Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32342d3234203d3e20323632323936.roa
File:                     3137302e38312e302e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          v3EjI9mP/bag2DmuSXKwRo9qsGABfTopZC5HjXAS0qc=
Subject key identifier:   81:EC:79:67:2F:3D:F8:D3:0F:C5:DF:12:F0:6C:D8:F7:C7:B1:4D:8D
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       4CFB3A2824C5B337F007EDD408BF20898EA2A9F4
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 31 Mar 2025 17:57:29 +0000
ROA not before:           Mon 31 Mar 2025 17:52:29 +0000
ROA not after:            Mon 30 Mar 2026 17:57:29 +0000
asID:                     262296
IP address blocks:        170.81.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 22:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fb:3a:28:24:c5:b3:37:f0:07:ed:d4:08:bf:20:89:8e:a2:a9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar 31 17:52:29 2025 GMT
            Not After : Mar 30 17:57:29 2026 GMT
        Subject: CN=81EC79672F3DF8D30FC5DF12F06CD8F7C7B14D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:6a:87:ac:86:a1:b6:09:91:39:b5:bb:43:
                    d0:95:68:23:bc:8e:64:7b:7c:e8:17:14:b7:6b:5a:
                    e6:bb:f4:a5:db:8a:d7:9f:15:a4:8d:61:6a:18:da:
                    d2:28:6b:8c:5a:89:8c:cd:b0:b0:44:13:49:1c:57:
                    62:f9:e9:ce:7b:7b:5e:9d:1f:df:ea:38:c0:f2:5e:
                    78:2a:c5:0f:f6:f3:f4:6f:ab:d0:f7:8a:6a:4e:47:
                    24:a4:5a:24:6f:6a:fe:26:ef:cf:66:f3:45:8e:77:
                    e5:fa:55:5f:96:77:7a:55:81:b6:67:ba:7c:80:08:
                    d7:65:da:45:25:cd:57:0d:c5:49:e4:53:15:2d:da:
                    ed:0e:c4:9c:5f:fb:29:ae:22:5a:63:1b:d9:fa:89:
                    7e:54:11:68:c9:e4:c0:ef:bc:87:da:3a:5f:7c:34:
                    e2:6f:52:8c:53:53:97:13:08:5f:2d:c6:5b:19:f0:
                    d2:ae:c0:d8:e1:8f:8f:b4:7e:07:f1:07:bf:44:d6:
                    c0:bb:b3:74:dc:16:9f:bf:16:5a:2b:b6:05:8b:fd:
                    06:79:a6:62:b5:1f:b8:67:b2:9a:fc:e9:42:ca:e3:
                    92:75:85:4c:a3:9a:e8:eb:02:55:81:36:be:23:18:
                    bf:2d:44:5f:58:3d:2b:8a:bc:44:87:59:d5:1b:fc:
                    9c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EC:79:67:2F:3D:F8:D3:0F:C5:DF:12:F0:6C:D8:F7:C7:B1:4D:8D
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:78:86:70:71:e6:cd:12:2c:cb:b5:44:87:d3:ed:72:6e:8b:
         0f:29:54:2c:33:23:74:4f:d1:77:eb:4d:fc:a1:1d:03:61:e3:
         73:3e:ac:25:1d:0e:5b:f2:2f:86:52:39:72:f0:6f:b3:d7:bf:
         37:93:29:ac:3f:0c:48:6e:4d:be:ac:0d:43:5c:a3:32:cf:ff:
         d7:d0:e7:35:22:15:2f:30:21:ae:65:c5:02:8d:ee:bb:96:01:
         1a:3b:df:a2:ff:05:12:86:cb:d3:f0:cc:68:28:0f:bb:f7:25:
         cf:33:55:6d:b4:c6:3d:c9:f5:56:88:6e:08:a5:9e:02:8f:8b:
         5f:80:80:99:c3:b0:43:4a:fb:4f:e5:68:2c:a4:48:2b:18:6f:
         35:32:c5:98:e9:60:da:2e:f3:84:04:a8:e0:26:a4:68:0f:93:
         3e:a1:38:db:8f:62:e8:8c:3a:3c:1b:0c:dd:75:30:8c:d5:48:
         4b:22:2c:ff:2c:a7:a5:9b:32:02:f0:8c:7e:e7:b7:7b:a0:49:
         9c:fa:f9:c0:59:fd:1f:59:80:f9:1d:1a:0a:19:8c:ff:db:b5:
         56:38:4a:25:42:e1:19:ce:1b:4d:00:8e:a7:e7:17:76:ba:9d:
         6e:89:75:c1:47:0c:0d:8d:6a:59:97:59:8e:e8:0f:3d:3a:c4:
         a1:8f:4b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:43:37 2025 by rpki-client