Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/3137302e3233392e3232342e302f32322d3234203d3e20323636333536.roa
File:                     3137302e3233392e3232342e302f32322d3234203d3e20323636333536.roa (raw, json)
Hash identifier:          5+MAJ5p9WBvXqhMf50cfVCkMCAMAZoj+LUAefOm+7yU=
Subject key identifier:   AC:1C:7E:78:5E:2E:DF:C4:FB:F9:64:A6:78:2F:78:0A:03:F6:5D:05
Certificate issuer:       /CN=BE24527D25EBA8FEB922396F011CC1B1F41282DF
Certificate serial:       786E23011BD1816B91AE11DE335E4A6315347977
Authority key identifier: BE:24:52:7D:25:EB:A8:FE:B9:22:39:6F:01:1C:C1:B1:F4:12:82:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/3137302e3233392e3232342e302f32322d3234203d3e20323636333536.roa
Signing time:             Wed 05 Mar 2025 19:13:39 +0000
ROA not before:           Wed 05 Mar 2025 19:08:39 +0000
ROA not after:            Wed 04 Mar 2026 19:13:39 +0000
asID:                     266356
IP address blocks:        170.239.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.crl
                          rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 04:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6e:23:01:1b:d1:81:6b:91:ae:11:de:33:5e:4a:63:15:34:79:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE24527D25EBA8FEB922396F011CC1B1F41282DF
        Validity
            Not Before: Mar  5 19:08:39 2025 GMT
            Not After : Mar  4 19:13:39 2026 GMT
        Subject: CN=AC1C7E785E2EDFC4FBF964A6782F780A03F65D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:45:0a:73:3c:41:22:61:75:52:5b:26:6b:
                    76:a3:bf:e4:42:9a:2d:bb:9b:3b:3c:3b:1e:cf:ed:
                    67:89:e8:0b:ea:98:f8:a0:22:93:c8:14:81:1d:6b:
                    97:b6:29:d3:79:54:d8:e7:37:69:b0:e8:a5:9e:f9:
                    5e:f2:f1:cd:c6:78:ed:e5:0b:6e:6e:8b:38:ca:1b:
                    26:95:88:cb:ee:15:3a:4c:8e:98:c6:c9:23:26:ec:
                    66:6d:04:4a:bd:06:09:37:07:2f:c0:0a:93:62:61:
                    51:e8:9f:f3:a5:9f:46:14:45:66:bd:13:fa:9a:6d:
                    c7:5a:10:b4:e2:e6:69:c2:b2:61:20:3f:28:e0:24:
                    3b:ef:cd:4a:41:37:98:51:c6:e5:ef:65:21:a9:45:
                    da:d8:63:be:af:ba:8b:2c:1b:e2:ed:f4:de:62:1e:
                    3a:6f:b4:51:42:3a:01:30:62:cc:1d:9c:20:66:0b:
                    3a:2a:eb:90:b6:9f:9e:da:6c:b5:09:b3:64:d1:76:
                    07:bc:94:4a:2c:36:39:03:3e:36:37:44:5d:a4:83:
                    97:63:af:74:f8:62:ac:58:b1:fc:23:f1:7a:37:71:
                    dc:88:5a:ca:e7:77:49:c5:64:35:f9:5c:fd:bb:91:
                    c9:16:00:23:94:47:7f:d2:29:83:87:fb:4f:c8:0c:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1C:7E:78:5E:2E:DF:C4:FB:F9:64:A6:78:2F:78:0A:03:F6:5D:05
            X509v3 Authority Key Identifier:
                keyid:BE:24:52:7D:25:EB:A8:FE:B9:22:39:6F:01:1C:C1:B1:F4:12:82:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE24527D25EBA8FEB922396F011CC1B1F41282DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/1/3137302e3233392e3232342e302f32322d3234203d3e20323636333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:62:fd:e9:2d:6f:0f:ba:b3:92:84:13:1a:2b:3d:98:7c:fe:
         9d:1f:84:46:25:31:1e:f4:63:f9:58:54:84:9c:1b:f8:56:f0:
         70:f1:49:c1:2d:08:0e:b9:5a:b5:71:c4:2d:e7:d5:87:31:df:
         f6:13:c4:e9:50:95:16:01:a2:5a:3e:1d:19:eb:75:3b:00:a3:
         41:55:c1:1f:67:40:76:e0:f8:c2:6f:9f:33:07:03:46:8a:dc:
         8c:d5:df:64:58:eb:ac:9f:84:ef:73:5b:92:3f:3a:d8:e1:05:
         ec:36:18:ef:eb:39:5a:e0:d3:8f:0b:4b:0f:69:72:3f:b9:32:
         50:a1:88:54:c6:bc:ad:d2:5e:61:87:0c:7d:1e:ae:be:ff:b5:
         81:f6:32:c8:7f:7b:2a:17:52:04:cc:f8:2f:f5:56:3f:47:ef:
         56:e4:19:83:31:87:67:21:d0:45:7d:9e:99:fe:ba:33:0f:ec:
         4b:3f:c3:0b:57:f6:6b:14:28:8a:a2:4a:ae:0e:df:53:f7:17:
         4e:21:00:a5:85:8d:a3:1c:19:94:3e:a0:54:4d:b0:98:88:7a:
         80:46:9c:66:61:82:5f:2c:2d:ab:77:e3:e1:f0:12:a9:7b:71:
         ef:42:c2:53:c9:e3:70:18:f7:8b:84:06:d2:02:e5:e1:4e:a2:
         ae:1a:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:35:34 2025 by rpki-client