Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/3137302e38332e3235322e302f32322d3234203d3e20323633303135.roa
File:                     3137302e38332e3235322e302f32322d3234203d3e20323633303135.roa (raw, json)
Hash identifier:          U2a7mCjen0oQ5eSNf1GAyx72T+vXbSzZDpsS0ugb+bM=
Subject key identifier:   8E:2F:CF:35:86:02:76:0B:9A:5B:F2:AD:70:FA:75:38:AF:A1:76:5D
Certificate issuer:       /CN=1011573AA94A527E7C77C596D7EF50759DCDD62A
Certificate serial:       4024FE1A16E0404A0895D94BCBD8206C56CDB56A
Authority key identifier: 10:11:57:3A:A9:4A:52:7E:7C:77:C5:96:D7:EF:50:75:9D:CD:D6:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1011573AA94A527E7C77C596D7EF50759DCDD62A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/3137302e38332e3235322e302f32322d3234203d3e20323633303135.roa
Signing time:             Tue 17 Jun 2025 19:28:05 +0000
ROA not before:           Tue 17 Jun 2025 19:23:05 +0000
ROA not after:            Tue 16 Jun 2026 19:28:05 +0000
asID:                     263015
IP address blocks:        170.83.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1011573AA94A527E7C77C596D7EF50759DCDD62A.crl
                          rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1011573AA94A527E7C77C596D7EF50759DCDD62A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1011573AA94A527E7C77C596D7EF50759DCDD62A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:24:fe:1a:16:e0:40:4a:08:95:d9:4b:cb:d8:20:6c:56:cd:b5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1011573AA94A527E7C77C596D7EF50759DCDD62A
        Validity
            Not Before: Jun 17 19:23:05 2025 GMT
            Not After : Jun 16 19:28:05 2026 GMT
        Subject: CN=8E2FCF358602760B9A5BF2AD70FA7538AFA1765D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:7b:19:8d:a2:ce:32:bb:55:c3:17:a6:cb:
                    3c:67:8a:66:50:37:12:b9:a0:43:41:45:b1:f7:46:
                    f7:99:c6:15:20:fc:76:b9:de:61:31:0c:2e:fa:c3:
                    8e:13:d7:e9:2d:43:61:b7:12:1d:db:31:9e:ee:eb:
                    f9:38:7a:7b:b8:46:1b:08:36:56:ae:c4:02:9f:ac:
                    69:39:c4:ef:43:0c:3a:0a:9c:04:f8:08:8e:f3:8b:
                    68:59:2c:15:64:fa:6c:25:7a:77:8b:22:83:e3:bb:
                    66:59:45:94:5e:1c:b5:fd:b7:49:1b:d8:22:bb:d0:
                    71:d6:7a:5c:7a:80:fa:69:da:a8:40:fc:e1:3c:87:
                    18:ab:9b:59:a1:c7:68:b0:3a:53:3e:c6:7b:56:bd:
                    7c:6e:fc:03:e9:5e:79:8f:b6:11:b8:ec:01:fd:4d:
                    ed:a0:72:ee:97:07:66:02:4f:d5:49:2e:28:40:7d:
                    96:fa:2b:82:a0:03:b7:21:3a:ad:b5:97:3b:57:f2:
                    b5:e1:56:30:38:d1:ca:a8:89:30:35:7a:de:69:22:
                    b4:3a:9d:9f:c7:f8:74:72:09:f1:6b:2f:e9:d5:f8:
                    16:d9:37:8c:6c:f6:69:4e:b3:73:f1:f4:d2:5d:3b:
                    f0:99:cd:39:d7:6a:f4:30:c9:e2:7f:14:d0:66:0f:
                    0a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2F:CF:35:86:02:76:0B:9A:5B:F2:AD:70:FA:75:38:AF:A1:76:5D
            X509v3 Authority Key Identifier:
                keyid:10:11:57:3A:A9:4A:52:7E:7C:77:C5:96:D7:EF:50:75:9D:CD:D6:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1011573AA94A527E7C77C596D7EF50759DCDD62A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1011573AA94A527E7C77C596D7EF50759DCDD62A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/3137302e38332e3235322e302f32322d3234203d3e20323633303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:69:4f:5c:24:c2:61:14:4a:76:23:28:52:be:d9:39:67:57:
         4c:66:f2:fa:1c:d7:39:f2:f3:a1:1d:bc:6f:86:e1:a6:7b:ec:
         b5:6d:e2:57:65:e7:84:f1:02:34:70:b5:dc:23:05:b7:05:fe:
         83:44:37:3c:69:82:25:c1:41:9f:25:1a:aa:7e:da:34:a2:2c:
         73:7a:9d:09:a0:8b:f0:7c:90:4b:74:2b:8e:b9:ab:93:00:b6:
         7c:5f:d8:95:db:98:ae:55:a4:fd:0b:ca:28:cd:02:c1:b8:c0:
         c4:af:dd:7a:16:94:41:87:b7:3e:d0:70:81:f0:89:b7:8e:25:
         05:d1:1f:0a:d8:73:10:02:76:d9:88:91:26:6a:98:11:de:47:
         ed:8b:2e:20:c7:1c:af:12:32:08:90:41:eb:df:81:29:b3:f6:
         f1:cf:f9:f8:17:f8:14:9e:e9:e1:24:34:cc:b8:b8:7f:c1:d4:
         3a:ba:82:50:18:7e:05:61:e1:07:05:ae:eb:ff:39:60:04:75:
         40:2e:5a:ee:52:f0:fa:0a:56:53:5a:bc:62:e7:cd:b8:9d:84:
         d0:5c:80:3c:74:2b:77:48:8e:7f:32:7d:54:02:e5:6c:8a:07:
         0f:55:93:66:d8:8b:c1:d0:b2:a8:21:4f:00:ff:09:74:84:bb:
         d6:81:9c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:35:34 2025 by rpki-client