Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/3137392e302e3132342e302f32322d3234203d3e20323636343534.roa
File:                     3137392e302e3132342e302f32322d3234203d3e20323636343534.roa (raw, json)
Hash identifier:          ucu5o+cbrrcpLJVtgJQ2wcvE1yU3O/AilPSThMPOcU8=
Subject key identifier:   70:C9:25:8E:89:E4:61:7D:77:23:A2:11:F8:D0:2A:B5:2E:16:17:9B
Certificate issuer:       /CN=FE287030880D0123AC89374793BF7EEEFC18D5AE
Certificate serial:       51A1CD725302FCA94F9D85ECADB42BE277786242
Authority key identifier: FE:28:70:30:88:0D:01:23:AC:89:37:47:93:BF:7E:EE:FC:18:D5:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/3137392e302e3132342e302f32322d3234203d3e20323636343534.roa
Signing time:             Tue 08 Apr 2025 16:53:03 +0000
ROA not before:           Tue 08 Apr 2025 16:48:03 +0000
ROA not after:            Tue 07 Apr 2026 16:53:03 +0000
asID:                     266454
IP address blocks:        179.0.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.crl
                          rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a1:cd:72:53:02:fc:a9:4f:9d:85:ec:ad:b4:2b:e2:77:78:62:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE287030880D0123AC89374793BF7EEEFC18D5AE
        Validity
            Not Before: Apr  8 16:48:03 2025 GMT
            Not After : Apr  7 16:53:03 2026 GMT
        Subject: CN=70C9258E89E4617D7723A211F8D02AB52E16179B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:a7:0b:4e:47:5e:c7:2d:26:f0:18:62:8a:
                    6b:be:28:18:68:8a:b0:96:88:ea:16:16:0e:58:be:
                    8b:1a:91:59:f7:f3:da:b2:85:a8:92:b2:24:6d:70:
                    6c:c6:15:cf:52:b9:08:44:a8:7f:f6:1a:34:5a:86:
                    2e:52:f2:58:11:96:f5:bf:ef:86:b2:d2:df:88:ce:
                    17:a6:79:82:eb:86:c7:6d:45:58:d6:91:67:a8:97:
                    a3:72:ec:2f:78:a6:00:df:fc:03:a1:14:6e:dd:98:
                    ae:5f:fc:b7:67:63:db:b5:28:f4:4a:72:35:d4:e2:
                    a2:65:1c:1a:ae:6c:ba:8d:c8:90:b6:8d:54:15:8c:
                    7e:d1:e6:ad:81:5f:b0:6e:b8:be:c8:58:61:99:e8:
                    a6:9a:0e:f7:26:6a:0b:64:5b:93:60:56:d3:83:b2:
                    3b:93:2b:23:c8:c2:86:2b:bd:87:a2:c6:a6:2d:c3:
                    1b:99:5e:35:ef:47:61:65:e2:17:3c:fe:22:d1:cb:
                    89:bd:f0:32:9a:4f:5d:59:43:13:a0:69:3a:c0:32:
                    9f:9a:4e:e2:b1:7b:0c:ba:af:8e:0b:49:cc:94:43:
                    87:bf:0a:62:8b:f1:df:ba:6b:11:d9:1a:dc:d7:94:
                    f9:ee:c5:a1:7f:cf:21:15:b8:23:ba:94:f1:43:f4:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C9:25:8E:89:E4:61:7D:77:23:A2:11:F8:D0:2A:B5:2E:16:17:9B
            X509v3 Authority Key Identifier:
                keyid:FE:28:70:30:88:0D:01:23:AC:89:37:47:93:BF:7E:EE:FC:18:D5:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/3137392e302e3132342e302f32322d3234203d3e20323636343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:78:cb:4c:20:cb:72:a5:09:b4:4c:57:40:25:51:60:59:07:
         84:14:16:1e:6c:66:15:56:d3:2a:cb:02:3e:18:69:17:a4:da:
         70:be:11:f8:a3:db:70:b9:c2:9e:40:f5:c2:45:2a:f1:92:ad:
         4e:a9:b8:36:af:e4:d2:2b:d3:9b:1a:7d:41:54:56:0d:b6:34:
         bc:4b:f0:93:44:e6:25:5f:ea:e8:05:4f:a1:90:5d:39:ab:95:
         0c:af:d8:5f:a0:f9:5e:d8:5d:2c:cc:40:8d:77:93:f5:9e:4a:
         8d:32:69:a7:fe:03:6e:c5:93:61:07:32:a1:ce:7f:be:77:6f:
         2f:b3:c5:b3:c6:52:1c:c5:91:0b:ed:78:c4:86:dd:89:6e:ed:
         3f:ef:e1:6b:bd:db:cd:36:e7:d2:6c:a3:04:bb:a6:c4:af:1b:
         b1:4b:71:7e:4d:1a:08:88:82:1e:de:7d:45:32:d6:bd:f2:70:
         cf:93:41:17:ec:c5:a3:13:88:41:06:bd:96:18:5b:f1:17:f8:
         e0:b0:91:0a:d9:27:ca:08:f8:86:51:83:cb:a6:2d:62:6c:b4:
         ba:f4:0d:c2:49:40:d1:93:67:41:9a:e4:53:af:b4:1e:f4:a1:
         fa:76:ed:ad:24:64:65:4b:4a:37:4a:bf:42:bd:0b:3c:1e:67:
         c2:b4:a3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:30 2025 by rpki-client on console.sobornost.net