Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa
File:                     3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          YEe2We+xLuDT/e+DOrgePxdi2UBnpKL1F5RUdjdaDfk=
Subject key identifier:   EF:0B:FC:48:04:37:27:21:B2:C9:D6:11:4F:E3:38:34:E6:1B:72:72
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       63575983BB4482322D3170632E2A7BF70F39C4A9
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa
Signing time:             Thu 06 Mar 2025 15:41:21 +0000
ROA not before:           Thu 06 Mar 2025 15:36:21 +0000
ROA not after:            Thu 05 Mar 2026 15:41:21 +0000
asID:                     262352
IP address blocks:        170.246.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 18:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:57:59:83:bb:44:82:32:2d:31:70:63:2e:2a:7b:f7:0f:39:c4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Mar  6 15:36:21 2025 GMT
            Not After : Mar  5 15:41:21 2026 GMT
        Subject: CN=EF0BFC4804372721B2C9D6114FE33834E61B7272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:37:88:0a:4b:0c:0c:62:3f:a2:54:ba:51:
                    48:bc:65:1e:9a:83:64:7c:88:a7:4c:45:7a:ce:da:
                    11:02:45:c5:fa:08:19:b7:e1:e5:43:9c:d1:8c:d1:
                    67:bd:15:aa:92:bb:56:93:61:13:4a:3a:da:99:c2:
                    cc:3e:af:e0:e7:35:d6:ae:11:0b:33:2c:ef:36:70:
                    2f:f5:a8:4c:97:75:13:79:9b:80:66:8b:81:00:91:
                    12:c5:4f:10:3c:b0:e1:67:5c:64:52:b1:3d:75:d5:
                    59:25:f2:3e:7f:d6:62:1b:83:ae:1b:93:dd:7a:bf:
                    2d:72:0d:c1:14:73:39:bd:ad:26:eb:4b:c8:58:56:
                    9f:93:a7:ff:38:07:63:80:93:46:a8:1e:23:20:16:
                    07:3e:2f:12:d0:c6:c0:c3:65:0b:75:3f:cd:47:fd:
                    c2:25:b0:96:46:9a:82:f1:7e:39:f3:c3:5f:c6:1a:
                    00:19:3a:3a:9b:db:de:45:a3:e8:97:68:f7:44:3b:
                    ab:bd:93:07:ae:71:20:82:60:01:64:31:9f:d0:2d:
                    10:ba:bb:0a:19:30:8c:da:ee:fe:08:a6:4e:dd:6d:
                    1d:ec:2d:0b:cf:e2:a4:1f:f8:2c:73:10:77:71:74:
                    7d:c6:a4:14:4e:a8:87:e4:6b:24:ce:ab:2d:f1:0f:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0B:FC:48:04:37:27:21:B2:C9:D6:11:4F:E3:38:34:E6:1B:72:72
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:50:f6:2b:39:fb:39:bf:a7:75:8a:93:72:8e:04:16:0d:ff:
         26:08:c7:a6:f3:3a:2c:e4:7c:b9:19:9a:f2:3b:1e:91:a8:a0:
         8a:4a:cb:26:19:37:a1:17:3c:12:3a:3c:69:a0:9b:da:15:01:
         9d:c1:44:19:76:9f:43:bb:6f:c8:73:b7:b0:f9:00:59:be:44:
         11:f0:89:86:91:2e:39:2b:e6:8a:b6:f1:f0:11:e4:39:20:d9:
         98:22:1f:96:d6:9d:db:58:8a:ef:81:1e:4e:29:42:fb:2c:94:
         7d:1d:7c:b7:68:2f:e5:ce:a0:10:d4:38:c1:0d:3b:64:3d:79:
         91:91:47:5d:44:a4:ba:8e:51:06:26:c3:85:45:ba:7b:31:a7:
         b6:70:db:4c:e8:80:e4:e8:a0:cb:de:a2:66:87:83:d1:26:f4:
         b4:61:1d:d8:e3:ec:93:7b:4f:52:91:08:26:fc:66:cd:88:2d:
         63:80:2a:10:05:bb:eb:1c:42:e7:6f:6b:bd:90:4c:cb:26:7f:
         ff:a2:09:b6:56:cc:f5:72:01:9f:fa:bb:aa:59:48:8a:7c:6b:
         da:02:68:c7:bb:79:0a:f1:bc:6c:b8:69:fc:86:c3:b3:57:bb:
         bb:a2:c4:0c:06:5a:c7:2b:6a:15:42:a8:ed:fa:de:cf:6b:80:
         02:ad:fb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:22:57 2025 by rpki-client