Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39322e302f32322d3332203d3e20323636333939.roa
File:                     3137302e38312e39322e302f32322d3332203d3e20323636333939.roa (raw, json)
Hash identifier:          cGWYESjbIqRNzidKQX0QhxMcsNA8qjG4ZzUCngjI/LI=
Subject key identifier:   FC:D1:D3:75:83:5A:07:3E:14:D2:FB:CD:48:30:48:9D:D7:A8:FF:84
Certificate issuer:       /CN=00052346073E1897B04F80DC763E310E1A83518A
Certificate serial:       5379BB20566894B92E91C0C7A9742A0550BCA6F8
Authority key identifier: 00:05:23:46:07:3E:18:97:B0:4F:80:DC:76:3E:31:0E:1A:83:51:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00052346073E1897B04F80DC763E310E1A83518A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39322e302f32322d3332203d3e20323636333939.roa
Signing time:             Tue 11 Mar 2025 19:59:33 +0000
ROA not before:           Tue 11 Mar 2025 19:54:33 +0000
ROA not after:            Tue 10 Mar 2026 19:59:33 +0000
asID:                     266399
IP address blocks:        170.81.92.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/00052346073E1897B04F80DC763E310E1A83518A.crl
                          rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/00052346073E1897B04F80DC763E310E1A83518A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00052346073E1897B04F80DC763E310E1A83518A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:79:bb:20:56:68:94:b9:2e:91:c0:c7:a9:74:2a:05:50:bc:a6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00052346073E1897B04F80DC763E310E1A83518A
        Validity
            Not Before: Mar 11 19:54:33 2025 GMT
            Not After : Mar 10 19:59:33 2026 GMT
        Subject: CN=FCD1D375835A073E14D2FBCD4830489DD7A8FF84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fc:b7:e0:d8:ee:e4:f5:77:84:ec:b5:99:d5:
                    a3:ac:37:75:22:36:c1:23:f9:c6:de:70:dc:3b:43:
                    2e:46:3d:e0:22:93:9a:65:48:1a:54:d6:53:73:ab:
                    73:bb:2c:ac:38:e2:62:c4:24:71:77:cf:e4:cb:c4:
                    97:9e:fa:15:f1:da:96:c9:a3:79:bd:cf:e2:8e:1e:
                    90:45:6a:95:b2:b1:0c:b3:2f:ba:a4:56:78:b4:ea:
                    85:0c:94:ee:03:ba:26:2d:2a:b5:6d:b7:0f:35:80:
                    b5:bc:8c:53:76:21:54:fa:c2:83:7d:59:b8:46:2d:
                    cb:7b:35:e6:a9:0a:7d:70:ec:8b:b3:61:b7:a5:8f:
                    bd:19:bf:00:51:d7:c5:7a:8f:fb:14:2e:56:ef:f0:
                    65:be:fc:e7:3e:44:eb:16:94:3f:5c:8b:70:1f:1f:
                    5c:c6:91:07:af:00:b4:b1:e5:9c:29:4b:1a:8c:ce:
                    46:ea:a2:48:02:27:ea:40:7b:aa:13:cd:48:ba:d3:
                    e8:6e:27:f7:26:b1:91:d2:a6:ea:c2:02:67:44:b8:
                    c7:20:b3:0d:92:9a:d3:5b:a3:3f:85:c5:fe:55:e9:
                    2f:9b:fe:64:d3:0d:1b:05:32:dc:91:87:64:d9:2b:
                    e2:f1:2b:5e:5d:e1:9c:d8:72:4e:93:23:91:1b:e3:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D1:D3:75:83:5A:07:3E:14:D2:FB:CD:48:30:48:9D:D7:A8:FF:84
            X509v3 Authority Key Identifier:
                keyid:00:05:23:46:07:3E:18:97:B0:4F:80:DC:76:3E:31:0E:1A:83:51:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/00052346073E1897B04F80DC763E310E1A83518A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00052346073E1897B04F80DC763E310E1A83518A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39322e302f32322d3332203d3e20323636333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:ea:8c:f2:f1:1a:04:f9:a2:ca:3d:35:82:a8:62:d1:76:1b:
         df:47:6d:e6:76:33:1a:b7:59:a0:98:bc:c6:e8:65:c7:c4:15:
         65:80:3c:a0:64:b7:99:49:15:7c:dc:37:f1:e1:95:93:44:39:
         9b:59:67:49:46:d6:0d:aa:14:0e:2e:c8:dc:66:4e:ca:2d:b9:
         5e:b4:15:d6:75:6b:63:03:9c:de:44:ec:d8:79:39:5d:59:c1:
         c8:58:e8:07:4a:94:db:06:2c:f3:44:2d:75:02:43:87:e3:9e:
         b5:b9:15:19:92:39:4c:a8:c5:96:1b:f5:b9:b5:4e:f8:a3:f8:
         40:84:12:fd:30:18:7b:90:bb:b3:9d:aa:d9:32:2e:ab:1d:71:
         9b:97:cc:e7:97:23:b7:de:ee:35:bc:55:c2:2e:a4:d8:3f:f1:
         38:aa:3d:8e:ec:83:c3:a2:a4:53:de:a8:4e:02:d3:45:a4:61:
         6a:c8:43:5c:d3:4f:c7:21:62:c9:0d:b9:ae:1e:e5:51:2f:56:
         a5:14:08:53:df:28:f0:40:2a:6a:ff:6f:64:1e:23:f1:2c:dd:
         2b:ff:e7:65:bb:16:5a:ba:af:5b:24:5b:9a:97:1f:e4:b4:4e:
         49:29:f5:44:20:6c:6d:6b:6c:7b:e0:01:c6:9a:f1:c2:fa:60:
         26:85:a0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:44 2025 by rpki-client on console.sobornost.net