Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130382e302f32342d3234203d3e20323636333438.roa
File:                     3137302e3233392e3130382e302f32342d3234203d3e20323636333438.roa (raw, json)
Hash identifier:          xiAf5tXyW9bf3wsvsSGP/ZE4iHAU7eBH6cZahaMzCmA=
Subject key identifier:   E1:0F:B5:82:EE:25:19:0B:64:A8:EC:26:4A:A8:7C:E6:B0:18:8D:D0
Certificate issuer:       /CN=273782B997878A9415F132214E8D09CFA971572F
Certificate serial:       199A5DA0510992AC575BB03E31EE084B65B28564
Authority key identifier: 27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130382e302f32342d3234203d3e20323636333438.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     266348
IP address blocks:        170.239.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl
                          rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 19:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9a:5d:a0:51:09:92:ac:57:5b:b0:3e:31:ee:08:4b:65:b2:85:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273782B997878A9415F132214E8D09CFA971572F
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject: CN=E10FB582EE25190B64A8EC264AA87CE6B0188DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:eb:42:7e:ff:ce:7a:a7:7d:5e:e0:8e:34:b5:
                    65:3f:a4:a0:45:e2:91:c9:71:47:a2:d7:29:fa:b6:
                    bf:84:55:16:b8:d7:5d:ec:b3:03:82:4b:c9:5f:ad:
                    97:bf:ba:2d:1c:df:86:b7:fe:65:2e:0d:89:7c:54:
                    f7:ee:82:ec:98:5d:6f:3e:65:4c:7a:63:27:e8:4c:
                    78:36:b8:d2:e8:e0:54:79:d4:3b:02:80:bf:fa:b4:
                    50:f6:bc:ce:57:d1:7a:df:65:e8:a7:b0:58:fe:4f:
                    6d:ce:61:18:c9:79:62:90:3f:d7:e2:8f:47:72:f9:
                    9f:6f:c4:93:28:b4:af:61:fb:b9:0b:b6:1f:5a:be:
                    9c:b7:7c:43:c2:c2:6e:11:3b:46:74:6d:a6:eb:61:
                    d0:da:45:ce:20:c9:bc:11:c1:89:f2:6f:37:39:57:
                    0c:de:7f:e0:89:78:88:d5:bb:93:c0:c8:ca:ce:ef:
                    00:92:5b:47:a1:99:90:92:c9:6f:16:b4:1e:56:ca:
                    2b:08:e0:7d:b2:17:c5:bd:c5:9c:c0:ff:15:62:e9:
                    a4:6e:2e:97:44:59:01:af:01:28:90:67:00:5c:ce:
                    3e:b2:a3:20:f7:9f:08:52:ad:4c:23:b7:97:2e:4f:
                    36:ab:f5:fa:d4:dd:21:c2:ef:3c:e9:cf:b2:c7:97:
                    cc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0F:B5:82:EE:25:19:0B:64:A8:EC:26:4A:A8:7C:E6:B0:18:8D:D0
            X509v3 Authority Key Identifier:
                keyid:27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130382e302f32342d3234203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:11:6b:17:61:05:19:28:bd:40:26:f6:c9:56:29:b9:c1:
         8f:13:3a:fe:35:8a:c3:8c:36:d0:99:62:51:dd:5e:3f:b7:04:
         7a:38:2c:68:b8:a7:f2:c4:ce:2a:22:51:1b:13:f1:2f:13:7e:
         13:1f:4d:fb:6a:64:3e:f4:43:d0:73:05:e1:c4:6f:ee:9d:03:
         90:75:62:24:89:d1:85:37:64:4c:43:5a:b8:c1:3b:e9:35:35:
         98:7e:1d:28:8d:ac:28:1e:1f:88:d2:0e:13:73:58:16:3d:f7:
         2c:68:c2:3e:40:5b:16:c9:67:8d:e1:2f:a0:42:8f:0d:80:1e:
         76:5f:dc:f6:40:6a:6a:eb:00:b7:96:e7:f8:fd:3c:e8:25:12:
         25:3e:2e:69:a8:0e:d6:0e:4a:1f:27:48:78:78:8d:57:38:9f:
         a3:98:90:89:d7:75:73:54:1b:5b:ac:07:b6:b1:1a:71:28:f8:
         e9:9e:b2:52:c7:dd:fc:a4:da:6a:d7:49:4d:00:e9:47:b1:5c:
         57:d1:e7:13:62:d0:43:1b:65:09:73:c9:ce:c0:62:55:fa:fd:
         b7:5b:75:a0:0c:d5:a5:b1:74:eb:71:21:1d:b9:dd:9b:43:ac:
         53:39:9e:de:85:a4:34:99:06:84:22:df:36:a8:11:99:05:e8:
         23:b3:98:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:27:23 2025 by rpki-client