Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3137302e302f32332d3233203d3e20323634353039.roa
File:                     3133322e3235352e3137302e302f32332d3233203d3e20323634353039.roa (raw, json)
Hash identifier:          5jI+zR0jizY+PMV7BHY9xOLVc5sSkMbsCgxn9FQmUCo=
Subject key identifier:   E7:DE:BA:6A:5A:0A:64:4B:33:7F:A8:68:37:CA:96:A9:E7:B9:FA:04
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       32BBA93D5DB064A4CD4687ADA93B2986FDB4A30B
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3137302e302f32332d3233203d3e20323634353039.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     264509
IP address blocks:        132.255.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:bb:a9:3d:5d:b0:64:a4:cd:46:87:ad:a9:3b:29:86:fd:b4:a3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:82:e2:32:a6:2f:06:8e:16:14:5e:93:0a:
                    f5:71:7a:f2:b7:7a:c2:8e:84:37:4d:cb:1b:ba:65:
                    12:95:d1:95:55:46:1d:ec:92:aa:a5:8c:ef:2c:0a:
                    6c:d8:74:c9:fc:a2:4a:1f:3d:85:14:23:c6:28:01:
                    ed:f0:78:b1:3a:23:b2:13:d6:05:20:63:c6:24:63:
                    6e:39:87:a0:9f:87:e5:ee:e4:6d:8c:54:c6:0d:fc:
                    81:c4:fb:4d:2a:db:05:90:33:72:14:20:9f:d9:29:
                    a3:c4:16:89:6a:c7:4d:29:7e:18:a8:5c:8d:80:df:
                    94:86:a0:7a:bf:db:cf:05:0b:70:d5:86:bf:44:42:
                    00:e4:db:13:09:7a:78:80:21:e0:a4:d9:ca:21:21:
                    6b:3b:eb:f5:f3:d8:44:16:cc:1d:29:51:39:1e:ac:
                    31:92:b9:c8:30:12:84:c7:d4:59:01:3c:2f:49:2a:
                    85:62:a8:7c:77:93:49:e8:ff:b9:9a:c7:aa:14:9b:
                    13:c4:a3:da:f8:8d:37:5b:ba:d9:78:b4:58:5c:6b:
                    1e:4b:4e:a9:28:e8:c9:b3:01:d6:b0:8a:3a:80:f0:
                    d2:54:dc:31:4a:8e:97:8f:7c:cf:03:49:51:0d:6b:
                    d1:4f:a5:90:69:42:78:82:ca:94:f3:6e:46:30:ff:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DE:BA:6A:5A:0A:64:4B:33:7F:A8:68:37:CA:96:A9:E7:B9:FA:04
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3137302e302f32332d3233203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:27:f5:6c:d6:f8:7b:7a:57:23:1e:78:ed:35:9f:ba:4a:83:
         b2:ac:a0:97:01:ad:2d:43:62:7f:e4:d8:8f:a6:ed:3f:7f:0a:
         ed:60:3d:00:07:1a:f1:14:3c:59:e0:0c:2d:09:d0:58:c1:08:
         58:75:d3:6c:2c:c3:8f:c9:56:52:94:ae:14:6c:99:55:7e:d2:
         86:a1:e1:79:ba:c3:a2:af:12:68:99:8d:b9:65:93:28:c2:3a:
         3d:a7:67:bd:b3:64:ab:b4:12:a0:95:1d:e0:18:ad:91:da:f1:
         15:d9:6f:6b:b5:d7:30:63:81:ea:89:21:ee:d5:a8:9b:e0:06:
         03:58:7b:f7:94:78:0c:2e:03:6e:09:0e:3d:e2:62:77:69:1b:
         40:b1:c8:6c:31:3c:e7:18:76:de:3c:c8:03:56:b5:3d:84:61:
         0b:84:d2:fb:6b:54:06:ce:60:a5:8f:cb:0f:51:32:69:89:b6:
         53:2f:ba:0a:39:d2:72:a7:6f:f6:90:bb:e3:4d:d9:81:e6:c1:
         05:88:1e:25:bc:d8:65:a8:c9:08:dd:67:c5:0a:a4:3e:2d:b8:
         1a:7f:ad:5d:00:f4:d4:48:02:8f:b0:e5:d4:05:ad:df:14:7e:
         b5:c5:5a:26:e7:0e:6f:1f:30:33:00:76:d5:a9:62:fe:95:e5:
         eb:07:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:53:26 2025 by rpki-client