Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/3137302e38322e34382e302f32332d3233203d3e20323636343338.roa
File:                     3137302e38322e34382e302f32332d3233203d3e20323636343338.roa (raw, json)
Hash identifier:          1LppSBT/yT7gEZpDo2P5UxkC50KrJRzz0VHQkPNP0h0=
Subject key identifier:   55:37:98:6B:C3:66:B8:00:00:D1:57:DE:81:27:1E:3C:E4:AC:35:81
Certificate issuer:       /CN=2003446125EA52EEA4D454A94B69C79AEDEB7687
Certificate serial:       2B7CC4313796F02ED718A6A8EA7BABD377D9558F
Authority key identifier: 20:03:44:61:25:EA:52:EE:A4:D4:54:A9:4B:69:C7:9A:ED:EB:76:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2003446125EA52EEA4D454A94B69C79AEDEB7687.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/3137302e38322e34382e302f32332d3233203d3e20323636343338.roa
Signing time:             Thu 17 Apr 2025 16:42:35 +0000
ROA not before:           Thu 17 Apr 2025 16:37:35 +0000
ROA not after:            Thu 16 Apr 2026 16:42:35 +0000
asID:                     266438
IP address blocks:        170.82.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/2003446125EA52EEA4D454A94B69C79AEDEB7687.crl
                          rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/2003446125EA52EEA4D454A94B69C79AEDEB7687.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2003446125EA52EEA4D454A94B69C79AEDEB7687.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7c:c4:31:37:96:f0:2e:d7:18:a6:a8:ea:7b:ab:d3:77:d9:55:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2003446125EA52EEA4D454A94B69C79AEDEB7687
        Validity
            Not Before: Apr 17 16:37:35 2025 GMT
            Not After : Apr 16 16:42:35 2026 GMT
        Subject: CN=5537986BC366B80000D157DE81271E3CE4AC3581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:5d:dc:39:24:d2:00:ad:55:b9:20:a5:e7:
                    99:9e:cd:47:96:4d:b9:0f:8b:59:25:3c:2a:98:d5:
                    c6:05:61:02:2c:7e:b4:b0:c5:49:c9:90:00:e4:7e:
                    99:5e:95:73:75:e7:c4:5a:79:95:51:df:cc:f2:53:
                    41:83:8b:7b:81:50:96:06:b8:82:a1:3b:61:53:04:
                    e4:8c:45:ab:b6:02:78:b1:ec:ad:7b:8a:80:cb:30:
                    2e:a4:a4:00:e8:f8:1d:4f:6d:d3:8b:cd:43:11:cb:
                    bf:aa:9d:28:f5:da:e6:bb:53:df:9d:25:34:e6:e8:
                    a5:0f:df:5e:c1:d7:2a:38:18:52:e1:2b:28:5d:62:
                    d7:ad:37:fd:dd:07:e3:00:85:36:9a:7f:01:07:68:
                    49:c0:a0:47:37:9f:c2:cf:b9:e5:20:d2:86:d0:7b:
                    8e:6f:bc:85:f8:1e:ec:3d:56:16:9c:ac:de:51:25:
                    54:36:05:db:be:91:50:25:2a:40:02:c8:b6:2c:f0:
                    16:38:3d:95:58:76:90:62:00:e0:93:01:4a:82:f9:
                    e0:b0:a5:75:cf:fd:54:61:c4:46:85:2e:62:ca:7b:
                    88:eb:43:a8:41:32:eb:e7:f6:25:08:88:9b:d3:02:
                    c5:88:40:8e:e2:e4:c8:c3:ac:1f:f3:eb:ea:bf:f8:
                    02:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:37:98:6B:C3:66:B8:00:00:D1:57:DE:81:27:1E:3C:E4:AC:35:81
            X509v3 Authority Key Identifier:
                keyid:20:03:44:61:25:EA:52:EE:A4:D4:54:A9:4B:69:C7:9A:ED:EB:76:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/2003446125EA52EEA4D454A94B69C79AEDEB7687.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2003446125EA52EEA4D454A94B69C79AEDEB7687.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/3137302e38322e34382e302f32332d3233203d3e20323636343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:06:a8:75:82:27:ca:4a:bc:6d:78:36:b8:e7:cc:11:01:08:
         50:bf:54:be:79:cf:d6:13:ff:08:9f:2f:09:5f:10:9a:47:52:
         b2:49:0d:11:84:bc:37:66:d0:6f:8e:5e:87:76:03:5e:b7:eb:
         76:d1:57:81:f7:bc:e3:b5:fa:ec:d9:da:20:cd:84:1f:da:c8:
         8e:fa:d3:e7:fe:d2:dc:26:5f:7c:81:93:ab:ad:cd:65:2c:6f:
         9c:24:3f:1e:e6:01:ae:af:92:69:43:a5:cf:ce:c8:7a:1e:30:
         0a:4b:4e:52:09:55:67:4b:38:4b:eb:a7:ff:ac:d6:06:5d:8a:
         34:37:66:fc:7f:44:35:79:77:2e:88:c3:9d:0d:30:e7:fd:45:
         b9:d3:11:8a:38:2a:38:10:8e:a5:fd:3a:68:79:78:e4:81:34:
         58:15:07:43:b5:ae:7c:72:99:37:92:54:81:79:61:0f:74:cf:
         8d:18:aa:9b:89:f3:d5:a7:c8:2d:0c:49:12:ae:d4:23:ce:35:
         55:0b:36:2b:fb:2e:59:ee:3c:96:2f:35:16:52:7e:53:ae:34:
         40:39:28:66:59:11:b8:f1:88:9c:e0:fd:2a:fc:69:d8:92:9a:
         05:54:38:c9:53:37:69:6a:82:bd:49:be:50:31:58:05:25:6a:
         37:30:b7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:34 2025 by rpki-client on console.sobornost.net