Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/3137372e37302e3234362e302f32332d3234203d3e20323638353733.roa
File:                     3137372e37302e3234362e302f32332d3234203d3e20323638353733.roa (raw, json)
Hash identifier:          nZyNzdmoxBP2l4W6q4rImObeZkFUPXopb03eNf3jESY=
Subject key identifier:   09:3A:59:E2:E1:65:49:DA:9E:72:84:33:60:17:BA:B3:14:BF:13:2B
Certificate issuer:       /CN=75155F6533A280D13727D38801E8DB54640195A7
Certificate serial:       3179B48FD18270C5FE4165C597AD419ED256397F
Authority key identifier: 75:15:5F:65:33:A2:80:D1:37:27:D3:88:01:E8:DB:54:64:01:95:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75155F6533A280D13727D38801E8DB54640195A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/3137372e37302e3234362e302f32332d3234203d3e20323638353733.roa
Signing time:             Tue 01 Apr 2025 12:43:58 +0000
ROA not before:           Tue 01 Apr 2025 12:38:58 +0000
ROA not after:            Tue 31 Mar 2026 12:43:58 +0000
asID:                     268573
IP address blocks:        177.70.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/75155F6533A280D13727D38801E8DB54640195A7.crl
                          rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/75155F6533A280D13727D38801E8DB54640195A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75155F6533A280D13727D38801E8DB54640195A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 14:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:79:b4:8f:d1:82:70:c5:fe:41:65:c5:97:ad:41:9e:d2:56:39:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75155F6533A280D13727D38801E8DB54640195A7
        Validity
            Not Before: Apr  1 12:38:58 2025 GMT
            Not After : Mar 31 12:43:58 2026 GMT
        Subject: CN=093A59E2E16549DA9E7284336017BAB314BF132B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dc:ea:1d:6b:fc:5c:c7:8e:c2:96:61:6c:72:
                    c8:2c:96:f7:ac:50:40:49:7c:d2:58:6d:81:65:84:
                    68:51:c5:81:7f:7f:9f:d1:aa:18:b7:29:27:e0:b5:
                    df:4a:d7:d1:45:f3:b2:fa:35:5b:d2:7d:b8:49:64:
                    d7:58:c8:a1:35:d1:63:db:24:3d:c0:48:0f:1c:09:
                    eb:04:a0:61:4a:68:d4:53:9b:05:02:36:3f:f0:8f:
                    57:09:d1:0a:c1:5c:93:4b:80:1b:4a:e6:a6:97:4b:
                    4c:d1:31:87:92:fe:4d:f5:4d:3f:2b:d3:f3:f7:2c:
                    50:6b:92:10:d2:96:d1:59:f8:a9:2f:06:c3:75:dc:
                    28:47:40:d9:7f:8f:34:fc:3d:98:eb:ac:e6:ba:6e:
                    b8:fc:41:42:ce:5d:cf:0f:4f:8d:18:52:b8:30:e4:
                    87:7f:d5:e2:5a:89:ad:21:91:76:57:86:d2:99:4a:
                    fc:34:dd:4e:16:27:00:72:b4:0d:82:88:e9:9c:5b:
                    5f:73:30:54:62:38:c3:f5:4c:98:6a:db:0c:95:12:
                    c2:30:a2:59:cd:58:ac:be:ff:ae:8b:37:5b:57:7f:
                    31:7d:9a:ec:5a:58:9d:5e:7c:c6:b7:76:b3:d1:18:
                    a3:5b:00:6c:1b:de:4e:af:64:e8:69:aa:0a:d0:d9:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3A:59:E2:E1:65:49:DA:9E:72:84:33:60:17:BA:B3:14:BF:13:2B
            X509v3 Authority Key Identifier:
                keyid:75:15:5F:65:33:A2:80:D1:37:27:D3:88:01:E8:DB:54:64:01:95:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/75155F6533A280D13727D38801E8DB54640195A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75155F6533A280D13727D38801E8DB54640195A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/3137372e37302e3234362e302f32332d3234203d3e20323638353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:04:bb:58:1c:cc:e6:a7:7f:42:1b:a4:a4:51:9c:61:88:40:
         09:e7:2e:73:80:66:de:64:7e:44:97:a5:5f:08:2c:22:55:2e:
         11:0b:96:ea:e7:26:bc:b3:e9:6e:a7:fa:f0:76:4e:1b:fc:9f:
         86:cd:d0:be:02:57:01:4e:bb:de:e0:fe:bf:b7:0a:b9:34:cb:
         89:61:dc:35:35:ca:dc:21:23:46:57:a7:1f:c6:f7:0e:86:aa:
         c9:fc:b2:ee:93:cd:23:1c:15:c0:4b:12:ea:ab:1d:77:71:b9:
         1f:fd:61:0d:0d:51:54:7e:a9:75:3c:25:5c:c7:04:56:ee:fe:
         a5:bd:11:81:4e:09:8e:91:e3:31:63:4b:76:2a:0f:19:d1:d2:
         ea:8c:83:79:67:74:77:0f:18:ed:56:ea:cd:8c:42:f0:39:87:
         f3:de:af:0b:64:2a:25:3e:ac:f8:e6:76:c4:95:f9:d0:d9:2c:
         e0:4b:1e:1e:00:da:89:fd:fa:45:57:c4:4b:e6:b1:c5:d8:d8:
         a9:f4:75:fc:73:5b:a4:66:69:32:f3:12:f9:e5:47:42:9a:f7:
         a8:b4:8c:22:a1:0f:cd:00:86:98:bc:ad:60:ec:bb:63:66:1e:
         d5:88:74:4f:da:8a:3b:80:38:20:9d:fa:90:32:de:52:e2:5b:
         39:b9:8f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:32:44 2025 by rpki-client