Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/3137302e38312e3234382e302f32322d3234203d3e20323636343339.roa
File:                     3137302e38312e3234382e302f32322d3234203d3e20323636343339.roa (raw, json)
Hash identifier:          gP3Ug+SNpbGWFVxHmvTh5mpAQK2tgfozjUW5+vyZAbo=
Subject key identifier:   CE:F7:64:31:75:AA:9C:8F:0B:6F:28:E3:83:60:9B:3A:FD:2F:86:C0
Certificate issuer:       /CN=9A99692F686066162D6A71BA5B0DD60AF8E9C6AD
Certificate serial:       169FA4C0F296FFFD9266B549BBD4F9BB37598641
Authority key identifier: 9A:99:69:2F:68:60:66:16:2D:6A:71:BA:5B:0D:D6:0A:F8:E9:C6:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/3137302e38312e3234382e302f32322d3234203d3e20323636343339.roa
Signing time:             Thu 06 Mar 2025 13:15:46 +0000
ROA not before:           Thu 06 Mar 2025 13:10:46 +0000
ROA not after:            Thu 05 Mar 2026 13:15:46 +0000
asID:                     266439
IP address blocks:        170.81.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.crl
                          rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 03:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9f:a4:c0:f2:96:ff:fd:92:66:b5:49:bb:d4:f9:bb:37:59:86:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A99692F686066162D6A71BA5B0DD60AF8E9C6AD
        Validity
            Not Before: Mar  6 13:10:46 2025 GMT
            Not After : Mar  5 13:15:46 2026 GMT
        Subject: CN=CEF7643175AA9C8F0B6F28E383609B3AFD2F86C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5f:2a:08:4a:81:5c:68:89:09:62:40:b3:82:
                    ab:0f:9d:6b:04:f1:13:bd:5f:ee:94:ba:ff:1b:48:
                    30:87:d9:76:a5:95:9c:68:21:ea:0e:c5:79:5b:22:
                    14:cb:4f:43:1c:2c:d7:46:d0:0b:cb:77:02:ae:70:
                    d6:c3:9d:d2:eb:e1:42:7a:f4:d0:ff:36:a5:66:f6:
                    21:e8:ff:e1:6b:e4:b0:63:0b:dd:66:5e:5f:53:7f:
                    b7:c9:ea:00:25:ab:fc:8f:15:26:b9:d5:15:87:65:
                    3b:be:3b:06:ac:6e:dc:39:31:67:f0:36:6c:7e:46:
                    f4:ad:e8:d9:58:63:4d:6b:18:2d:f0:ef:5a:0c:76:
                    79:37:10:a8:57:d3:14:d0:22:c8:3d:9d:6b:67:f7:
                    d7:f3:ce:98:35:b1:0f:98:8f:60:30:99:c2:2b:20:
                    d3:cf:02:f3:f0:ae:4c:b9:73:71:e3:ae:63:21:36:
                    7a:57:e0:44:90:86:09:7a:43:70:c6:45:b0:66:4f:
                    15:8a:ee:cf:8f:6d:21:82:12:ed:80:3b:37:8d:48:
                    dc:af:02:64:a2:95:eb:cb:60:dc:d1:06:eb:b8:72:
                    86:34:e0:df:82:30:e3:47:09:ec:1b:f8:34:7d:25:
                    a5:91:df:5b:07:a0:76:95:ef:54:ed:d8:48:64:02:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F7:64:31:75:AA:9C:8F:0B:6F:28:E3:83:60:9B:3A:FD:2F:86:C0
            X509v3 Authority Key Identifier:
                keyid:9A:99:69:2F:68:60:66:16:2D:6A:71:BA:5B:0D:D6:0A:F8:E9:C6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/3137302e38312e3234382e302f32322d3234203d3e20323636343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:77:e2:66:5d:22:c5:f3:d9:07:fc:61:4b:5d:72:e2:d6:28:
         ae:e5:2e:f9:05:db:77:69:83:71:b5:8a:4b:3c:10:5d:b0:81:
         32:e2:0c:f1:89:86:4e:d6:2b:20:e4:4c:67:23:4a:e7:34:03:
         28:63:10:59:ff:2f:52:1d:91:29:32:66:fb:ef:06:f8:6c:cd:
         24:04:2c:0a:2f:78:12:b2:3d:da:95:89:e1:70:0a:50:87:fe:
         c9:ae:f8:da:53:0c:8d:29:e4:5d:b3:95:b9:99:3b:97:ed:2a:
         7c:93:bf:4b:0d:01:36:f0:3a:ea:36:eb:59:c0:32:43:56:52:
         f7:21:f0:83:94:63:7f:6c:a9:1d:1d:d3:05:98:2a:6f:d4:dc:
         75:a9:60:bc:c6:f8:f6:ef:bb:0c:4a:bc:07:50:b6:6d:ca:fc:
         39:a3:ec:9c:07:7d:87:54:e2:ec:76:69:3d:23:69:75:97:0d:
         d2:0b:20:eb:34:88:54:2e:57:97:a2:34:f6:45:f3:54:25:80:
         8b:84:24:a3:cd:d8:27:24:84:1a:50:f5:da:2c:27:6a:a5:87:
         65:7a:f6:24:f4:eb:6f:cf:a0:6a:56:8a:fc:6b:f5:26:bc:45:
         d1:98:8a:35:a6:97:d2:8a:b0:18:bd:e7:13:0a:cd:54:f1:d0:
         19:aa:13:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:18:27 2025 by rpki-client