Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3137302e3135302e3137322e302f32322d3332203d3e203631373133.roa
File:                     3137302e3135302e3137322e302f32322d3332203d3e203631373133.roa (raw, json)
Hash identifier:          X2TA778N44ct7i5m5w1DzdEEnrju/YKJTyk/IEtyVM8=
Subject key identifier:   EA:C7:EF:E5:50:6C:46:5B:8E:FC:28:12:1C:82:95:78:AE:31:96:B6
Certificate issuer:       /CN=BF0B25912243C9DFD1C915CDBC8F484F306E8315
Certificate serial:       0B4B48EDB8E0E27A8B7FEDFFF54BB21571BB2D3D
Authority key identifier: BF:0B:25:91:22:43:C9:DF:D1:C9:15:CD:BC:8F:48:4F:30:6E:83:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF0B25912243C9DFD1C915CDBC8F484F306E8315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3137302e3135302e3137322e302f32322d3332203d3e203631373133.roa
Signing time:             Wed 12 Feb 2025 15:25:09 +0000
ROA not before:           Wed 12 Feb 2025 15:20:09 +0000
ROA not after:            Wed 11 Feb 2026 15:25:09 +0000
asID:                     61713
IP address blocks:        170.150.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/BF0B25912243C9DFD1C915CDBC8F484F306E8315.crl
                          rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/BF0B25912243C9DFD1C915CDBC8F484F306E8315.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF0B25912243C9DFD1C915CDBC8F484F306E8315.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4b:48:ed:b8:e0:e2:7a:8b:7f:ed:ff:f5:4b:b2:15:71:bb:2d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF0B25912243C9DFD1C915CDBC8F484F306E8315
        Validity
            Not Before: Feb 12 15:20:09 2025 GMT
            Not After : Feb 11 15:25:09 2026 GMT
        Subject: CN=EAC7EFE5506C465B8EFC28121C829578AE3196B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f3:93:df:cf:28:83:ac:41:33:e4:d1:5d:74:
                    57:f4:08:ee:9b:65:a8:81:d6:02:9e:ca:a4:fd:32:
                    76:7c:39:4b:fd:ee:2b:1d:29:23:48:eb:1b:af:1c:
                    17:65:12:ef:85:1c:d2:5d:56:f9:ce:2f:29:63:82:
                    a3:77:6d:f0:ba:1f:ad:dc:8a:eb:92:a8:36:a4:11:
                    19:6f:aa:60:47:ee:45:27:0c:c4:8b:f5:2f:c1:18:
                    2c:99:ce:05:08:c0:39:37:a3:bc:b7:1f:54:13:3e:
                    15:a7:4b:76:50:d3:78:12:20:d4:d5:4d:08:60:6d:
                    6c:7d:2d:77:81:5d:12:7c:33:26:8c:b1:e6:8c:06:
                    96:2b:e7:96:b2:cd:74:51:60:b9:14:7f:aa:1f:84:
                    f5:93:3c:ff:56:9d:56:00:b4:97:a8:52:29:ec:33:
                    ec:05:18:31:f3:33:02:95:8b:53:93:37:a0:1f:81:
                    7f:49:1e:58:33:c4:de:16:b8:54:70:fd:1c:33:b3:
                    1e:16:dd:6a:80:7b:c0:18:1c:e8:b2:dc:7e:9e:9d:
                    31:91:f2:3f:b6:a4:31:29:e4:2f:d5:c4:4b:2e:7d:
                    44:75:b5:0c:ef:65:d3:00:e0:57:fc:fa:86:52:90:
                    af:cf:1a:92:e4:7d:e0:b1:b3:29:9d:5f:bd:1d:d5:
                    4f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C7:EF:E5:50:6C:46:5B:8E:FC:28:12:1C:82:95:78:AE:31:96:B6
            X509v3 Authority Key Identifier:
                keyid:BF:0B:25:91:22:43:C9:DF:D1:C9:15:CD:BC:8F:48:4F:30:6E:83:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/BF0B25912243C9DFD1C915CDBC8F484F306E8315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF0B25912243C9DFD1C915CDBC8F484F306E8315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jjVeTzsH2hfxiCUv3CH1y7ukecgqz7ZMu2ktPKATWgR/0/3137302e3135302e3137322e302f32322d3332203d3e203631373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:bb:b3:63:2a:cf:2a:10:b9:d9:b9:21:fb:ad:a1:5a:d9:18:
         c0:e5:b4:de:18:2f:c6:7a:d6:10:b0:1b:22:23:2b:77:18:dc:
         29:e6:10:ae:51:dc:9a:fa:40:08:bb:59:23:44:9f:39:9b:47:
         f7:48:b0:72:db:cc:d1:2d:9b:90:69:3b:b5:6a:ba:bd:9c:2c:
         ab:8b:e3:63:e8:49:c9:1a:53:35:9a:42:8a:6b:6f:14:17:f3:
         70:21:6b:de:64:e1:1c:a8:68:11:dc:99:ca:4a:6c:e5:8d:9a:
         6e:e3:ce:2a:56:7b:3a:00:78:83:86:d7:7d:61:4a:e7:7b:dd:
         44:84:78:a2:37:a5:e3:c1:40:e6:00:ac:03:6c:7e:67:da:65:
         98:c1:b6:fa:9d:37:cb:4f:78:23:7a:8e:90:3e:bd:4c:2e:5d:
         2c:f8:56:9a:79:85:21:ea:23:e6:31:e0:45:ba:3e:63:dc:aa:
         91:c5:0d:a6:c7:7e:70:d7:c7:a1:ab:b3:ae:58:7d:eb:4f:52:
         37:76:ea:5e:d7:f2:c5:d4:6f:7d:5b:e7:37:6d:10:bf:4c:88:
         9d:2a:6b:6a:1a:3c:1e:76:ae:ca:74:d8:dc:3d:d3:f1:f0:c3:
         c3:30:0b:69:68:53:54:da:f4:47:a8:97:44:ba:e8:3d:d3:96:
         d4:1e:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:02:37 2025 by rpki-client