Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231322e302f32332d3233203d3e203532373036.roa
File:                     3137302e3233332e3231322e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          NHFnAFunMACM8oA2YDt3V/PqBJvJddnN0ah+ml5Iv4A=
Subject key identifier:   67:1B:89:9E:81:40:85:1D:A6:4A:5C:50:97:E2:50:CA:74:35:A1:7A
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       7A1F2C2F3D41D6F963C1E9BDC8CCFAF79463EEDB
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231322e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:44 +0000
ROA not before:           Thu 06 Mar 2025 02:26:44 +0000
ROA not after:            Thu 05 Mar 2026 02:31:44 +0000
asID:                     52706
IP address blocks:        170.233.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 10:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1f:2c:2f:3d:41:d6:f9:63:c1:e9:bd:c8:cc:fa:f7:94:63:ee:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:44 2025 GMT
            Not After : Mar  5 02:31:44 2026 GMT
        Subject: CN=671B899E8140851DA64A5C5097E250CA7435A17A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:80:8d:7f:93:68:20:dc:35:b5:0a:5c:d2:57:
                    02:b9:2a:e3:ae:8a:d0:e8:86:51:b1:07:53:11:c8:
                    15:e7:77:16:bd:09:f3:14:dd:7a:63:ce:bd:b0:af:
                    d7:33:57:a1:46:be:27:ff:d4:a8:46:4f:e6:4f:a1:
                    92:7e:d9:5c:56:2c:cd:b8:54:dd:b3:da:f4:54:21:
                    f7:e9:3e:84:41:b0:1e:00:66:fe:3d:4d:f9:4e:69:
                    27:f4:61:68:6f:62:b0:4b:ce:35:77:4e:a6:35:d7:
                    03:de:2c:ad:eb:4f:fb:24:7f:d0:8f:55:ed:23:da:
                    e4:00:2b:97:38:6c:cf:b8:b7:23:ff:06:4e:ce:22:
                    03:fc:65:47:d0:9a:3b:ed:c1:59:8f:aa:52:2f:51:
                    5b:d3:8b:85:05:69:26:91:2b:b9:ed:55:ec:d5:fb:
                    27:2c:2e:bb:5c:fd:9c:8b:6f:44:8c:6f:39:f7:63:
                    05:77:09:8c:6a:8a:e1:53:07:be:96:0f:ef:7a:43:
                    25:9b:a0:dc:b4:9c:04:c0:12:ab:3b:ed:f9:6d:fa:
                    dc:96:cd:b2:c8:41:0b:07:d6:17:ea:03:b8:4a:79:
                    f7:90:9a:ec:49:0e:ce:78:5e:5a:2b:ee:5c:a5:f1:
                    2e:29:fb:c6:cd:7e:e6:81:cc:90:6a:63:b0:bd:d1:
                    4d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1B:89:9E:81:40:85:1D:A6:4A:5C:50:97:E2:50:CA:74:35:A1:7A
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137302e3233332e3231322e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:bd:8e:7e:72:7d:2e:ca:8f:9c:cb:19:93:c8:87:75:52:08:
         62:a5:1f:2e:a1:6d:56:4f:2a:bc:f3:89:c4:7c:3d:38:ca:19:
         4b:6f:3a:7c:14:46:7e:a6:69:a0:3d:a3:dc:e1:0f:93:40:98:
         d1:d8:38:f0:88:31:48:80:22:4f:3a:c9:e0:a3:25:6b:d0:6b:
         af:a2:e1:f9:af:28:34:01:5e:00:da:66:20:a6:c6:ed:69:db:
         ad:b0:97:da:60:21:c1:d4:1f:61:8e:ac:95:e8:5f:75:31:c6:
         42:e3:0f:21:ec:47:b3:43:ae:92:46:9e:df:7b:58:e2:34:5b:
         00:eb:d6:16:20:12:e2:b5:78:49:a4:2d:c6:bc:56:17:85:99:
         39:b6:ed:6f:1a:f8:08:73:72:ae:21:d3:de:73:b6:0d:c6:2b:
         80:c0:4d:ba:5b:ef:01:7d:9f:ac:e4:c3:16:29:6a:47:f2:c8:
         9d:7a:32:bd:7d:41:c8:fb:fa:54:a5:ba:07:a2:49:80:6f:05:
         70:50:0f:9e:33:8e:9f:83:a5:cf:81:19:16:c0:58:d5:a2:7c:
         f3:f7:9c:1d:6c:e9:9c:d5:c9:30:35:14:d6:d5:0e:1b:16:a3:
         e3:d6:3e:fd:db:d7:b1:69:0d:6d:31:63:92:1c:04:44:65:10:
         74:97:db:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:06:57 2025 by rpki-client