Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32342d3234203d3e20323635303431.roa
File:                     3137302e3135302e3133362e302f32342d3234203d3e20323635303431.roa (raw, json)
Hash identifier:          hu6QzU60pjNKiVdDWLLcaRos4L6jv/Bft3auxsl7RaE=
Subject key identifier:   3C:56:7A:55:F2:BB:49:4E:4F:4A:7D:26:6C:D7:A2:BA:D8:F3:A6:93
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       19ECF842887E836EB064A801D776E68D9274ED46
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32342d3234203d3e20323635303431.roa
Signing time:             Thu 06 Mar 2025 16:52:48 +0000
ROA not before:           Thu 06 Mar 2025 16:47:48 +0000
ROA not after:            Thu 05 Mar 2026 16:52:48 +0000
asID:                     265041
IP address blocks:        170.150.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
                          rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 07:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ec:f8:42:88:7e:83:6e:b0:64:a8:01:d7:76:e6:8d:92:74:ed:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Mar  6 16:47:48 2025 GMT
            Not After : Mar  5 16:52:48 2026 GMT
        Subject: CN=3C567A55F2BB494E4F4A7D266CD7A2BAD8F3A693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:75:73:b3:2f:44:85:fe:42:c3:d8:88:a3:3b:
                    7e:c3:ee:d4:b7:ad:9e:4e:e0:b3:56:bb:cb:76:c3:
                    86:50:ad:1a:e7:fe:02:a9:b0:6a:b6:b9:b6:bb:cc:
                    f5:9c:f1:d9:9c:b3:b5:9c:ea:ec:4c:60:de:02:17:
                    6d:27:d4:07:03:bb:fc:ed:92:a4:cd:07:d5:bf:9f:
                    9c:39:97:65:31:e9:e0:81:42:1c:46:43:8a:23:f9:
                    54:a1:ac:3e:bd:9a:36:49:d5:10:c3:11:2c:7f:d1:
                    bf:21:27:10:aa:10:2b:28:85:5b:1a:92:cf:2e:81:
                    de:50:e9:3c:e4:d8:91:b3:61:60:d6:62:15:1d:38:
                    3b:d0:9c:7d:dd:af:6b:5b:9b:43:7f:1b:e2:04:b3:
                    de:d8:9e:4a:1d:7b:f7:85:00:d2:92:49:06:49:9c:
                    53:7c:f4:f9:a3:46:d2:ad:2b:f1:a7:23:da:7c:84:
                    4a:26:03:79:68:84:bd:43:6a:04:0b:85:a8:ce:ab:
                    a6:9b:b7:e0:78:37:a3:2d:31:e0:62:a2:c8:6f:d5:
                    8a:9f:52:e3:4e:48:cc:07:6c:b3:91:b5:18:4c:99:
                    f3:aa:49:eb:42:3a:b3:4b:e1:8e:54:3c:80:c1:70:
                    b6:9c:1c:73:ae:df:68:0f:09:8f:16:09:be:5f:95:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:56:7A:55:F2:BB:49:4E:4F:4A:7D:26:6C:D7:A2:BA:D8:F3:A6:93
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32342d3234203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:f0:ba:01:9a:af:85:1b:20:54:df:d5:6f:f0:3c:02:c8:73:
         bb:88:fc:fd:cf:f9:4f:01:11:8d:51:61:68:03:22:07:dc:f9:
         45:5c:2a:db:4d:6e:b0:ad:93:3d:d7:dc:59:60:68:a2:11:ac:
         e4:00:f5:b6:36:2e:7d:fe:8a:d0:18:8d:fa:aa:1b:3d:59:47:
         dc:10:a3:f2:53:9c:d0:69:39:2c:25:67:7a:28:48:43:52:15:
         3b:4c:92:2f:44:8d:c5:22:52:93:ae:42:c0:71:85:13:6c:7b:
         ae:53:07:d3:da:8d:40:7a:4e:aa:d8:9e:5c:4a:ab:93:56:6d:
         97:3b:f6:cb:1c:7d:47:55:85:12:ee:1e:1c:94:11:61:5c:90:
         4e:d1:6a:c5:3d:b7:86:b0:a8:ae:8f:d2:a4:8e:b2:b1:76:c7:
         21:58:b5:fc:87:49:0b:db:41:a3:af:5f:51:c4:07:88:86:75:
         e0:9a:8b:a6:7f:71:bd:40:8d:39:e3:9e:32:0c:4a:60:75:74:
         45:df:02:14:17:5f:ff:b6:94:b3:51:1f:1d:5b:d2:ab:31:e0:
         f5:e6:2b:7f:c1:bb:bc:3e:53:20:75:3a:6e:70:7a:51:be:d8:
         70:31:11:d5:50:f4:c5:6c:c0:cf:b9:46:c5:8b:7e:2f:05:08:
         3d:cd:e5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:33:22 2025 by rpki-client