Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/3137302e3233382e3135322e302f32322d3234203d3e20323636333236.roa
File:                     3137302e3233382e3135322e302f32322d3234203d3e20323636333236.roa (raw, json)
Hash identifier:          LalgOx0Mx5llyUVm+LZI4SDx0S2HiqD8WSWWNm5eWsM=
Subject key identifier:   DD:2D:04:DC:C5:76:8E:9E:75:41:45:55:EA:13:EB:0D:95:B4:35:1C
Certificate issuer:       /CN=6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79
Certificate serial:       02B6E237AF1739D0C04948AA07241BB5A1D81FB1
Authority key identifier: 6B:93:BE:1C:18:54:2A:48:D7:C4:E3:1D:2E:73:BE:21:64:AF:6C:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/3137302e3233382e3135322e302f32322d3234203d3e20323636333236.roa
Signing time:             Wed 25 Jun 2025 20:17:37 +0000
ROA not before:           Wed 25 Jun 2025 20:12:37 +0000
ROA not after:            Wed 24 Jun 2026 20:17:37 +0000
asID:                     266326
IP address blocks:        170.238.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.crl
                          rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 09:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b6:e2:37:af:17:39:d0:c0:49:48:aa:07:24:1b:b5:a1:d8:1f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79
        Validity
            Not Before: Jun 25 20:12:37 2025 GMT
            Not After : Jun 24 20:17:37 2026 GMT
        Subject: CN=DD2D04DCC5768E9E75414555EA13EB0D95B4351C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:0e:ad:10:c1:22:88:2b:6c:34:11:c9:e1:
                    9c:3b:f3:15:07:99:27:4e:db:06:2a:c4:50:78:71:
                    46:b8:a2:06:df:7b:dc:fc:64:4e:da:bf:c5:39:b1:
                    29:a2:48:4a:bc:12:38:51:12:04:7b:b5:62:90:9b:
                    e1:39:81:c7:42:d5:ba:b4:33:4b:81:30:7b:b1:05:
                    c6:fe:2d:31:c7:44:9e:82:5a:e2:ba:4c:82:2a:0e:
                    ff:6f:e8:34:27:53:42:f1:98:82:b5:f2:27:77:d4:
                    a9:36:b9:29:87:b7:35:49:68:03:82:ad:e9:02:ee:
                    b0:99:1c:34:19:5a:9c:4c:89:f8:52:66:fa:dd:47:
                    a3:dd:c8:bf:f9:d1:13:77:be:c4:33:c3:e1:e9:61:
                    ff:21:a3:2c:74:6d:1b:c7:63:6f:53:f9:07:db:d5:
                    d9:2d:e4:f3:82:44:33:1e:d7:b6:f6:7c:63:c4:a7:
                    6a:c4:95:b3:52:0a:37:a6:47:57:10:dd:24:f6:21:
                    b4:93:21:d1:22:6d:30:5c:0e:5b:8d:9f:0c:c7:e0:
                    5e:fc:7f:1d:10:7d:d1:9c:c3:a5:3f:68:3e:ed:b7:
                    b9:4d:ce:5f:3f:78:ae:7c:0a:16:1f:28:63:28:c9:
                    44:64:c9:5c:06:d6:0e:81:be:11:ec:57:fe:87:6f:
                    cb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2D:04:DC:C5:76:8E:9E:75:41:45:55:EA:13:EB:0D:95:B4:35:1C
            X509v3 Authority Key Identifier:
                keyid:6B:93:BE:1C:18:54:2A:48:D7:C4:E3:1D:2E:73:BE:21:64:AF:6C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/3137302e3233382e3135322e302f32322d3234203d3e20323636333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:3c:65:01:9d:45:10:62:df:2b:38:63:3e:99:67:3e:f6:0a:
         6d:16:13:68:a9:20:09:5b:94:88:66:b8:15:aa:bc:dc:70:3d:
         b3:a8:a5:8c:a6:16:06:ff:f4:28:f9:22:dc:f9:43:d7:0a:16:
         04:92:eb:bf:57:e3:75:df:7e:b2:49:b4:60:df:9b:4d:34:38:
         ae:8f:11:ce:8b:f0:ae:3f:87:74:08:52:e8:0d:be:b2:7e:75:
         11:d4:87:4d:7f:ae:c8:e2:8f:fe:b9:50:1e:c1:4c:5a:58:d5:
         15:53:f2:e0:ef:2a:43:73:33:ea:24:bc:10:33:e5:f3:e9:60:
         29:94:ad:01:33:d4:db:4e:f1:c2:b0:71:d9:2c:6d:b0:02:35:
         3b:d0:a1:25:67:13:2c:7e:f7:13:75:3f:66:1d:ee:56:67:3d:
         9c:19:6a:dc:c7:5b:bb:8a:e5:9b:ca:f2:97:ed:16:ba:52:7a:
         17:53:04:d1:65:97:b8:5a:a4:ec:3a:f9:85:e0:d7:10:33:dc:
         43:30:45:75:dc:17:92:b4:08:e2:20:74:d7:d7:f3:24:41:e0:
         8c:2d:e7:77:2d:00:0f:e5:1c:f7:e6:59:2e:7c:ae:16:78:bc:
         37:6f:9b:43:a5:a1:b5:0e:0d:bf:ac:d7:a1:ce:46:9c:30:53:
         f6:55:fa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:03:14 2025 by rpki-client