:d7:35:91:a9:36:7c:3a:6b:16:62:
                    91:0a:fe:df:90:ef:91:0a:18:d0:be:9a:a3:59:fd:
                    c5:93:bc:69:a4:f7:1b:08:a7:10:c6:0b:d0:8f:25:
                    8f:e7:e8:37:c3:72:73:2b:50:cc:5a:48:e4:85:24:
                    79:7b:7e:bb:95:68:03:77:98:5e:d6:01:56:88:5a:
                    ce:be:1d:57:36:88:36:66:55:78:5b:59:c1:db:71:
                    96:f9:88:ab:a5:38:9d:a0:b7:3a:0f:91:bc:fe:25:
                    a9:38:3f:4c:98:e7:75:86:2f:68:c9:7d:80:81:e3:
                    0f:10:84:c5:13:0e:30:cc:fe:07:5a:82:09:73:42:
                    25:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:65:64:38:CB:75:D6:59:1B:6C:D8:AE:53:E9:73:A2:22:5A:4D:EA
            X509v3 Authority Key Identifier:
                keyid:F3:37:06:51:CD:E1:B6:FD:13:25:E8:57:72:14:2F:6C:75:8D:8C:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/F3370651CDE1B6FD1325E85772142F6C758D8CB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3370651CDE1B6FD1325E85772142F6C758D8CB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/3139302e3131322e3136342e302f32332d3233203d3e20323730333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:1c:98:96:71:1c:64:e6:ef:0b:59:2d:ed:00:00:f9:70:18:
         ca:dd:61:17:7b:d8:40:69:7b:2b:cf:0a:74:59:8e:11:74:aa:
         ab:e2:05:b1:67:12:a0:4f:d4:6c:e9:9f:c2:8f:1a:9f:f5:2c:
         f0:29:56:28:e8:7a:44:e7:5f:4e:fe:69:37:d1:82:0f:ba:85:
         b1:63:bf:41:58:90:ef:6b:98:65:c0:12:b3:06:e8:dc:db:29:
         ee:80:0c:f6:36:53:ad:81:ce:7d:02:77:3a:d5:9b:ee:8c:da:
         62:fa:f3:1e:d0:39:59:77:f2:71:1e:69:ec:c9:ac:7a:39:9e:
         83:cd:a6:14:e0:d7:c3:9b:66:79:56:f7:41:0e:6c:a2:77:a9:
         54:4b:17:7f:1a:fc:90:9b:a8:10:a4:2d:67:9a:e4:a2:82:1a:
         4d:4c:7d:33:43:a8:cd:0e:66:c5:7f:8e:ce:25:eb:78:0b:ce:
         a7:9e:ed:ad:83:fc:7a:4b:76:5e:b8:8f:2b:18:5a:93:bd:3c:
         37:96:61:69:6f:33:18:1f:6e:c3:8b:ec:06:d5:60:62:dc:1f:
         e3:a2:ee:ae:50:52:92:11:ab:c5:48:dd:51:c5:84:ae:31:e1:
         53:8c:57:ab:e4:fc:63:e0:ba:99:b6:e2:be:19:06:23:f2:62:
         4b:d8:72:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:05 2025 by rpki-client