Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/3137302e38322e3235322e302f32332d3233203d3e20323636343630.roa
File:                     3137302e38322e3235322e302f32332d3233203d3e20323636343630.roa (raw, json)
Hash identifier:          547DGEiIY/1FJN4cn6knHGIqt+CrfZrxNYWDT62ItjY=
Subject key identifier:   5D:BA:61:BD:18:75:A8:A3:DA:6F:EA:1A:1C:95:C4:12:14:D4:BC:78
Certificate issuer:       /CN=E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3
Certificate serial:       2C1136B22DF94865DCF67D21DD4990704C96C9AE
Authority key identifier: E7:96:4E:5B:F1:FF:4D:49:D0:A3:6F:CF:2B:31:8E:B7:A6:4A:26:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/3137302e38322e3235322e302f32332d3233203d3e20323636343630.roa
Signing time:             Tue 22 Apr 2025 17:52:53 +0000
ROA not before:           Tue 22 Apr 2025 17:47:53 +0000
ROA not after:            Tue 21 Apr 2026 17:52:53 +0000
asID:                     266460
IP address blocks:        170.82.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.crl
                          rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 20:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:11:36:b2:2d:f9:48:65:dc:f6:7d:21:dd:49:90:70:4c:96:c9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3
        Validity
            Not Before: Apr 22 17:47:53 2025 GMT
            Not After : Apr 21 17:52:53 2026 GMT
        Subject: CN=5DBA61BD1875A8A3DA6FEA1A1C95C41214D4BC78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3b:95:b1:ad:d3:40:b9:19:a4:81:63:21:5e:
                    09:cc:13:4e:4b:b5:55:59:ef:a4:90:61:f1:c0:f8:
                    09:06:98:b5:7b:57:a0:8a:4e:ca:ee:7f:0b:44:04:
                    e0:1e:3b:48:2e:6d:61:72:0a:bd:51:ad:9f:53:7b:
                    f3:77:c5:da:70:24:7d:a6:80:c0:6d:25:e0:a5:64:
                    30:ac:50:8f:5d:aa:38:e3:cb:bc:d1:87:0d:7f:0e:
                    14:90:1b:93:8f:0f:f9:65:2e:d2:ac:96:ee:ce:06:
                    cf:cf:1c:3e:63:a1:4e:dc:d0:ad:72:07:de:5b:c1:
                    0c:44:c8:de:22:5a:b5:9e:ec:5e:bf:14:84:bf:76:
                    81:ed:ec:6e:ad:83:fd:bf:bf:ba:28:10:cb:2b:28:
                    b7:3d:91:8b:75:72:95:a6:4b:f8:78:3e:07:45:6e:
                    c7:bf:3b:61:72:38:14:74:a2:1e:06:5a:27:be:bd:
                    2e:a4:9a:d6:6b:dc:6d:48:6a:b8:0e:a7:0e:bf:fd:
                    9b:4e:30:43:11:94:0d:2a:36:57:19:39:79:58:b0:
                    e5:84:e7:d8:a8:e0:97:90:a0:41:cb:84:6c:a4:bd:
                    2b:89:b1:05:96:ac:af:a3:36:fc:36:b4:10:99:5a:
                    dc:29:60:88:de:7d:6e:13:11:a4:f3:db:dc:ca:c5:
                    bd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BA:61:BD:18:75:A8:A3:DA:6F:EA:1A:1C:95:C4:12:14:D4:BC:78
            X509v3 Authority Key Identifier:
                keyid:E7:96:4E:5B:F1:FF:4D:49:D0:A3:6F:CF:2B:31:8E:B7:A6:4A:26:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7964E5BF1FF4D49D0A36FCF2B318EB7A64A26A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/2/3137302e38322e3235322e302f32332d3233203d3e20323636343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:43:48:79:de:14:9a:13:56:a8:9f:da:15:f2:03:03:c4:93:
         be:65:38:11:10:63:8e:23:15:21:8e:5a:02:25:5b:d5:64:0c:
         d6:4f:22:42:60:01:09:5e:16:b3:55:a3:50:7c:e6:a3:21:0e:
         b1:78:06:6e:72:55:bb:50:e9:54:76:ff:56:3e:9e:e8:17:eb:
         8d:50:d1:2a:1c:9f:08:71:6a:66:21:08:66:70:9f:1f:64:92:
         ff:10:1d:c8:f8:fc:91:64:bd:6a:59:53:af:f8:47:b7:b6:98:
         95:aa:25:bd:79:09:a8:25:6b:fc:36:ea:20:be:ee:f1:10:3c:
         7a:97:42:ac:db:88:a8:75:14:7c:c6:34:d5:cd:27:84:56:d1:
         0f:13:8b:e8:67:38:44:46:40:fa:8b:67:25:95:3a:29:67:7f:
         ef:78:20:50:06:65:fa:a3:01:1a:10:b9:76:da:67:0d:80:0e:
         3e:2a:5d:b0:33:8a:70:25:d7:c8:6d:ba:e6:20:50:36:5a:1e:
         c3:34:c6:60:1d:d0:a0:8b:7e:64:59:0c:90:c2:25:32:73:96:
         7a:a9:07:45:32:db:46:55:06:fa:51:08:70:de:67:0f:6c:23:
         ea:27:c2:ff:00:ef:84:15:5d:90:b0:ca:d4:23:af:70:62:37:
         c2:e5:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:34 2025 by rpki-client on console.sobornost.net