Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa
File:                     3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa (raw, json)
Hash identifier:          RPsznwY/0nypjtWj7dObhIaUIZsa9BmugFUSQVfRa0E=
Subject key identifier:   D1:9B:1D:3E:13:D2:8F:B5:C8:49:1C:64:48:18:86:10:50:AB:C4:D8
Certificate issuer:       /CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Certificate serial:       2E5DED4FFB9FF11298CCDEC05498F4772F54E0C6
Authority key identifier: AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa
Signing time:             Thu 29 May 2025 18:50:13 +0000
ROA not before:           Thu 29 May 2025 18:45:13 +0000
ROA not after:            Thu 28 May 2026 18:50:13 +0000
asID:                     262503
IP address blocks:        167.249.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 09:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5d:ed:4f:fb:9f:f1:12:98:cc:de:c0:54:98:f4:77:2f:54:e0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
        Validity
            Not Before: May 29 18:45:13 2025 GMT
            Not After : May 28 18:50:13 2026 GMT
        Subject: CN=D19B1D3E13D28FB5C8491C644818861050ABC4D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e2:23:16:54:2f:03:20:79:2f:92:e0:49:60:
                    28:d0:6c:c7:a3:31:66:1d:07:88:5a:29:56:29:bc:
                    24:8b:fe:8f:6e:56:43:6e:47:7f:69:5c:61:d5:55:
                    d3:92:0b:5c:a8:11:2c:07:44:21:ff:a6:f5:0b:77:
                    e7:57:99:9a:b9:4c:17:c1:77:c6:e5:03:3a:a5:bf:
                    f9:b4:08:a5:90:0f:75:b3:5a:77:ac:8d:f0:d5:9d:
                    4e:a0:e4:fe:ab:93:55:2f:7b:d8:df:65:61:f5:da:
                    29:25:91:b3:aa:13:49:7c:56:42:42:c0:80:ae:eb:
                    8c:3b:fa:d8:8d:2b:db:3d:d2:9b:4e:6c:29:fb:72:
                    79:65:38:10:b1:74:e6:b5:7c:5b:38:b0:da:49:c4:
                    2f:19:ce:f1:4d:e9:94:59:f8:4a:a3:a0:6d:3f:51:
                    2b:5c:69:ba:a0:38:cc:d1:c9:1b:86:1e:cf:cb:85:
                    31:fb:77:f5:c1:0c:17:bb:b6:bc:77:98:0e:96:84:
                    f3:36:cf:ae:a2:a7:a6:5a:7d:da:d2:d7:ec:1b:27:
                    9a:3c:bf:b0:83:fa:fa:49:f5:ff:74:97:7f:15:f7:
                    97:2a:21:c3:6f:67:b6:fa:9f:2c:15:5a:03:35:30:
                    4e:60:58:3f:ae:0f:3e:b5:fe:90:ce:6e:f1:6c:c7:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9B:1D:3E:13:D2:8F:B5:C8:49:1C:64:48:18:86:10:50:AB:C4:D8
            X509v3 Authority Key Identifier:
                keyid:AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:86:c0:96:24:40:d4:9c:6f:44:cf:d5:b7:3e:7f:28:ef:fa:
         69:cf:bf:de:93:19:83:0a:47:c4:7a:6e:84:3a:11:a0:e9:08:
         93:a9:66:67:34:0d:f8:6b:b3:ed:a6:48:7a:9e:6a:a1:87:c2:
         df:ec:4f:53:a7:ea:ea:d7:38:28:ad:2b:ff:4b:77:31:df:2f:
         6e:2a:19:9b:ee:85:49:60:ed:a8:b1:04:39:3f:27:43:c3:c3:
         56:c6:63:47:bd:64:e8:25:e1:e8:59:a6:32:65:4d:3e:90:24:
         57:32:43:c6:db:06:db:59:71:03:51:aa:3a:24:08:c3:49:bf:
         0d:c4:bc:b6:f1:b5:34:dd:86:51:be:1c:c0:94:fa:94:ea:a3:
         c2:e5:36:24:16:d3:3b:d6:70:b8:67:4e:86:17:70:a1:4e:5b:
         7e:cd:12:12:6c:48:cf:77:0e:59:d8:1f:3c:8a:5d:e1:98:f0:
         3b:30:7a:8e:ea:d0:54:09:2e:5d:18:05:00:fb:23:a6:66:52:
         01:09:7f:66:bd:2d:c6:7c:7a:09:fb:03:d3:93:7a:62:e7:fb:
         eb:18:b8:71:65:3d:7a:e3:db:0a:c9:30:a3:9d:6f:53:70:36:
         52:9d:df:0d:3a:c8:71:d7:09:24:bc:5d:bb:21:43:ac:f7:51:
         11:a3:40:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:15:27 2025 by rpki-client