Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/3139312e33372e3137302e36342f32382d3238203d3e20323731303233.roa
File:                     3139312e33372e3137302e36342f32382d3238203d3e20323731303233.roa (raw, json)
Hash identifier:          v2M5SdyzLHRJdRXeLwEgLB7U5DdDADfb4s56sIvLvUU=
Subject key identifier:   9D:5C:DD:A6:6B:88:5D:6B:FD:D6:07:41:16:62:A7:3A:A1:FD:E1:BD
Certificate issuer:       /CN=83D0155F5069287D4AA91D06FC515095D8B510B8
Certificate serial:       50E0C8F4C00B8484ACC589785AF8A6516602F516
Authority key identifier: 83:D0:15:5F:50:69:28:7D:4A:A9:1D:06:FC:51:50:95:D8:B5:10:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/3139312e33372e3137302e36342f32382d3238203d3e20323731303233.roa
Signing time:             Thu 13 Mar 2025 12:15:24 +0000
ROA not before:           Thu 13 Mar 2025 12:10:24 +0000
ROA not after:            Thu 12 Mar 2026 12:15:24 +0000
asID:                     271023
IP address blocks:        191.37.170.64/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.crl
                          rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 04:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e0:c8:f4:c0:0b:84:84:ac:c5:89:78:5a:f8:a6:51:66:02:f5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D0155F5069287D4AA91D06FC515095D8B510B8
        Validity
            Not Before: Mar 13 12:10:24 2025 GMT
            Not After : Mar 12 12:15:24 2026 GMT
        Subject: CN=9D5CDDA66B885D6BFDD607411662A73AA1FDE1BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:be:f7:7c:f9:19:98:eb:61:43:80:8d:68:8f:
                    3e:ee:76:37:be:ad:b2:90:1e:52:4b:c8:31:13:a9:
                    ce:3c:96:63:93:cd:9b:83:e7:e8:da:0e:76:8c:3e:
                    17:be:18:9d:13:0e:2a:1c:70:71:17:c3:6a:1b:f6:
                    ec:e2:b3:9c:fa:7b:e5:47:79:51:1c:15:b9:74:e7:
                    de:52:38:19:a2:04:2e:dc:d8:c1:e8:69:04:17:e1:
                    ec:aa:46:6e:12:19:83:cf:fc:2a:46:9d:a9:6f:1c:
                    0d:f8:13:65:dc:ab:9c:9e:c9:0f:45:c2:74:aa:9b:
                    c0:6d:f9:c1:34:a1:02:33:25:ec:e5:3d:ba:ac:5d:
                    74:76:4c:22:d1:93:6b:fd:8b:50:1e:22:96:16:d2:
                    9e:04:62:01:99:a0:2c:02:87:bf:c7:53:e0:7c:ff:
                    6a:58:f6:c5:fd:b7:71:41:ab:bc:1d:d4:f1:5c:3b:
                    9b:f7:95:95:fb:b0:63:a5:64:81:66:bf:fa:e3:0f:
                    f5:36:58:c7:16:74:40:e7:be:ac:8c:81:c8:ca:f3:
                    ca:a8:98:24:9a:72:07:0a:fa:5d:06:48:64:6b:c1:
                    5c:c2:f7:5f:c1:33:1c:79:0a:38:ad:46:f4:02:9f:
                    22:d1:d5:7e:75:78:73:01:e9:a9:3a:73:35:c3:41:
                    e6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5C:DD:A6:6B:88:5D:6B:FD:D6:07:41:16:62:A7:3A:A1:FD:E1:BD
            X509v3 Authority Key Identifier:
                keyid:83:D0:15:5F:50:69:28:7D:4A:A9:1D:06:FC:51:50:95:D8:B5:10:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/3139312e33372e3137302e36342f32382d3238203d3e20323731303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.170.64/28

    Signature Algorithm: sha256WithRSAEncryption
         0d:7e:bc:c9:79:6b:cf:73:37:9d:48:c1:cd:77:36:57:80:80:
         91:80:fb:f1:15:9c:e0:7a:c2:e6:5a:23:12:c4:23:0d:bf:f8:
         56:88:9e:0f:0a:bf:37:4b:ec:36:f1:b6:01:e9:c0:44:b7:68:
         05:4d:35:c1:4f:0d:b1:c1:af:8f:cf:99:95:26:32:4a:7a:34:
         92:43:cc:7e:96:27:4f:ee:e2:aa:a5:de:27:fa:2c:71:7c:85:
         c2:01:c5:6c:cf:84:e7:d0:cc:2f:06:bc:ac:d1:cd:ae:59:6b:
         7a:77:e6:16:99:8c:c9:7b:a5:85:fc:b3:34:6f:e4:ba:aa:24:
         83:f0:49:82:60:60:15:17:1f:75:dd:5e:c2:98:d6:23:66:fe:
         41:35:87:b4:8a:1d:94:ce:59:dc:8d:ef:07:0a:b6:9d:33:c3:
         44:d8:94:fb:35:94:1d:e0:95:70:84:60:33:ba:e4:b8:ee:73:
         b2:87:1d:27:de:ca:cc:ad:2e:ab:ea:9c:6d:4c:74:07:f2:c1:
         ab:4b:18:0c:2b:ca:5f:ea:87:1b:f9:b7:37:50:38:2b:9a:3f:
         19:30:98:10:53:40:be:6b:e8:33:e2:71:ab:24:09:98:22:62:
         6b:a7:b4:a7:1c:f5:db:24:ac:01:c6:7d:0f:59:cf:7f:cc:76:
         01:ed:1d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:31:17 2025 by rpki-client