Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35322e302f32322d3234203d3e203631393031.roa
File:                     3137302e3235342e35322e302f32322d3234203d3e203631393031.roa (raw, json)
Hash identifier:          c8SEtxltbzxTD6mecjZaYNQoNWjIeWjJiy4z7fCuuCg=
Subject key identifier:   FC:73:6A:BE:BC:5B:02:B6:00:98:55:05:9E:01:32:D8:3D:CB:AC:E2
Certificate issuer:       /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial:       75B43ECF202FBC8723C2CFD5785DD1431D398691
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35322e302f32322d3234203d3e203631393031.roa
Signing time:             Wed 11 Jun 2025 20:53:59 +0000
ROA not before:           Wed 11 Jun 2025 20:48:59 +0000
ROA not after:            Wed 10 Jun 2026 20:53:59 +0000
asID:                     61901
IP address blocks:        170.254.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 08:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b4:3e:cf:20:2f:bc:87:23:c2:cf:d5:78:5d:d1:43:1d:39:86:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
        Validity
            Not Before: Jun 11 20:48:59 2025 GMT
            Not After : Jun 10 20:53:59 2026 GMT
        Subject: CN=FC736ABEBC5B02B6009855059E0132D83DCBACE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:6a:7c:6f:b1:cf:53:33:19:94:26:6f:49:
                    29:3b:4a:ee:e6:be:e7:ed:98:a2:f2:3c:f3:2f:95:
                    9b:57:40:30:0d:30:67:86:1a:cb:d9:8b:93:74:a5:
                    fc:29:de:6a:62:fa:49:c8:1a:e8:66:e7:d3:7a:fd:
                    74:93:99:97:d5:26:d9:4f:9d:5b:59:41:67:34:7e:
                    d7:4c:7d:ec:db:25:85:05:59:0a:f5:7c:a0:c8:82:
                    cf:5e:b0:10:e8:40:cf:12:36:36:86:df:f9:e7:95:
                    cb:61:10:fc:17:35:b5:40:d4:44:7f:53:a0:fa:3a:
                    fb:36:3b:88:84:64:5f:a9:dd:62:d5:e3:3b:5d:81:
                    58:06:46:93:ed:e4:6d:27:51:e4:ee:43:c9:64:e9:
                    a1:59:c0:50:e0:93:8f:de:71:b5:a1:0f:0a:c9:f1:
                    57:1a:58:d8:d9:db:b3:8b:34:22:5e:64:75:f8:d1:
                    58:33:98:54:82:09:64:10:05:1e:d3:05:3a:65:02:
                    3b:91:c0:40:95:11:9a:36:df:9b:3f:19:c7:f1:fc:
                    a6:70:04:86:2b:5a:28:6b:0b:d4:f5:84:49:e0:ac:
                    57:4d:42:3c:4c:7e:ec:6f:e8:12:65:e6:4a:85:ce:
                    5d:cc:f5:ba:96:6a:f9:e4:65:3b:f3:7e:3c:45:36:
                    32:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:73:6A:BE:BC:5B:02:B6:00:98:55:05:9E:01:32:D8:3D:CB:AC:E2
            X509v3 Authority Key Identifier:
                keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35322e302f32322d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:ec:d5:61:1a:54:4d:61:8b:95:ad:ff:62:f6:1b:43:50:46:
         66:45:1b:01:27:ee:d3:9b:de:da:76:60:d8:94:ad:79:14:85:
         a6:39:3f:c8:f5:56:4e:3a:9b:fa:9b:71:19:fe:9b:a2:58:04:
         78:08:d1:e1:39:02:88:9a:e4:b0:81:4e:d6:a9:0f:f6:08:61:
         14:53:42:a6:bf:68:15:32:1e:03:c5:ee:2a:0d:92:26:b9:cf:
         fd:48:48:88:73:de:ae:67:fb:5b:0c:bd:d7:8f:79:94:cb:95:
         ce:8f:2e:59:b2:c9:07:2e:d6:44:4a:0f:ed:e5:c9:38:cd:83:
         dd:33:ab:7f:f4:ae:04:8a:03:fa:7a:68:3c:f6:ed:fb:fa:c9:
         1a:88:c8:16:c3:fd:3c:22:1c:40:b3:2d:a7:42:77:87:87:b9:
         1c:49:db:e9:27:27:93:32:e3:30:4c:c8:15:49:49:c8:fa:24:
         35:ef:58:21:52:cc:a3:32:3e:4d:33:b3:8a:e9:d1:8a:9c:8f:
         4c:21:d8:f7:ff:cc:30:b5:97:14:25:59:c0:84:b0:c9:62:cd:
         ea:d1:17:59:eb:e1:a5:97:94:96:6a:ef:a0:19:73:c8:3e:dc:
         60:84:4f:f9:c9:0e:92:9b:10:1a:f6:84:ff:12:17:78:d6:2d:
         88:84:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:04:42 2025 by rpki-client