Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa
File:                     3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (raw, json)
Hash identifier:          dZkR7OkwOdS1tzWkqugp2XWNw/VURw0l47xCQklPHRg=
Subject key identifier:   BB:41:FA:B6:4B:F5:A2:D4:2F:63:60:DB:01:BD:3D:0C:81:92:27:59
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       325A7EF80D39D6AEAE0DE4B0DBF3EA6D59B08BDF
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa
Signing time:             Sat 10 Aug 2024 23:16:40 +0000
ROA not before:           Sat 10 Aug 2024 23:11:40 +0000
ROA not after:            Sat 09 Aug 2025 23:16:40 +0000
asID:                     61678
IP address blocks:        170.246.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5a:7e:f8:0d:39:d6:ae:ae:0d:e4:b0:db:f3:ea:6d:59:b0:8b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Aug 10 23:11:40 2024 GMT
            Not After : Aug  9 23:16:40 2025 GMT
        Subject: CN=BB41FAB64BF5A2D42F6360DB01BD3D0C81922759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:7d:cc:f3:d5:52:95:69:e9:3e:60:57:0f:
                    4a:25:7d:67:72:3f:92:2e:f6:b3:fc:f9:ee:e5:53:
                    48:12:14:7f:bd:35:83:90:5f:60:be:25:c9:63:5e:
                    48:e2:09:29:cc:b3:13:4f:4b:73:a2:36:c5:7a:d8:
                    51:90:09:6d:a4:06:70:1e:2f:53:de:88:93:39:30:
                    47:8b:76:59:c9:b9:77:73:ee:cb:0f:ad:2a:61:08:
                    df:f5:92:28:4b:30:76:c6:35:42:b3:8c:fd:b7:2a:
                    8f:ff:a5:ad:75:75:40:a5:4c:d2:cc:3c:7f:9e:09:
                    91:ed:59:c4:91:a7:44:38:29:6f:87:b6:ec:2f:c4:
                    25:ab:87:29:76:b7:a3:35:d7:52:e3:eb:7a:2f:87:
                    3d:6e:5a:25:58:21:f7:87:1b:fd:92:c4:84:f3:69:
                    f1:a3:e4:dc:26:60:c8:66:af:5f:a8:d3:1b:03:a0:
                    d2:85:53:46:59:8b:72:60:f8:49:8c:35:21:6c:99:
                    a1:b8:1c:39:68:8f:cb:8a:09:a2:b8:3a:69:b2:66:
                    94:e2:30:f8:ee:38:d9:b9:53:d8:39:37:54:80:53:
                    a5:dc:ac:56:47:2f:96:82:5b:9d:d6:b1:eb:fc:e5:
                    2e:b3:c2:92:ee:e0:f4:f6:9e:33:49:b5:e3:6d:b9:
                    a3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:41:FA:B6:4B:F5:A2:D4:2F:63:60:DB:01:BD:3D:0C:81:92:27:59
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:41:ef:17:9e:e6:9a:8e:62:c4:13:9f:6b:ba:6a:52:c9:e2:
         6e:5c:5a:fc:95:d9:8d:9f:8e:a0:8a:fe:e9:7b:b1:72:e4:fe:
         1b:25:89:58:ea:82:43:67:b7:7e:f8:6a:cc:e5:2c:4f:0c:0c:
         69:9f:8c:08:cc:1f:50:83:78:43:59:58:c5:b2:8b:d3:f5:ec:
         94:f9:90:e9:6e:15:d4:1b:f0:5c:f9:fb:82:cf:36:f3:cf:89:
         9b:ba:96:1b:2c:5a:26:e7:50:4c:75:91:b5:65:ab:ab:1f:41:
         ce:d1:31:1c:8f:78:cb:cd:e6:a1:06:52:1c:9c:63:eb:cf:c4:
         34:02:83:fd:9b:4a:27:fe:e9:96:fc:f3:dd:53:6f:af:90:3b:
         b0:61:a4:a2:02:4c:d3:7f:c1:db:42:59:01:ec:84:05:33:0c:
         16:6c:35:47:9f:8c:4e:5d:08:b1:bf:e0:d5:e7:28:b9:63:f4:
         ee:ad:56:19:62:67:19:a2:53:bd:e2:42:83:f9:47:f0:a5:51:
         ec:0a:20:cb:ff:15:7c:20:8b:e5:95:e3:63:f7:44:7c:19:ae:
         81:44:44:dd:e4:19:ad:8d:ab:a5:a6:32:6d:6a:15:0c:18:2e:
         07:ee:ad:af:28:d8:bc:f6:28:49:0f:db:a0:23:ce:cb:62:ef:
         d8:71:46:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:55 2025 by rpki-client