Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa
File:                     3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa (raw, json)
Hash identifier:          SdkyMaJrVMEOptdkiEGwOaUDr9DIn+prMvT4DU1hq+g=
Subject key identifier:   E7:CB:29:B9:C7:BB:86:00:F8:4C:79:63:7C:30:1E:C8:99:61:7E:D8
Certificate issuer:       /CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
Certificate serial:       5CD834234AD36A0C9BAD15088A320ED9ECCD6DAF
Authority key identifier: 91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa
Signing time:             Tue 01 Apr 2025 15:15:58 +0000
ROA not before:           Tue 01 Apr 2025 15:10:58 +0000
ROA not after:            Tue 31 Mar 2026 15:15:58 +0000
asID:                     262503
IP address blocks:        167.249.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 10:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d8:34:23:4a:d3:6a:0c:9b:ad:15:08:8a:32:0e:d9:ec:cd:6d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
        Validity
            Not Before: Apr  1 15:10:58 2025 GMT
            Not After : Mar 31 15:15:58 2026 GMT
        Subject: CN=E7CB29B9C7BB8600F84C79637C301EC899617ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0f:ba:5b:69:cf:d4:eb:3b:b5:a2:6f:0f:6b:
                    1a:ba:2b:41:c7:05:3e:f7:6f:be:5f:a8:e8:4e:3f:
                    e2:af:05:d6:24:77:f4:e1:ec:b6:5b:bc:11:62:0a:
                    9d:17:55:08:8e:60:d4:04:da:c4:77:0a:db:3b:59:
                    cf:7a:7c:b2:23:27:dc:10:ab:c0:c7:39:eb:55:b4:
                    0a:5c:70:a6:71:d9:31:2a:c4:98:9d:29:a1:ce:01:
                    b5:83:39:05:0e:f7:c2:49:2c:e4:ee:67:30:e3:ad:
                    e6:6a:eb:77:a3:df:d1:85:4d:b3:ed:e3:f6:8a:e0:
                    d8:0a:40:dd:96:4a:fd:85:66:1a:f7:0c:a0:fa:ac:
                    b0:da:9a:bb:be:4f:46:6d:19:36:d1:02:3a:95:dc:
                    4b:84:14:33:e7:02:c2:d5:9c:88:d5:13:fe:43:da:
                    f5:27:c3:ed:22:7b:27:26:cc:3a:24:86:bd:3d:c2:
                    6a:58:3f:34:0b:11:1c:8d:20:00:33:36:1a:c1:d0:
                    dd:2d:59:eb:36:62:c7:27:e3:77:e7:34:85:af:c8:
                    21:2a:d2:8c:86:13:70:7f:d6:3e:55:d5:9a:19:d8:
                    8b:32:b6:a4:0d:36:5b:ef:2b:d6:69:1b:fd:1f:0a:
                    09:dd:da:f5:2d:35:56:d8:f0:38:50:6c:ff:1c:d0:
                    33:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CB:29:B9:C7:BB:86:00:F8:4C:79:63:7C:30:1E:C8:99:61:7E:D8
            X509v3 Authority Key Identifier:
                keyid:91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:17:78:fb:1e:7f:11:a2:2a:fb:7d:8e:76:88:d0:78:d1:19:
         ec:8c:8d:72:21:1b:cd:73:c5:74:e4:9a:af:30:8d:78:eb:79:
         51:6c:c1:4d:57:55:5f:53:76:6a:15:f1:e1:c5:dc:6a:14:95:
         81:70:90:fe:86:a1:28:45:71:e4:8e:10:57:c8:de:d0:56:4a:
         8f:57:c0:66:da:f7:85:9b:3f:3c:80:9d:d7:6a:6d:dc:7a:5c:
         d2:fb:dd:05:8e:0f:bf:27:bd:dc:f0:5a:ed:59:85:97:7b:55:
         6c:8a:1a:18:0c:09:47:5b:dd:cf:f9:e0:15:1a:36:a2:bc:11:
         7d:78:ef:d9:84:b0:b8:de:fb:78:8e:62:41:8c:ba:7e:d7:62:
         b6:7b:03:05:3c:eb:fd:f9:af:bd:e3:9f:71:f0:54:7c:d5:5b:
         e6:4d:b0:48:b1:63:31:6c:48:21:9a:e2:57:e9:22:4b:b2:85:
         4c:4a:8c:34:95:1f:ff:18:3d:37:05:9e:6a:e9:ff:38:a6:7c:
         81:96:5c:5b:22:41:ff:d5:18:d6:fa:68:4c:b4:78:22:6e:2f:
         ce:5c:15:e2:0d:41:71:b4:8a:46:d1:79:03:ae:16:cb:e7:e6:
         ff:a4:6b:a4:aa:e5:74:3c:80:4c:ff:8b:89:cb:ce:15:cf:50:
         b9:16:ee:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:49:03 2025 by rpki-client