Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32322d3232203d3e20323636353035.roa
File:                     3137302e3234342e37362e302f32322d3232203d3e20323636353035.roa (raw, json)
Hash identifier:          smiarjDG+OGsbjcVsk86Au5AndvkklCegjiEmQy0Xdw=
Subject key identifier:   9E:04:66:E1:7C:6E:F2:21:3B:9D:82:3B:34:4C:91:68:09:18:3F:23
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       67B9D6246B2BC56749DE79C57145EF4B30BF7F48
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32322d3232203d3e20323636353035.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     266505
IP address blocks:        170.244.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 03:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b9:d6:24:6b:2b:c5:67:49:de:79:c5:71:45:ef:4b:30:bf:7f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=9E0466E17C6EF2213B9D823B344C916809183F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9c:3f:2b:47:28:37:11:8f:eb:3e:7f:2f:39:
                    f0:dd:3d:e9:a1:58:87:55:8a:fe:63:61:68:7a:08:
                    04:c2:4d:4f:c1:4a:f3:66:8a:26:94:b7:61:57:ef:
                    9b:6a:75:e7:36:9e:d2:ba:b6:de:a0:65:36:cf:32:
                    18:87:3c:33:c8:71:a2:ab:f9:26:b8:a8:26:96:5b:
                    b2:b3:9d:4b:06:d5:db:a0:48:10:b9:e4:3d:76:1e:
                    ca:10:74:75:b2:48:db:c0:89:fa:50:be:a9:75:39:
                    63:37:85:16:b8:24:c4:b6:b5:03:34:22:b4:42:1f:
                    8b:1b:a5:a7:bb:a6:f6:50:d2:10:f6:9d:8d:50:70:
                    98:fc:2a:e0:3c:8e:f2:04:49:e4:0e:e6:44:12:bd:
                    bf:84:4c:9d:7c:14:ad:94:29:95:af:16:37:34:87:
                    51:7e:1b:93:cb:ef:48:7f:36:1c:0a:4d:ab:0c:e7:
                    3c:d9:ab:26:0f:c5:7c:a4:0b:cc:c1:5c:61:c4:0c:
                    50:9a:14:48:79:36:16:42:ae:cd:c8:83:17:f1:c6:
                    73:9a:60:a1:de:1f:0b:0c:60:4c:1d:20:8d:84:04:
                    fd:98:aa:31:f2:1d:e0:fa:31:6b:ce:bc:74:1f:74:
                    20:53:0d:52:e2:e5:e9:d0:e5:42:99:35:f5:c1:4a:
                    5f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:04:66:E1:7C:6E:F2:21:3B:9D:82:3B:34:4C:91:68:09:18:3F:23
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32322d3232203d3e20323636353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:cc:d2:69:34:5e:82:1d:44:49:f1:b0:75:77:51:c0:09:6a:
         a1:26:1e:2f:16:e1:87:a0:7f:9b:aa:04:75:45:68:b4:bc:f0:
         e7:37:c1:e1:a5:38:64:d7:96:2d:ac:b4:be:aa:c9:94:21:42:
         60:3d:5f:bc:2c:36:69:96:d1:f4:5b:a5:2f:56:5c:5c:33:46:
         6c:f8:6a:da:33:01:49:7d:68:fe:4b:12:a6:f3:9f:73:56:aa:
         91:e9:94:90:19:bf:66:93:ce:21:85:c2:ce:41:0c:d8:d0:92:
         29:86:f0:68:24:63:ae:59:ee:0e:33:d2:a8:ee:57:b8:42:70:
         81:9d:7f:c3:53:e9:16:a7:78:2f:ac:01:19:fa:f3:af:b2:4c:
         80:9d:e4:e8:a6:be:f5:86:2d:c8:20:03:b8:7d:85:f0:cd:d9:
         73:19:7c:61:37:11:11:f9:ef:9c:bb:0a:56:e3:b5:ce:fe:63:
         2e:e0:2a:c3:2b:af:2c:a1:35:47:b0:21:b4:22:29:df:92:21:
         d9:5a:bd:72:a7:c6:a3:40:19:28:84:8e:2a:ed:cd:cc:fc:a7:
         04:e2:a7:af:f1:8d:d6:cd:ef:b5:7d:fd:70:94:60:29:f8:c5:
         d5:02:c7:5e:76:d6:9b:44:77:ff:ca:1f:f4:93:b0:c4:61:ec:
         5f:3d:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:57 2025 by rpki-client on console.sobornost.net