Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e302e3136382e302f32322d3234203d3e203238313436.roa
File:                     3137302e302e3136382e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          0H+Byq8DgQpcYMQfzwg8SCOj8xOItfTjwyXFXefJm8c=
Subject key identifier:   82:C7:90:E0:24:88:DA:F9:0C:59:30:4C:E1:91:B6:15:5F:1F:50:F3
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       42EA647FB9D597518C1A6A7262078F9D85B7C175
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e302e3136382e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:51:01 +0000
ROA not before:           Mon 12 May 2025 12:46:01 +0000
ROA not after:            Mon 11 May 2026 12:51:01 +0000
asID:                     28146
IP address blocks:        170.0.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ea:64:7f:b9:d5:97:51:8c:1a:6a:72:62:07:8f:9d:85:b7:c1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:46:01 2025 GMT
            Not After : May 11 12:51:01 2026 GMT
        Subject: CN=82C790E02488DAF90C59304CE191B6155F1F50F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:67:4f:50:b2:f3:8d:16:20:03:b3:f9:99:4d:
                    7f:79:47:e7:98:16:ab:9e:99:8f:ff:26:54:af:63:
                    65:b9:0d:23:fb:f7:70:a5:43:72:15:b9:be:11:17:
                    6b:68:e5:36:09:fe:7a:cf:0a:1e:36:89:4a:02:e2:
                    df:61:b5:72:af:08:e3:ec:ce:ab:8e:bf:3d:f5:68:
                    1f:a5:32:d4:45:ff:b6:6a:e2:81:52:6a:f0:7e:84:
                    a8:9c:3b:cb:18:ef:d2:93:87:42:a7:06:18:c1:5b:
                    3b:6e:b4:7f:f8:e5:89:53:95:50:8d:63:ed:5d:22:
                    18:ca:e4:b8:26:3a:9b:8f:da:c9:06:b7:17:03:e1:
                    0b:20:20:c8:c2:25:6f:e3:e5:50:94:19:47:30:59:
                    c7:11:0c:74:f9:eb:52:70:67:5e:46:9c:c4:67:2f:
                    d4:46:70:19:c5:3a:26:b0:18:3b:29:5c:a8:d4:a3:
                    35:ea:5c:e7:1d:e1:8f:eb:5c:fa:9a:58:c2:92:84:
                    1c:e1:83:c5:15:c5:60:cc:f4:32:c8:cc:ad:0a:db:
                    31:86:73:0d:62:0a:4f:42:25:c8:79:32:38:6c:17:
                    11:e3:c1:24:7b:db:6f:6e:14:3b:24:9d:f8:60:cf:
                    a5:18:8c:f5:51:22:1c:f2:b1:b6:c6:81:94:5e:0c:
                    93:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C7:90:E0:24:88:DA:F9:0C:59:30:4C:E1:91:B6:15:5F:1F:50:F3
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137302e302e3136382e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:bf:f7:54:5a:82:b6:7d:b7:c6:f3:3b:46:0b:4f:e4:69:19:
         43:36:00:ba:9b:2d:34:04:2e:5e:b8:53:53:2f:8f:49:81:4d:
         48:d1:b6:39:32:3a:0e:de:38:d3:aa:3e:2e:d2:70:a1:9f:71:
         d8:d2:a1:f4:15:d0:30:e4:a5:9d:74:31:7c:b5:23:c5:0b:9d:
         d4:a5:8f:a0:7c:ab:c4:f1:51:03:8e:32:81:a6:3c:07:d7:15:
         92:36:67:8b:25:42:87:55:16:87:4c:40:63:77:a8:8e:8b:39:
         e3:96:1d:3d:59:da:58:40:31:ad:36:aa:2d:3c:47:e0:dd:c3:
         fb:6d:61:1c:b7:81:7f:f4:2b:4b:68:c4:fa:06:9c:0b:19:c5:
         29:92:70:31:50:8d:ac:4c:89:61:70:a2:f9:f0:8c:46:71:00:
         4a:ef:dd:ab:e1:9f:51:b3:f6:53:7b:80:d4:e5:ba:b8:49:8c:
         0f:c8:51:65:00:66:9d:84:66:cf:bf:54:81:bd:ec:59:36:a4:
         e0:7d:de:34:0d:9d:bb:b1:15:00:90:38:55:7a:d1:38:39:00:
         e0:77:8d:f0:8c:df:37:56:10:b8:2b:41:02:96:45:f8:93:d0:
         85:09:77:ee:5e:a0:6c:1d:6f:48:95:16:23:7d:8c:61:5b:be:
         0e:50:c6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:52:29 2025 by rpki-client