Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa
File:                     3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          9yKwkPmcl/pPTKGlxfTm9DAifXy55ijPIaS5t5BK788=
Subject key identifier:   08:33:81:A7:BA:32:A8:AE:06:33:28:E5:9E:FC:0A:E6:D3:67:37:C6
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       17412494B3099601349BD60AAD2B18C8BC4ED146
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa
Signing time:             Thu 06 Mar 2025 15:41:20 +0000
ROA not before:           Thu 06 Mar 2025 15:36:20 +0000
ROA not after:            Thu 05 Mar 2026 15:41:20 +0000
asID:                     262352
IP address blocks:        170.246.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 18:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:41:24:94:b3:09:96:01:34:9b:d6:0a:ad:2b:18:c8:bc:4e:d1:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Mar  6 15:36:20 2025 GMT
            Not After : Mar  5 15:41:20 2026 GMT
        Subject: CN=083381A7BA32A8AE063328E59EFC0AE6D36737C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:82:50:92:8c:0a:7a:6c:f2:af:4b:36:b3:
                    f4:b0:6d:02:e5:ae:33:83:56:89:c9:1e:d3:d9:a1:
                    4f:8c:25:b7:f3:48:af:f1:23:78:f4:3f:fa:bc:9b:
                    2e:21:21:9b:71:72:d6:cd:3d:4d:c1:d3:41:78:dd:
                    e7:cf:11:dc:5d:7c:66:91:68:78:06:62:83:b3:26:
                    b8:44:c4:d7:26:ad:74:2c:2e:d9:d2:ea:09:4d:ee:
                    18:0d:a1:7a:87:b9:54:90:46:ba:5e:59:dc:83:43:
                    2c:78:6d:54:40:84:21:35:8e:bd:80:b0:27:ad:5c:
                    d2:d6:04:0a:17:3e:99:1c:12:74:8c:a5:e6:09:db:
                    89:51:38:ad:86:5b:9a:e6:da:82:d3:db:a9:7c:78:
                    ea:08:39:7e:b7:6a:b2:19:60:21:00:b0:78:0a:b0:
                    5d:93:6e:03:46:c6:b6:6b:21:a0:2b:fb:8f:ca:6c:
                    31:06:cb:a3:d7:5b:e4:65:5d:d4:25:93:23:26:5a:
                    18:d6:84:20:f9:f8:6c:cb:07:68:71:f4:1a:8a:bf:
                    db:bf:43:d5:7b:6e:26:46:d0:3f:97:e8:67:a4:c3:
                    ee:19:84:ea:f7:24:e8:92:1e:8d:9c:26:41:30:a3:
                    37:1c:d9:0b:d2:80:2e:8c:2e:e0:64:8b:e4:5f:61:
                    c0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:33:81:A7:BA:32:A8:AE:06:33:28:E5:9E:FC:0A:E6:D3:67:37:C6
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:7c:42:60:f4:52:44:50:7f:f5:d5:29:dc:d2:a2:1b:f9:0d:
         1b:47:48:fb:96:aa:12:ea:88:3d:8b:e1:03:ac:85:5f:70:cf:
         fc:a5:c7:d9:b9:9c:94:85:dc:da:1a:60:e9:3d:5a:96:31:9a:
         66:c4:1d:fd:39:04:ef:49:94:54:54:7a:b4:bc:9b:a7:a5:ea:
         26:1b:1d:10:20:93:62:1c:20:c5:9b:e3:33:27:6a:4f:9f:08:
         38:83:fc:42:0e:67:48:ce:3b:83:50:37:14:31:15:41:fe:51:
         cd:24:39:d9:d8:06:bd:46:24:85:a2:42:de:b1:d7:7c:c0:a1:
         43:39:d4:e8:28:86:48:74:e9:f6:f4:ed:72:27:a9:a5:60:2a:
         5e:50:06:97:5c:b3:f6:87:d2:d1:1d:bb:6d:90:3b:4e:20:c4:
         fd:bd:9d:9a:f5:ef:a8:07:b6:6a:c3:74:1a:00:cc:78:1c:17:
         bc:44:85:77:8f:a8:62:1b:5a:bd:e2:d4:6b:5f:6f:24:e7:83:
         b3:6a:f6:3b:ba:cf:1b:5f:02:c1:22:92:94:a0:f0:cf:01:d2:
         4c:85:f7:80:a6:22:68:08:5f:3e:fe:28:0c:2f:e0:80:79:e1:
         51:c0:4c:fe:69:2f:05:da:6f:8d:f4:c1:5c:6a:cb:1e:e4:97:
         6e:9e:ad:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:18:33 2025 by rpki-client