Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e302e302f32342d3234203d3e20323633363237.roa
File:                     3137302e38302e302e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          TcYw/6yHdgMNy0v60sSxSWx+P/U6J970ptXIaBXcUtc=
Subject key identifier:   45:C7:99:B8:28:FF:C8:39:5C:D9:39:72:62:8E:BD:C6:5C:FB:6C:53
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       6193E05961E9714B7E1ED8CB702CC3166191DBDC
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e302e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 25 Mar 2025 20:13:30 +0000
ROA not before:           Tue 25 Mar 2025 20:08:30 +0000
ROA not after:            Tue 24 Mar 2026 20:13:30 +0000
asID:                     263627
IP address blocks:        170.80.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 12:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:93:e0:59:61:e9:71:4b:7e:1e:d8:cb:70:2c:c3:16:61:91:db:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Mar 25 20:08:30 2025 GMT
            Not After : Mar 24 20:13:30 2026 GMT
        Subject: CN=45C799B828FFC8395CD93972628EBDC65CFB6C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:d1:e3:12:22:6e:6d:95:05:55:76:ac:91:
                    6c:69:01:a7:aa:9d:8c:b3:49:2a:ef:5f:d9:9c:7b:
                    ef:e6:7b:82:59:53:92:2c:3f:82:81:ee:4b:8d:ad:
                    de:85:d3:26:84:a5:dd:c3:b8:da:00:d1:38:5f:cc:
                    28:34:93:81:fb:3a:f5:89:6a:f9:71:77:0d:e4:56:
                    49:9e:ec:4e:18:74:c1:7a:33:4b:3d:78:04:9d:e7:
                    05:92:8a:d7:d3:72:18:1c:cf:55:84:ea:89:fa:b4:
                    8d:12:a2:69:d6:fa:3e:64:46:78:de:9d:1a:de:ec:
                    22:97:6b:13:4b:ca:81:f3:f4:b1:ac:8c:6a:ef:ab:
                    97:4e:02:f7:c6:61:99:7c:8a:45:a1:87:9f:b6:91:
                    de:fb:34:a2:3a:45:58:27:0e:ed:3a:98:e9:47:9c:
                    88:82:3a:1c:97:1f:43:19:d8:43:25:bf:39:53:27:
                    de:ad:00:80:49:6a:52:4d:44:ba:18:db:33:18:a4:
                    bd:5a:2e:31:3a:ea:ad:e2:f2:a6:06:18:80:61:c1:
                    bf:f1:a7:e0:f1:b9:7a:9a:a0:6e:0d:47:e5:e8:6f:
                    18:1c:95:b8:0c:63:a5:52:ce:f8:9c:2a:01:39:44:
                    b6:38:8f:b6:67:b8:c9:ec:1d:b1:11:dc:f7:4f:6e:
                    bf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C7:99:B8:28:FF:C8:39:5C:D9:39:72:62:8E:BD:C6:5C:FB:6C:53
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e302e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:f8:d3:0e:a9:9a:de:c2:d0:c9:7b:45:b7:88:92:27:47:99:
         22:ec:13:69:cb:4b:ef:a7:e2:0b:30:60:50:a2:6c:82:21:13:
         7b:35:60:b1:05:21:58:90:0d:40:ce:84:0f:5e:f2:06:05:61:
         86:32:38:3e:fe:07:81:14:c7:10:33:7e:35:a6:ec:2e:b8:e6:
         ec:98:1f:87:74:f6:27:32:be:c1:d5:3d:3f:ba:8e:26:cd:e5:
         cf:3b:a8:71:b0:13:9f:18:9f:b7:57:87:b1:fe:65:92:9b:cc:
         bd:d8:ea:fb:aa:e2:74:11:8f:b5:b6:52:79:f4:59:7c:2d:51:
         06:05:a9:85:cc:43:be:ef:02:1f:be:24:59:c6:24:9d:ee:96:
         5c:77:c5:88:f5:be:f0:fb:0d:80:0a:8c:a8:60:22:31:1b:e8:
         53:68:1c:60:69:73:d0:56:9b:a4:c6:51:e7:f4:12:8d:1d:f1:
         28:4f:b0:63:88:63:79:d9:34:4a:13:6f:f0:d0:47:55:ae:49:
         bb:f4:5d:18:ad:a8:1a:0a:02:ff:90:8c:89:a3:0f:71:90:e0:
         fa:7b:d2:35:72:71:92:15:25:25:70:77:0b:97:2f:b7:3b:de:
         1f:0d:80:15:a4:2d:b5:5d:7a:b6:14:34:c5:20:3b:fb:25:ac:
         08:1c:29:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:54:00 2025 by rpki-client