Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa
File:                     3137302e302e3231392e302f32342d3234203d3e20323635313431.roa (raw, json)
Hash identifier:          LXM7Fh4qzfaDBFtYvpY7h74G2VedPnIW1c+Iq3/3hyw=
Subject key identifier:   80:0F:DA:AF:CB:B4:A4:CC:95:64:8F:46:80:91:C1:82:EA:41:E3:AA
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       7506EC8119FF5EB2B3FB679F8C458B6BACBEF52F
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa
Signing time:             Mon 26 May 2025 18:28:44 +0000
ROA not before:           Mon 26 May 2025 18:23:44 +0000
ROA not after:            Mon 25 May 2026 18:28:44 +0000
asID:                     265141
IP address blocks:        170.0.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 09:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:06:ec:81:19:ff:5e:b2:b3:fb:67:9f:8c:45:8b:6b:ac:be:f5:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: May 26 18:23:44 2025 GMT
            Not After : May 25 18:28:44 2026 GMT
        Subject: CN=800FDAAFCBB4A4CC95648F468091C182EA41E3AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:3e:e8:66:6f:76:bc:81:9f:e9:11:a4:c4:
                    7d:2e:28:c5:36:5f:5d:88:87:1b:db:67:ca:be:8d:
                    31:06:bf:40:d9:c4:69:f9:97:fa:3b:fe:a6:58:96:
                    80:c9:c6:77:35:12:a0:ea:30:f1:63:c9:68:66:a6:
                    66:f6:e2:71:ee:a4:8b:32:40:34:d4:a8:4e:31:23:
                    5a:7c:31:19:74:ad:d2:1d:04:ff:22:2f:a7:25:00:
                    07:87:c1:fa:14:c5:81:f4:b4:7f:c0:9f:51:18:06:
                    a6:b1:7b:32:f0:ee:48:9b:37:ed:f8:a3:db:d7:25:
                    e7:70:2b:e1:ab:29:ab:2d:b3:ec:8e:b8:98:ef:ce:
                    53:2a:cc:7e:44:30:cb:14:20:76:8e:4e:92:0a:cb:
                    72:d6:b7:0e:18:46:e2:23:67:55:23:b9:01:63:6c:
                    b9:03:36:8d:c4:f5:23:05:8a:00:10:af:6f:b6:bb:
                    35:0a:4d:cc:b8:d9:56:da:a5:0d:da:37:19:0f:ae:
                    6a:b1:45:e4:dc:ba:e4:93:ec:ef:24:a5:5e:25:9f:
                    73:95:c3:83:42:dd:f7:4f:74:8c:6b:a3:3f:a1:64:
                    2e:b2:90:93:de:ca:03:fc:35:3e:02:e4:dc:0b:9d:
                    84:08:ef:17:1d:4e:e7:d9:d4:88:d1:dc:50:3a:2e:
                    2f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0F:DA:AF:CB:B4:A4:CC:95:64:8F:46:80:91:C1:82:EA:41:E3:AA
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3137302e302e3231392e302f32342d3234203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a0:60:fd:28:88:0a:a2:9e:a3:53:b3:ef:74:d2:81:20:04:
         5d:99:91:f1:73:cb:6d:21:6c:a0:84:32:88:bf:0e:cb:a0:bc:
         a6:7c:e6:e3:bc:6a:07:46:12:71:46:eb:d6:95:a2:b3:07:5e:
         52:a8:07:09:70:b7:e0:5f:ad:87:d0:1f:b3:7d:e0:ff:9a:1a:
         55:15:09:d1:cf:3d:b0:90:8b:dc:79:d4:89:a5:d1:64:dc:bf:
         16:12:4c:b2:b1:d1:35:fb:8e:cf:dc:7d:60:df:84:ba:b3:cf:
         5d:5a:ba:93:0b:ee:22:31:de:38:f1:12:05:f1:34:23:2d:c8:
         66:70:77:63:07:40:97:d5:ca:47:f4:1c:70:fd:db:c9:d7:5a:
         fc:31:bd:18:02:f2:37:08:e8:43:06:11:32:43:88:b0:e0:39:
         5f:b7:0a:59:98:cc:62:50:1d:4a:c0:80:be:d6:83:d9:bc:d0:
         e9:37:37:64:37:55:b9:16:5a:ea:7e:89:3b:29:9c:e3:4a:5b:
         f7:d0:a4:46:9c:aa:b4:73:80:fe:59:43:0b:c2:0e:75:cc:86:
         eb:17:c2:c7:7e:f1:06:13:dc:78:6d:dd:b6:a3:80:2d:a2:c7:
         34:98:88:9f:84:bf:d5:82:bc:53:96:fc:56:9e:a3:3d:7f:fe:
         df:9b:80:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 00:18:06 2025 by rpki-client