Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32322d3332203d3e20323731323933.roa
File:                     3137302e3233332e3234302e302f32322d3332203d3e20323731323933.roa (raw, json)
Hash identifier:          p4WgUfCTtVgwwz/SXaWkxVoiJUm96La57T7dMLusVwU=
Subject key identifier:   3F:B8:23:9E:56:37:38:CF:9C:65:7C:68:51:6F:A1:03:A3:3F:6E:3E
Certificate issuer:       /CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Certificate serial:       6BFE0DF8B5005377CD59C3CDB31FAB1002AF0F47
Authority key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32322d3332203d3e20323731323933.roa
Signing time:             Tue 22 Apr 2025 17:00:00 +0000
ROA not before:           Tue 22 Apr 2025 16:55:00 +0000
ROA not after:            Tue 21 Apr 2026 17:00:00 +0000
asID:                     271293
IP address blocks:        170.233.240.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl
                          rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fe:0d:f8:b5:00:53:77:cd:59:c3:cd:b3:1f:ab:10:02:af:0f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Validity
            Not Before: Apr 22 16:55:00 2025 GMT
            Not After : Apr 21 17:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:ff:3a:68:c4:bf:fb:2b:b6:6b:3b:2d:01:
                    10:b6:f4:af:9b:bf:fd:b2:8e:28:f2:43:2c:3f:41:
                    a5:cb:f4:4e:d4:d6:8f:c2:db:56:f7:9a:54:04:a4:
                    90:d2:0e:9a:99:c1:19:82:2e:5f:2a:19:ea:8c:e2:
                    cf:ed:89:8b:8b:1e:24:f2:b2:c2:c6:6f:73:e8:67:
                    58:94:55:bd:84:c9:b8:87:7f:e4:9e:08:5a:39:d8:
                    d5:8b:78:4d:ba:eb:46:61:cc:af:3a:5c:d4:54:14:
                    c6:3e:d6:bc:17:49:0c:be:d3:d4:c1:3f:d9:85:05:
                    75:b2:58:8b:ab:be:1c:3a:88:db:bf:ec:73:e3:ea:
                    09:26:f4:92:a4:e8:93:45:86:8e:bb:80:23:64:57:
                    34:12:5c:71:cb:e1:72:17:7e:94:61:5e:09:e1:ea:
                    e9:88:a4:f0:41:9a:53:49:45:fd:6f:f1:7e:d4:8c:
                    c9:ea:72:4b:b7:58:c2:ad:84:f6:48:0a:d5:ec:60:
                    6b:36:6b:61:e4:33:59:23:52:ea:36:c5:6b:92:b6:
                    63:3a:66:14:34:83:3a:5a:e0:f8:48:30:89:d1:33:
                    ca:3a:16:3b:d3:ba:f6:c1:9a:02:11:04:71:af:05:
                    44:81:cd:9e:45:e0:1d:bf:a9:15:59:af:36:05:46:
                    e0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B8:23:9E:56:37:38:CF:9C:65:7C:68:51:6F:A1:03:A3:3F:6E:3E
            X509v3 Authority Key Identifier:
                keyid:D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32322d3332203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:cf:ff:21:74:89:a9:eb:0b:80:4a:a6:34:0b:33:69:69:88:
         d3:5f:a6:54:d1:58:ab:d9:40:05:58:19:0c:e6:c9:5e:7c:00:
         df:a3:db:cf:9c:e4:1c:5a:b9:1d:80:e0:c6:56:67:89:3e:ee:
         f1:6b:6a:e6:f8:dc:fb:89:30:6a:6d:00:2c:5c:aa:22:2c:e9:
         68:94:13:e0:bb:06:73:8b:a1:89:66:ae:6e:e3:eb:2b:7c:03:
         f5:ed:32:3d:9f:57:3a:21:60:dc:68:01:31:07:6e:70:6b:0f:
         8a:4c:cc:c4:df:34:44:a5:74:99:ca:cc:8d:cc:af:24:fe:87:
         29:0f:14:ad:d8:55:7e:c0:00:3e:60:59:ac:30:0b:33:c3:55:
         59:9c:77:25:88:e8:e6:41:be:35:b6:b4:a5:13:f9:a1:b0:53:
         4d:9c:49:57:03:5b:29:3b:54:6e:82:c2:fa:01:22:14:8d:e7:
         4a:0b:e6:51:ac:ee:e4:2e:85:2f:72:ad:37:00:4d:a8:f6:af:
         e3:f6:34:73:f8:1f:4f:f0:4b:05:08:6c:32:fd:0e:8e:43:3b:
         8b:c2:2d:56:85:5c:50:2a:dd:5b:d5:5e:ce:08:0b:e6:a9:ac:
         34:72:cd:64:dd:ff:f5:c0:69:5f:94:94:c0:9c:1f:03:c6:a5:
         35:1a:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:19 2025 by rpki-client on console.sobornost.net