Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137302e3233312e38342e302f32322d3234203d3e203533303232.roa
File:                     3137302e3233312e38342e302f32322d3234203d3e203533303232.roa (raw, json)
Hash identifier:          pAiaAPnHZjwQh+ZS+JWJGFNUUbrvgydEBycp9fgvdng=
Subject key identifier:   3A:1B:0D:42:0E:40:BB:C2:C9:DC:D3:0D:86:F0:6A:01:35:DC:C5:3B
Certificate issuer:       /CN=93E4BA76EC60DA98DE98103D4C88131B429F3326
Certificate serial:       25322CAFCAA9270A509F742FE499409512E90938
Authority key identifier: 93:E4:BA:76:EC:60:DA:98:DE:98:10:3D:4C:88:13:1B:42:9F:33:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137302e3233312e38342e302f32322d3234203d3e203533303232.roa
Signing time:             Thu 06 Mar 2025 10:36:52 +0000
ROA not before:           Thu 06 Mar 2025 10:31:52 +0000
ROA not after:            Thu 05 Mar 2026 10:36:52 +0000
asID:                     53022
IP address blocks:        170.231.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.crl
                          rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:32:2c:af:ca:a9:27:0a:50:9f:74:2f:e4:99:40:95:12:e9:09:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E4BA76EC60DA98DE98103D4C88131B429F3326
        Validity
            Not Before: Mar  6 10:31:52 2025 GMT
            Not After : Mar  5 10:36:52 2026 GMT
        Subject: CN=3A1B0D420E40BBC2C9DCD30D86F06A0135DCC53B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:25:f0:49:09:9a:79:0e:c0:32:f9:a7:ee:
                    ab:1e:fe:a6:f0:67:bc:d0:9b:06:4e:6c:0f:3c:e7:
                    39:78:b0:98:f5:89:35:57:1e:ec:0b:b0:aa:0a:9c:
                    d3:29:28:24:3b:57:73:06:f6:56:f0:2a:8f:7d:c4:
                    bb:4e:76:70:4b:f6:a7:a2:7b:be:88:95:3c:f4:8a:
                    bf:13:62:25:c6:76:5e:c3:ed:49:3b:c4:b4:d6:a8:
                    31:71:8e:6c:b4:2a:cc:ef:78:7e:ba:cf:b6:23:d2:
                    3e:fe:4f:06:e1:22:94:35:b4:35:26:f3:8d:bb:b3:
                    28:64:78:9b:0c:f4:df:a5:c7:52:3c:b8:80:e0:86:
                    f5:41:d6:f3:39:43:80:d3:5a:7b:61:6a:88:28:04:
                    bf:54:c9:54:1b:e1:f6:2c:9d:b2:a5:7b:63:7c:b1:
                    65:d8:98:86:1a:b4:4d:3d:59:70:2a:45:08:7c:73:
                    34:87:fc:99:3f:6b:3f:41:dc:5a:a3:7c:ab:d9:52:
                    7b:09:15:33:4f:e9:88:5c:33:d6:72:83:98:c9:51:
                    c1:09:0b:cc:48:cf:cb:3c:2f:8c:0c:35:ba:2f:70:
                    2c:50:1e:3d:d8:71:91:3d:02:4a:18:c1:c1:23:81:
                    33:24:36:21:5e:cd:94:8a:1b:d6:ed:21:32:97:7a:
                    42:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1B:0D:42:0E:40:BB:C2:C9:DC:D3:0D:86:F0:6A:01:35:DC:C5:3B
            X509v3 Authority Key Identifier:
                keyid:93:E4:BA:76:EC:60:DA:98:DE:98:10:3D:4C:88:13:1B:42:9F:33:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137302e3233312e38342e302f32322d3234203d3e203533303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:0c:91:46:68:9b:c4:6a:79:1c:f2:2e:fe:c3:01:e8:01:f4:
         84:ff:24:d3:76:44:4f:f9:82:23:19:0e:ac:80:12:26:bc:1e:
         e9:e8:ab:d3:94:58:8d:32:8c:3f:df:0c:20:48:ab:c0:59:21:
         f2:8f:66:0e:e1:13:a8:42:58:6b:24:d2:37:a1:cc:c8:34:ae:
         e6:c3:13:81:b7:6e:39:13:20:a9:a6:39:8e:46:ea:1d:af:19:
         cc:7e:81:b0:0f:7f:37:d4:7d:ed:25:bc:f3:f8:a4:33:fd:1e:
         3e:5a:b9:08:c5:63:42:71:c4:b0:f2:6e:6e:7d:e5:64:cb:2f:
         a9:26:64:66:f9:72:9f:12:f1:02:e1:b8:5d:e5:4e:ac:20:66:
         d2:29:ef:a8:3a:04:41:42:d3:60:cb:35:f3:a7:07:dd:a3:0d:
         00:2d:ae:bb:cd:27:c0:e4:1a:09:92:a8:ad:8e:38:20:3b:fc:
         0c:31:65:11:22:4a:1e:64:0a:a1:a2:fe:43:f2:e0:06:70:7c:
         61:07:ee:8c:3e:3e:6b:d7:84:92:74:b2:66:f6:f5:a6:fc:00:
         99:12:a9:0c:98:07:a5:b4:ad:aa:28:5e:78:6d:7a:8f:11:1a:
         e1:f0:26:98:93:27:66:81:9f:94:21:67:92:ad:66:53:6c:42:
         1b:dc:be:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:25 2025 by rpki-client