Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/3137302e3234352e33332e302f32342d3234203d3e20323636353132.roa
File:                     3137302e3234352e33332e302f32342d3234203d3e20323636353132.roa (raw, json)
Hash identifier:          QLKrIP9qToNuENzH06SFv0kcv3evte6GLP3Db0Gce4g=
Subject key identifier:   EF:27:40:04:6F:C6:6B:65:A7:53:36:E8:C7:7D:58:0E:CE:B6:1B:B0
Certificate issuer:       /CN=35F7B6A03CB7D21D07094BD441D3096092CB93B2
Certificate serial:       04A674078984B9F120C7AE3F18C87D6C042745AB
Authority key identifier: 35:F7:B6:A0:3C:B7:D2:1D:07:09:4B:D4:41:D3:09:60:92:CB:93:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/3137302e3234352e33332e302f32342d3234203d3e20323636353132.roa
Signing time:             Thu 06 Mar 2025 15:35:03 +0000
ROA not before:           Thu 06 Mar 2025 15:30:03 +0000
ROA not after:            Thu 05 Mar 2026 15:35:03 +0000
asID:                     266512
IP address blocks:        170.245.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.crl
                          rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a6:74:07:89:84:b9:f1:20:c7:ae:3f:18:c8:7d:6c:04:27:45:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35F7B6A03CB7D21D07094BD441D3096092CB93B2
        Validity
            Not Before: Mar  6 15:30:03 2025 GMT
            Not After : Mar  5 15:35:03 2026 GMT
        Subject: CN=EF2740046FC66B65A75336E8C77D580ECEB61BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:6a:ba:6f:e2:9f:d4:02:73:e6:b3:db:0e:
                    22:06:b8:b1:6c:5a:8c:58:ae:a9:35:db:c0:4a:5c:
                    c8:25:84:7e:6a:0c:8d:d4:87:02:d4:ac:34:e2:75:
                    80:cf:e3:90:4a:1b:7c:03:82:cb:6e:40:eb:2c:d7:
                    3d:b8:20:9e:b4:7a:82:1b:c9:54:93:09:55:71:e7:
                    d9:df:09:c3:e2:9a:85:5b:4e:43:c7:5c:87:b8:7c:
                    a7:94:59:f8:21:aa:5f:74:c2:f2:87:8b:6e:52:81:
                    a9:09:10:0d:b8:cf:2d:c1:3f:da:cd:52:8b:ba:f0:
                    2c:d5:23:53:a9:08:6f:10:10:d2:39:27:58:72:49:
                    f9:dd:2f:68:78:7b:6d:25:18:2d:ef:98:d4:3b:fa:
                    cb:8a:99:46:9d:60:20:b6:08:4a:21:b6:ff:b7:2c:
                    97:48:e2:e4:79:24:2c:3e:c2:f8:bc:3c:38:77:4c:
                    50:ab:84:c6:4c:db:de:12:e9:3e:00:66:9f:b7:e5:
                    be:0d:d3:3d:f7:02:92:2c:0d:d2:5b:3d:19:99:25:
                    2e:e7:15:06:e1:6f:a5:9c:a4:3b:c6:5e:fe:7f:fb:
                    a3:f4:9a:c6:14:3d:25:d4:2e:63:48:36:51:bc:c2:
                    b1:3b:bd:64:e8:c4:74:9d:71:6d:0f:92:3d:d8:10:
                    bc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:27:40:04:6F:C6:6B:65:A7:53:36:E8:C7:7D:58:0E:CE:B6:1B:B0
            X509v3 Authority Key Identifier:
                keyid:35:F7:B6:A0:3C:B7:D2:1D:07:09:4B:D4:41:D3:09:60:92:CB:93:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/3137302e3234352e33332e302f32342d3234203d3e20323636353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:3a:9b:9f:a3:4a:01:3a:e3:ca:3e:d6:8b:dc:f0:b4:33:66:
         ae:ed:e3:78:ab:9e:ae:10:d4:14:33:28:60:61:74:77:cf:7a:
         17:3e:76:57:df:41:f2:9a:74:a5:f8:d5:cf:d2:aa:b1:ff:93:
         e2:bb:15:a5:4f:83:cc:ad:7b:6e:f1:47:44:2a:97:44:04:bd:
         a3:ba:dc:e1:d6:9a:95:cb:d8:1f:1e:f1:d8:14:52:e0:e2:5d:
         9a:ae:08:a3:82:ca:e3:1e:89:8b:f5:9b:af:59:85:42:69:80:
         55:c5:85:40:f2:11:1e:01:d0:c4:9d:0f:ca:76:a1:73:f2:6f:
         6d:c5:b5:77:81:cc:d5:49:c7:c3:08:3a:0b:18:0a:18:ec:ce:
         c7:35:54:2e:f6:45:d1:e1:86:7c:95:00:8a:96:4c:c0:4c:49:
         a5:90:b0:ba:43:4f:24:b4:66:c9:9b:69:aa:11:39:b0:bb:e1:
         47:f2:d1:d8:57:f4:e3:07:ed:86:b2:80:45:f1:52:4d:09:6d:
         b3:14:49:5e:be:78:a2:e2:4f:33:98:15:eb:7b:8d:64:9a:0b:
         25:51:69:aa:cf:31:a3:20:4c:eb:fb:a2:57:46:8e:2e:5d:93:
         d4:16:71:f8:2b:33:95:3e:c8:c0:6a:19:58:43:95:be:d5:40:
         35:5a:cc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:53:46 2025 by rpki-client