Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37382e302f32332d3233203d3e20323636353035.roa
File:                     3137302e3234342e37382e302f32332d3233203d3e20323636353035.roa (raw, json)
Hash identifier:          zYfkxrKkqL3tYrhKgo7C4mfgls0J10QOQdD+qfnFkqw=
Subject key identifier:   BC:2F:7B:7D:F1:DF:56:7F:16:DD:17:99:E8:B8:F6:16:DE:F6:3C:8B
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       51C4D8A190704BA2382DE9815AB4116A1F4750D5
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37382e302f32332d3233203d3e20323636353035.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     266505
IP address blocks:        170.244.78.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 21:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c4:d8:a1:90:70:4b:a2:38:2d:e9:81:5a:b4:11:6a:1f:47:50:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=BC2F7B7DF1DF567F16DD1799E8B8F616DEF63C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:3e:71:e8:fd:f0:41:35:20:96:29:2b:3f:
                    d2:e4:76:7f:15:7b:9b:1b:43:0a:e6:f9:c2:c6:b0:
                    f2:c3:13:42:0e:40:da:80:fc:75:74:78:89:15:b6:
                    2f:bd:4c:57:b4:fb:fc:85:2c:0a:b6:24:ec:ec:a7:
                    ab:d1:ae:4d:0b:d9:8d:d0:56:8c:93:58:07:14:aa:
                    92:a0:3c:fc:93:c8:9d:24:b8:8d:f3:d7:70:61:77:
                    d4:93:34:83:3c:d9:71:fa:68:0e:0b:ec:72:82:b9:
                    06:6d:6e:1f:e0:dd:00:fa:09:c5:40:78:58:3d:30:
                    cd:01:ce:fc:81:49:2f:96:15:b3:7b:64:8f:6d:bf:
                    73:35:7e:84:f5:cf:a8:1f:d9:75:0e:7b:2b:71:f1:
                    94:18:81:d2:7d:9b:f8:ef:de:89:d2:1b:37:22:0c:
                    26:ef:ff:ce:80:d1:b3:68:2c:61:a6:03:64:e2:b6:
                    46:09:91:e1:e7:21:a7:c9:2b:94:4b:1f:eb:08:2b:
                    1e:02:2a:a0:f9:02:a4:09:c7:d8:d2:8b:db:05:aa:
                    3b:0c:8c:18:96:fd:c0:b5:76:46:57:12:4c:39:06:
                    b9:88:0d:f6:7f:a3:3d:3f:8a:db:ae:f8:3f:1e:c2:
                    27:82:b3:6e:60:93:7b:50:8f:7c:62:dc:a7:a2:20:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2F:7B:7D:F1:DF:56:7F:16:DD:17:99:E8:B8:F6:16:DE:F6:3C:8B
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37382e302f32332d3233203d3e20323636353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:18:ac:e8:af:06:1a:52:e4:e5:96:29:3e:2c:38:71:d7:de:
         79:10:ba:ea:b7:57:ba:e8:a1:6d:c7:c2:db:84:97:d1:ef:d4:
         df:cf:18:fa:7d:cb:94:45:15:04:f6:45:9f:29:5c:a8:6f:ff:
         64:b0:1c:21:40:bb:2d:55:f4:29:03:e3:dc:e3:cc:1b:9a:15:
         f1:02:e2:d2:0b:ef:4f:fd:53:5d:28:36:54:7a:c8:1f:de:64:
         87:f9:73:6d:25:e6:e1:a8:34:66:ae:37:72:c0:25:c1:d1:bd:
         9d:d5:cd:cc:da:7d:a0:25:66:e3:ce:8f:6a:26:07:7d:3f:40:
         96:0e:b3:8d:fa:fd:90:bd:ef:11:43:ea:54:dd:80:f0:eb:97:
         84:a5:fd:cd:26:c7:79:c3:71:bb:b4:73:ab:94:b6:79:a0:e4:
         28:39:8f:3f:2e:73:f3:33:98:bd:30:b4:dd:14:a5:58:ab:c1:
         de:6b:e5:fe:5f:0c:f8:f9:1f:8d:55:00:42:d0:81:c6:bb:4b:
         ce:b4:9b:46:94:1b:0c:be:f5:1a:5b:a3:a4:d0:ec:be:57:8a:
         ac:0d:de:05:5f:86:ab:88:9c:46:50:10:6f:e5:10:81:51:a0:
         36:5b:59:98:7c:e3:33:6d:80:23:4a:7d:65:b2:32:64:fe:39:
         ad:c0:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:17 2025 by rpki-client on console.sobornost.net