Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3137302e3233392e382e302f32322d3234203d3e203631393432.roa
File:                     3137302e3233392e382e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          eAHel6vbDt4pQ6uxfIB8c6WrSWpUeqzllawMiZSYvLA=
Subject key identifier:   72:E0:24:6A:DE:A7:1C:EF:8A:11:DF:8D:B6:AB:09:53:D0:84:6B:55
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       1F761F98A6D4BB8D205565F7D6CC55E683FECBC3
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3137302e3233392e382e302f32322d3234203d3e203631393432.roa
Signing time:             Mon 24 Mar 2025 15:02:32 +0000
ROA not before:           Mon 24 Mar 2025 14:57:32 +0000
ROA not after:            Mon 23 Mar 2026 15:02:32 +0000
asID:                     61942
IP address blocks:        170.239.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 08:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:76:1f:98:a6:d4:bb:8d:20:55:65:f7:d6:cc:55:e6:83:fe:cb:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Mar 24 14:57:32 2025 GMT
            Not After : Mar 23 15:02:32 2026 GMT
        Subject: CN=72E0246ADEA71CEF8A11DF8DB6AB0953D0846B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:4b:38:44:b2:cf:2a:bb:11:d2:1b:1d:88:
                    41:6e:36:42:58:96:5f:0a:4d:36:47:56:e7:62:e9:
                    00:ad:1b:7b:bb:c8:c4:a8:83:55:46:d4:a3:e0:28:
                    05:11:99:58:65:d9:11:ff:c3:90:d0:a9:da:3f:f1:
                    cf:28:8a:64:7a:db:12:7e:6c:11:00:fc:5b:ef:ab:
                    8c:de:4b:89:6d:5f:72:9f:1a:d5:67:cc:97:66:35:
                    d9:88:ed:86:25:52:9f:82:33:8e:52:8c:a8:75:a1:
                    a8:61:9b:b4:18:6b:9a:7b:7d:7a:17:74:e9:93:3e:
                    d5:b9:8d:ea:07:75:12:4e:25:44:89:e7:80:0f:15:
                    20:82:a1:23:17:7a:a8:f1:72:56:0a:0a:6a:fe:c9:
                    56:96:d8:16:9f:ef:a4:1f:7f:56:24:74:6b:21:39:
                    69:aa:55:3a:91:e9:0b:3a:9c:f1:69:cc:09:86:24:
                    fc:36:0d:99:61:d1:16:e7:5e:7b:e6:50:7b:ef:ce:
                    63:54:b0:d3:68:db:61:10:70:45:d0:69:8a:f6:ec:
                    df:0b:ec:94:9b:f9:6b:cf:f2:ef:82:23:6e:7b:9d:
                    69:24:c9:fc:7b:07:f0:a4:a2:b1:bf:00:39:ad:11:
                    71:7f:52:51:6b:91:d1:72:1f:33:bd:8b:9b:78:65:
                    1e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E0:24:6A:DE:A7:1C:EF:8A:11:DF:8D:B6:AB:09:53:D0:84:6B:55
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3137302e3233392e382e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:43:13:22:42:26:6e:9b:78:55:a1:2b:04:0f:2f:95:db:b9:
         de:34:2a:ec:b6:9c:92:00:a5:a7:4e:a3:f6:d3:13:5a:c0:26:
         37:7f:a5:fd:28:64:47:9f:53:c4:7e:6d:43:c1:68:8e:8d:80:
         15:10:a7:dc:d7:4e:f0:45:07:c5:e7:69:30:a2:76:a4:f0:fc:
         44:15:38:1f:b5:82:db:30:81:71:6c:39:5c:47:cd:1c:ac:0e:
         34:5e:db:a5:0c:c8:21:75:69:b7:73:33:13:63:54:e8:69:1a:
         dc:82:aa:6c:7a:1e:ec:c4:31:82:8c:19:40:7a:4d:91:76:85:
         7c:7c:90:d6:3f:a2:7f:f4:29:55:7d:e7:ec:27:6f:b8:8a:dd:
         d8:42:34:fb:b6:65:d1:d3:c2:91:be:5a:87:1e:9a:78:70:2b:
         d7:c0:c2:57:32:69:ac:e7:66:30:b4:34:58:2e:f0:21:1c:b6:
         c5:b9:12:9d:ac:4f:88:e9:37:88:6b:60:e3:89:dc:41:2c:fe:
         3c:9e:88:ac:97:9d:e4:55:04:e8:3d:8a:61:42:f9:b7:8b:bd:
         a2:3b:35:e1:95:d6:f5:9c:eb:99:0f:05:06:13:0e:b8:7c:d9:
         97:70:b6:ce:36:1a:59:6f:23:dd:a5:ed:df:fd:8a:68:c6:f4:
         61:73:65:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:19:40 2025 by rpki-client