Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3230382e302f32322d3234203d3e20323635323239.roa
File:                     3137302e3234372e3230382e302f32322d3234203d3e20323635323239.roa (raw, json)
Hash identifier:          54Hrax6KYAz7eivnRhQmVb1MnQpSpdKXieWee9uf0+I=
Subject key identifier:   35:1A:79:7E:78:43:1D:D1:72:A2:77:88:B3:94:05:97:58:71:AF:C0
Certificate issuer:       /CN=62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A
Certificate serial:       4B3A2EAA0284201CD7C2395BD59E10F2062CD48D
Authority key identifier: 62:E3:DA:F2:BA:0A:F8:8F:13:E6:D8:B8:A6:B4:6A:31:82:26:65:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3230382e302f32322d3234203d3e20323635323239.roa
Signing time:             Fri 30 May 2025 22:09:05 +0000
ROA not before:           Fri 30 May 2025 22:04:05 +0000
ROA not after:            Fri 29 May 2026 22:09:05 +0000
asID:                     265229
IP address blocks:        170.247.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.crl
                          rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 01:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3a:2e:aa:02:84:20:1c:d7:c2:39:5b:d5:9e:10:f2:06:2c:d4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A
        Validity
            Not Before: May 30 22:04:05 2025 GMT
            Not After : May 29 22:09:05 2026 GMT
        Subject: CN=351A797E78431DD172A27788B39405975871AFC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f6:6e:d6:aa:e3:82:fa:6e:a2:6f:5f:a2:40:
                    54:60:69:34:86:72:c6:da:25:d2:80:09:7b:5e:9d:
                    d6:4c:30:c8:e6:5c:fd:6f:af:a3:68:c7:51:bc:77:
                    df:cb:11:ca:03:8c:99:60:2b:7a:4b:6e:00:bd:69:
                    9c:2d:ed:4c:81:5e:0c:8a:2e:27:87:90:8e:2c:0e:
                    4b:75:03:f2:af:27:b8:98:5f:7e:ab:f9:39:49:d0:
                    7c:ea:a5:77:3a:13:1c:98:1c:0b:fc:c1:ea:31:99:
                    57:42:1c:77:37:9d:c9:2b:45:13:97:04:58:de:ea:
                    85:b5:45:ec:2c:cd:50:6b:41:1f:07:04:2a:5c:ee:
                    b8:11:d5:f4:8c:54:38:99:07:1c:40:c5:7c:6f:45:
                    90:14:52:5d:b6:fc:db:4c:7b:11:d7:09:9b:07:ab:
                    48:03:47:5f:db:d5:75:cb:1c:89:ce:58:70:65:af:
                    e1:53:58:f8:a6:50:dd:64:29:6b:56:df:b2:79:84:
                    45:d5:b0:19:4c:58:ed:32:b6:8d:e8:3f:92:cf:a8:
                    fc:bd:b6:39:24:bd:b6:be:2c:97:34:04:0f:0d:e9:
                    9f:fe:70:5e:84:fe:6a:9e:f0:ca:f9:24:ca:b4:b7:
                    01:0e:a3:74:38:90:a1:93:ae:20:e5:77:7a:9c:34:
                    db:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1A:79:7E:78:43:1D:D1:72:A2:77:88:B3:94:05:97:58:71:AF:C0
            X509v3 Authority Key Identifier:
                keyid:62:E3:DA:F2:BA:0A:F8:8F:13:E6:D8:B8:A6:B4:6A:31:82:26:65:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3137302e3234372e3230382e302f32322d3234203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:45:f6:a3:d9:45:89:bb:01:dd:d6:b0:50:5d:61:d6:fd:01:
         9c:92:87:90:72:ce:db:58:cb:de:0f:a6:f9:65:d2:73:b7:ea:
         97:ee:28:c3:29:f9:7c:16:97:23:3b:20:92:75:46:e6:76:4b:
         e9:e6:6a:e1:40:c2:4d:0e:2d:86:36:d6:93:c1:4d:fb:f4:09:
         9b:76:0c:21:7f:7c:ad:70:92:3f:61:df:1b:dc:62:ff:eb:15:
         1a:0f:b4:5f:d3:b5:91:b4:b9:47:31:72:10:25:57:06:d2:e5:
         c6:39:57:88:f6:75:38:c5:f4:31:9b:50:ae:15:54:bb:50:b1:
         48:66:8a:f3:0d:e5:bb:c4:55:6e:90:a9:27:b6:62:2f:d2:af:
         f2:1b:0b:e0:c1:33:2a:f2:ef:74:96:94:18:94:86:b5:72:b5:
         97:6f:41:fc:52:1f:55:40:6e:8b:77:4c:c3:5b:c0:6e:1c:8d:
         2a:eb:33:28:1b:27:71:74:b8:f7:b7:7b:2e:93:25:d8:ae:4e:
         91:3d:07:c4:56:a6:07:38:36:d6:99:47:1c:5d:a8:f8:36:b1:
         39:1b:55:c2:37:51:8c:41:79:78:a6:05:d7:49:e9:da:b4:10:
         fe:66:1d:f5:8b:2b:de:73:bc:a9:a3:77:79:fa:f9:a5:f4:a3:
         b7:63:50:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:52:01 2025 by rpki-client