Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa
File:                     3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa (raw, json)
Hash identifier:          641+GYXZNw4123ybKrg6PrmJrdCv5tIFK7N2dcy60hY=
Subject key identifier:   29:A8:91:A3:C0:B0:7C:CC:EC:93:49:E6:69:1D:A1:94:30:DF:27:8A
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       191A38FC3C3E90EEAFE0CBFBB5F4A3BF0C8D4D93
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     266320
IP address blocks:        170.238.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1a:38:fc:3c:3e:90:ee:af:e0:cb:fb:b5:f4:a3:bf:0c:8d:4d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=29A891A3C0B07CCCEC9349E6691DA19430DF278A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:44:f2:e2:3c:74:98:23:b4:db:b2:8c:03:
                    ca:36:e1:64:c3:c8:90:3e:78:61:da:ff:05:0b:a0:
                    4d:f2:e1:b4:06:8f:00:ed:b9:17:4f:ba:b0:5a:57:
                    3d:b6:49:24:a3:e8:73:e4:51:a2:94:3c:83:74:8a:
                    36:e3:75:9b:6a:4b:ad:82:fb:94:1d:bd:9d:af:bd:
                    fa:28:b1:54:1e:fd:88:8a:4d:3e:24:2d:8d:c1:ae:
                    48:4f:af:37:eb:f6:b8:48:e1:d0:f1:5b:59:36:05:
                    b5:b7:14:2a:58:1e:04:30:c8:d1:f0:8b:17:b0:7d:
                    2b:37:ec:33:14:5c:18:71:eb:d7:8a:d8:92:c2:85:
                    c4:4f:91:a4:06:88:16:74:51:29:ae:38:10:75:5e:
                    48:25:ef:8b:13:1f:d8:9b:cd:b8:af:38:c9:68:21:
                    a4:80:92:0f:53:16:ce:1a:ef:9d:a4:be:86:f9:bb:
                    9a:d0:96:52:ec:cc:93:94:2a:87:2b:91:d1:66:a3:
                    0e:b5:d6:92:73:77:9a:ce:2b:8b:da:38:63:b9:75:
                    14:18:52:f7:eb:32:7e:27:4d:99:cb:4f:e3:c7:42:
                    44:76:43:83:e1:29:e0:13:1e:d7:61:a7:27:d1:76:
                    19:0f:b7:df:d6:62:c5:cb:94:88:f4:11:f8:0c:b2:
                    c3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A8:91:A3:C0:B0:7C:CC:EC:93:49:E6:69:1D:A1:94:30:DF:27:8A
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:0c:24:c5:5a:f3:78:12:cc:a6:e0:f8:38:d7:d8:eb:f0:02:
         8a:58:0a:79:99:4a:52:02:b9:93:db:5a:0e:74:85:38:5d:c7:
         1b:73:52:f5:16:5b:7e:03:fa:2c:8b:2b:a8:05:11:dd:52:9b:
         6b:52:92:8d:3e:33:38:66:cf:0b:ab:35:9f:c6:ec:c0:29:0b:
         e3:f0:8a:0b:f4:03:bc:90:ed:cd:76:11:50:f0:76:43:8b:cd:
         0d:14:19:a2:18:08:23:48:70:fb:91:2b:ad:87:09:d5:09:8e:
         8b:d8:93:c1:c3:9f:ff:7a:72:90:14:92:ff:dc:aa:35:4d:4d:
         0f:1a:c2:1f:00:8c:a5:6d:2c:96:96:51:66:e3:75:5f:fc:5a:
         8c:2f:96:09:24:ff:7c:ef:2f:d6:b7:ac:22:eb:fb:c4:cd:19:
         f6:b9:cf:52:49:cd:13:1f:b0:b3:d7:b4:59:ac:df:5a:71:20:
         c8:48:28:1a:ed:4c:03:77:29:3c:6e:0d:af:2a:c4:76:86:8e:
         76:68:39:5d:4d:7e:0c:e2:25:fd:18:3a:51:64:5c:5a:50:55:
         0b:30:bc:f7:fc:6c:63:0c:f9:3c:56:55:12:70:00:bd:0e:c8:
         e8:9f:c5:7f:ee:53:4f:c9:4d:e4:79:66:95:c0:99:21:b7:df:
         c9:d5:43:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:52 2025 by rpki-client on console.sobornost.net