Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3137302e37382e3136342e302f32322d3234203d3e203238363538.roa
File:                     3137302e37382e3136342e302f32322d3234203d3e203238363538.roa (raw, json)
Hash identifier:          ILaUv5LheA82BLcRiTZ4J5bL4j6PSH8fBcs/nV/+rG4=
Subject key identifier:   B1:DA:B7:67:B7:26:F6:20:E0:16:AD:3F:83:2B:25:BA:0C:23:B1:75
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       6654DB21B8CE523FE3E77A8F7F3C39630AC89A24
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3137302e37382e3136342e302f32322d3234203d3e203238363538.roa
Signing time:             Thu 06 Mar 2025 10:17:15 +0000
ROA not before:           Thu 06 Mar 2025 10:12:15 +0000
ROA not after:            Thu 05 Mar 2026 10:17:15 +0000
asID:                     28658
IP address blocks:        170.78.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:54:db:21:b8:ce:52:3f:e3:e7:7a:8f:7f:3c:39:63:0a:c8:9a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Mar  6 10:12:15 2025 GMT
            Not After : Mar  5 10:17:15 2026 GMT
        Subject: CN=B1DAB767B726F620E016AD3F832B25BA0C23B175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:7b:33:f6:74:3c:d0:47:50:b3:b7:6e:57:
                    f6:0b:98:76:fd:55:7c:66:7f:22:dc:52:6c:44:af:
                    79:bb:de:92:15:0d:b1:6d:55:47:5e:6f:8f:e1:84:
                    77:8b:36:34:4a:36:e0:56:04:d0:11:7e:7d:c9:e7:
                    2f:4f:00:45:f6:0a:96:ca:e3:e2:19:ec:61:82:5b:
                    c7:cb:67:e5:e5:42:ad:86:c0:53:70:92:11:2e:91:
                    15:50:50:09:1e:c0:da:7c:8e:44:e3:95:3a:7f:8b:
                    39:f0:c2:fd:4c:9b:a5:fc:be:d6:e6:96:00:66:bd:
                    2d:c4:3b:fc:b1:b0:f6:b2:a9:2c:0c:fc:ab:71:6d:
                    be:e1:78:a4:8b:55:5b:25:3d:73:b7:1b:93:74:58:
                    67:16:df:6e:06:a7:c7:88:5b:53:e3:e9:e0:8e:f4:
                    d4:a4:46:6e:b1:e0:0a:27:63:4f:1f:96:30:8d:e9:
                    f3:b2:41:f6:a4:15:76:5b:6e:6d:f6:5e:86:4d:fe:
                    73:29:a5:02:ba:21:9a:be:b1:33:40:31:f0:c8:60:
                    e1:33:d9:26:8e:0e:30:38:c6:01:b0:95:68:42:6c:
                    7a:6d:3a:43:dc:28:0b:75:77:8c:7f:4a:e7:51:ae:
                    53:da:68:92:9d:6b:a1:a7:cd:ab:2a:72:7b:3b:82:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DA:B7:67:B7:26:F6:20:E0:16:AD:3F:83:2B:25:BA:0C:23:B1:75
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3137302e37382e3136342e302f32322d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:a9:e6:96:80:ab:b4:6c:67:8d:cc:77:b8:73:3c:c6:97:c9:
         1d:4e:df:6f:2d:1c:ec:c0:2a:aa:b3:9e:ae:6a:73:5a:61:be:
         a6:9b:f1:93:d0:85:5a:05:e1:81:a0:49:11:15:1e:db:df:f1:
         92:5a:24:ec:3e:e2:8f:cf:c8:12:69:18:fb:18:b9:60:fe:ea:
         c2:0a:de:cc:05:9f:29:31:10:c7:c4:a1:ad:32:00:96:63:cb:
         82:dd:e8:82:5c:d6:bb:71:6a:9b:12:03:ef:0b:82:04:c0:80:
         0e:38:81:c0:08:ec:77:5f:45:87:fa:ca:99:99:e8:73:5d:d8:
         32:f0:c8:0b:44:9e:93:04:c7:80:de:7b:52:e4:d9:d0:64:7e:
         87:bb:cb:b4:d2:8e:a6:30:55:84:5d:c6:73:e2:3b:4b:bb:0a:
         52:c4:85:1d:21:ea:f1:ed:91:72:ca:b0:c8:ec:71:d9:1a:99:
         51:b1:d6:45:fb:fc:96:8e:02:8c:6c:91:bd:86:09:d7:d5:1f:
         76:4e:ea:6c:09:cd:8a:e0:34:61:24:6b:8d:4d:33:b8:20:6c:
         d2:f7:3e:e7:36:20:ac:79:17:9a:46:cf:34:0d:a8:7b:7c:01:
         bf:1c:c6:d9:e8:8a:8e:0f:88:d2:e2:53:26:02:d2:62:61:4a:
         3e:00:a4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:21 2025 by rpki-client on console.sobornost.net