Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e38322e3131382e302f32342d3332203d3e20323632313832.roa
File:                     3137302e38322e3131382e302f32342d3332203d3e20323632313832.roa (raw, json)
Hash identifier:          Fzi6wqpG3t97CpJY0NWBQBcGQHvAIjJEcsUM/K+HLns=
Subject key identifier:   42:89:8A:9C:94:66:15:03:BF:EF:46:CA:83:EC:98:0B:45:34:E9:49
Certificate issuer:       /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial:       4F7E52F611A170DBC2E080E500B61426BDD92745
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e38322e3131382e302f32342d3332203d3e20323632313832.roa
Signing time:             Wed 26 Mar 2025 11:43:45 +0000
ROA not before:           Wed 26 Mar 2025 11:38:45 +0000
ROA not after:            Wed 25 Mar 2026 11:43:45 +0000
asID:                     262182
IP address blocks:        170.82.118.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
                          rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7e:52:f6:11:a1:70:db:c2:e0:80:e5:00:b6:14:26:bd:d9:27:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
        Validity
            Not Before: Mar 26 11:38:45 2025 GMT
            Not After : Mar 25 11:43:45 2026 GMT
        Subject: CN=42898A9C94661503BFEF46CA83EC980B4534E949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d7:62:b1:78:fa:cf:5f:d7:e2:e1:c0:09:ee:
                    ff:9a:ae:4f:74:c2:17:e2:f3:cb:a9:04:97:5e:c6:
                    24:d4:c4:ba:c5:2c:eb:a0:3c:f0:04:0f:f7:21:ba:
                    1a:0e:dc:08:07:23:57:74:6b:28:ed:5e:a9:7b:19:
                    03:13:3b:a2:dc:5f:b7:1a:c1:c8:0a:fa:e7:f2:18:
                    dd:aa:52:12:1e:13:7c:13:ed:ef:da:2a:4e:bd:42:
                    87:ae:d6:18:93:38:9b:d3:32:b2:23:e2:f7:bb:20:
                    7f:c6:9d:04:79:50:68:8a:53:2a:66:18:f8:f0:22:
                    b6:99:f8:a5:68:8e:c2:98:a6:0d:1f:98:b1:97:1b:
                    99:f6:a6:72:42:b1:82:cb:36:05:b0:ee:9b:62:04:
                    fd:5d:59:32:33:d5:5c:84:84:13:2e:b3:35:1c:d1:
                    6b:b7:72:d6:13:e7:68:06:a7:07:67:b9:d6:02:05:
                    24:79:f0:e4:7e:eb:a7:c9:a1:07:29:ca:ac:c4:f8:
                    30:01:8b:22:38:94:7a:47:8f:da:85:28:d7:b9:4d:
                    d7:6a:c5:95:b9:99:5d:23:3b:22:bc:8c:9e:6c:9d:
                    84:d2:c4:7d:09:29:b6:60:4c:58:ed:42:96:4d:b8:
                    18:1d:92:e4:5f:bd:70:4b:51:e1:68:8f:27:7f:50:
                    b0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:89:8A:9C:94:66:15:03:BF:EF:46:CA:83:EC:98:0B:45:34:E9:49
            X509v3 Authority Key Identifier:
                keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e38322e3131382e302f32342d3332203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:71:44:b6:6d:85:3c:13:5f:09:7f:de:48:0e:86:7e:0c:a2:
         c4:f4:48:f5:70:bc:61:46:f9:c4:e0:f6:8b:51:19:d7:0b:e8:
         45:15:71:43:2e:01:87:7a:ca:29:d5:6b:e4:98:f1:98:c1:30:
         dc:37:bb:c3:c7:11:e0:1e:12:96:87:21:26:d4:32:b5:c1:f1:
         f7:54:fa:ea:06:5a:33:2e:da:39:2d:9c:68:e5:d4:76:ee:87:
         d9:97:df:f3:61:bc:32:d9:d7:5f:45:20:64:cc:0d:7e:d4:d1:
         2a:87:74:72:0f:7c:a6:28:69:39:8d:1a:be:22:1a:b9:3a:71:
         6e:72:fe:b8:2b:06:28:75:01:a4:a1:b7:5e:f9:44:1e:f3:c9:
         bb:a3:c7:0a:aa:0b:1d:42:45:7c:5d:07:e1:42:b9:98:8d:4e:
         85:67:78:cc:d7:30:67:56:c1:71:86:7b:2c:e4:22:a5:52:d6:
         51:a1:46:d0:dc:f3:cd:f8:bb:57:48:d8:b7:25:c8:38:b9:26:
         9d:46:37:57:04:3e:d0:3e:15:7b:90:13:f2:ae:e8:a1:82:9e:
         2f:de:95:fa:4a:5c:a8:92:41:1d:9f:e1:d8:d1:9f:6b:c8:fc:
         70:6d:12:07:4c:56:18:15:96:d9:16:89:60:58:66:4c:5e:31:
         80:36:9d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:36:39 2025 by rpki-client