Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37362e302f32322d3232203d3e20323730343133.roa
File:                     3137302e302e37362e302f32322d3232203d3e20323730343133.roa (raw, json)
Hash identifier:          +/hJCw6pfwjCb7JK6n+FeZwU167T9u+pTbmcYV1Q/y4=
Subject key identifier:   54:6D:1C:64:C3:FA:FA:73:F3:EF:72:23:5C:14:DB:21:7E:B2:51:7A
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       799722EBFF16FB70D7F48F69E195A31066B2965D
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37362e302f32322d3232203d3e20323730343133.roa
Signing time:             Thu 06 Mar 2025 00:49:48 +0000
ROA not before:           Thu 06 Mar 2025 00:44:48 +0000
ROA not after:            Thu 05 Mar 2026 00:49:48 +0000
asID:                     270413
IP address blocks:        170.0.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:97:22:eb:ff:16:fb:70:d7:f4:8f:69:e1:95:a3:10:66:b2:96:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Mar  6 00:44:48 2025 GMT
            Not After : Mar  5 00:49:48 2026 GMT
        Subject: CN=546D1C64C3FAFA73F3EF72235C14DB217EB2517A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:c2:d4:26:67:ee:be:fb:91:f6:a4:d8:81:
                    b6:e7:c6:10:f6:a0:68:1e:4e:6e:fd:cd:9a:ed:be:
                    67:a7:47:43:fd:d7:a7:9f:98:a4:58:19:c4:f5:f9:
                    cd:69:98:40:4b:76:48:14:43:2a:1e:c5:5e:1c:93:
                    fc:b5:04:09:a2:80:77:cf:91:27:85:27:b5:9b:a8:
                    3d:29:0f:a8:16:fb:aa:12:19:3b:50:73:4a:58:e3:
                    74:e2:1d:52:d5:42:39:b2:79:c3:8d:e8:06:dd:1c:
                    8f:75:38:4f:49:ce:3a:d8:96:8c:38:05:5c:90:74:
                    52:af:77:8c:e3:3a:d0:53:fe:fa:d6:df:bb:fa:6b:
                    1e:6f:f4:d3:81:fe:4b:c8:f2:61:6a:13:c7:8c:e1:
                    ce:18:1b:4c:5c:90:1f:ea:e9:b3:0e:8b:97:39:b8:
                    5b:9b:d2:10:5c:a7:b9:b1:0c:71:b6:32:d9:f6:08:
                    fd:5a:a6:ec:cf:ae:ed:d4:97:b7:30:54:2c:b6:32:
                    3a:b6:99:b9:11:1e:0a:f3:45:3c:ee:0c:75:40:05:
                    7e:3c:19:46:48:0c:26:f8:8b:8d:f2:d3:84:6a:30:
                    0d:c4:28:08:36:53:12:ca:33:ee:a8:3b:ff:a7:13:
                    8e:38:8c:b2:ea:b3:86:64:13:cf:20:7c:8b:07:47:
                    df:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6D:1C:64:C3:FA:FA:73:F3:EF:72:23:5C:14:DB:21:7E:B2:51:7A
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37362e302f32322d3232203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:df:ba:16:51:10:42:e6:04:27:d7:80:76:67:cf:eb:70:3b:
         77:da:98:02:86:6f:ac:9c:a7:0f:86:16:c6:35:4e:a9:df:61:
         46:3a:26:a9:9a:7d:b8:d7:d2:de:c1:cf:9f:c7:90:b8:74:29:
         bc:dd:2e:84:d5:e9:b7:db:a5:2e:2f:57:19:c2:86:98:f6:c7:
         8a:65:02:b0:d6:25:d7:1f:ce:57:72:4d:64:29:15:54:21:a6:
         6f:9c:dd:47:b7:e4:34:ad:c5:f9:c1:31:06:a5:1f:0c:80:3a:
         36:e9:91:d2:16:99:22:cc:e7:e3:d6:ac:60:38:8d:db:0d:b4:
         a1:33:5a:a2:2f:a9:63:bd:80:81:6b:7a:5b:cf:0a:17:e0:bf:
         d5:cc:bc:a2:52:5b:0a:32:0e:a1:40:6f:99:4c:54:93:27:4e:
         60:d1:c2:8c:09:52:db:d3:86:8e:a6:c6:6a:16:ff:d8:2f:0e:
         32:d2:2c:bf:b8:bb:84:2f:20:9a:66:b1:52:a1:b2:13:a8:5d:
         ba:0f:09:cd:a6:e7:89:1d:6f:fc:9b:93:6c:80:2f:21:f2:c7:
         fa:c4:83:18:3b:d9:8f:3f:23:a6:8d:d5:c5:79:d2:fc:97:6e:
         9f:a1:30:0f:a3:8c:eb:e3:48:54:76:82:cd:a5:00:06:3d:cb:
         7a:48:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:11:08 2025 by rpki-client