Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234322e302f32342d3234203d3e20323635333834.roa
File:                     3137302e3235342e3234322e302f32342d3234203d3e20323635333834.roa (raw, json)
Hash identifier:          48k3BtNnutIT2T8u6Oc7twqZjyUY3slO/gMps199O4I=
Subject key identifier:   F4:75:F5:F4:6B:36:06:08:DA:AF:82:C5:67:55:A6:6E:4B:68:9A:0B
Certificate issuer:       /CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5
Certificate serial:       437DA2395FCC1C1A3CBDAF619A3EEC36B2CEEB05
Authority key identifier: 1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234322e302f32342d3234203d3e20323635333834.roa
Signing time:             Thu 01 May 2025 01:34:51 +0000
ROA not before:           Thu 01 May 2025 01:29:51 +0000
ROA not after:            Thu 30 Apr 2026 01:34:51 +0000
asID:                     265384
IP address blocks:        170.254.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7d:a2:39:5f:cc:1c:1a:3c:bd:af:61:9a:3e:ec:36:b2:ce:eb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5
        Validity
            Not Before: May  1 01:29:51 2025 GMT
            Not After : Apr 30 01:34:51 2026 GMT
        Subject: CN=F475F5F46B360608DAAF82C56755A66E4B689A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:c8:fc:16:1a:70:10:43:6c:0d:1f:e1:53:
                    77:b7:8b:42:12:d7:2f:3d:0b:36:04:6d:8f:e2:b8:
                    41:b0:08:85:6a:fd:d4:e2:80:5d:4e:18:59:d7:e1:
                    3d:ad:1b:e1:f9:3f:f7:54:f1:2c:fe:47:a5:11:80:
                    a4:a4:7e:65:e6:28:63:44:98:63:21:74:42:99:9b:
                    ad:ed:53:f7:89:de:2c:25:5f:4c:c0:70:8b:36:ee:
                    82:23:fe:a0:42:fb:40:00:bb:d0:63:34:7d:ef:c5:
                    ed:4e:b2:3c:6d:a1:5c:de:7b:ff:80:9e:db:c2:14:
                    8b:78:16:f3:22:8f:3c:85:9a:0b:dd:dc:ce:bb:a9:
                    5f:21:df:74:e2:4d:48:8e:21:23:13:26:ee:a4:1f:
                    09:16:3a:31:69:92:e1:72:86:a4:4a:5d:18:ff:ce:
                    1f:dc:00:ef:38:4e:80:6f:d1:bd:b2:64:6a:4e:16:
                    77:a2:58:4e:10:95:27:c6:8b:c2:74:2b:24:fc:bd:
                    04:dd:fc:c5:28:78:f7:e6:ea:b9:cb:93:bf:2c:36:
                    e6:57:0b:bb:f0:7a:74:31:14:35:a6:f6:4f:54:be:
                    e0:5f:ca:03:3f:75:1b:eb:56:04:57:61:ae:3e:2e:
                    94:a9:3e:a4:70:50:5f:62:2c:45:87:89:40:ae:2c:
                    64:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:75:F5:F4:6B:36:06:08:DA:AF:82:C5:67:55:A6:6E:4B:68:9A:0B
            X509v3 Authority Key Identifier:
                keyid:1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234322e302f32342d3234203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:00:c7:ec:54:5e:60:c9:34:37:d0:72:07:06:64:19:1f:b3:
         2a:db:e2:66:21:ab:01:54:35:e6:63:22:4d:2d:f9:a0:c3:26:
         fb:b3:b5:39:6d:f4:cf:9e:5c:1a:56:cb:f2:ea:57:36:89:0f:
         16:dc:ac:bf:8c:39:0a:b1:b7:7c:78:ff:9a:99:35:d5:59:e7:
         49:a3:b0:d4:9f:ed:19:3b:39:26:05:f3:fd:5d:90:04:f4:04:
         8a:a6:e7:e6:d8:03:03:06:1a:1b:90:98:fd:27:25:40:33:cf:
         18:1e:b4:f8:ca:99:55:ed:6c:e8:93:63:a0:76:b9:b8:88:c9:
         2a:42:04:1b:cb:9f:bb:c7:59:da:b5:bb:bf:84:0d:97:a2:f4:
         28:f2:a6:8d:9d:05:c4:22:c2:0b:de:09:0a:28:ce:da:62:1a:
         a3:85:05:9f:e9:c7:41:ce:db:77:04:2a:20:48:80:ee:df:33:
         fc:57:2d:8a:77:7c:b1:a1:1a:fa:bb:8b:20:fd:93:d1:7b:28:
         73:00:04:2a:60:ac:89:4f:f2:91:fe:f5:05:22:eb:87:35:12:
         0f:98:7f:4e:b8:d4:0f:39:2c:e0:b8:38:5e:1c:97:36:ff:b5:
         f8:7d:f2:fb:5f:57:71:c7:5c:d6:79:98:df:aa:27:c0:1f:62:
         18:2c:24:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:51:40 2025 by rpki-client