Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa
File:                     3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa (raw, json)
Hash identifier:          QR0TJ7RbUcQz9xIQPmKNnxula9nPlMTY2H1rGXD6axc=
Subject key identifier:   18:E8:89:E5:05:49:2B:AC:55:AF:10:44:9B:2D:A8:45:F5:DF:05:CB
Certificate issuer:       /CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
Certificate serial:       76BFA9BD91BF07C17F10EA3482FFE9760078A2E0
Authority key identifier: DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa
Signing time:             Thu 06 Mar 2025 09:10:22 +0000
ROA not before:           Thu 06 Mar 2025 09:05:22 +0000
ROA not after:            Thu 05 Mar 2026 09:10:22 +0000
asID:                     262374
IP address blocks:        170.254.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.crl
                          rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 22:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bf:a9:bd:91:bf:07:c1:7f:10:ea:34:82:ff:e9:76:00:78:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
        Validity
            Not Before: Mar  6 09:05:22 2025 GMT
            Not After : Mar  5 09:10:22 2026 GMT
        Subject: CN=18E889E505492BAC55AF10449B2DA845F5DF05CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:a6:e4:39:0b:08:f3:49:8a:6e:0d:62:10:
                    a1:b1:ab:91:72:10:cb:e9:8c:ca:ae:28:ab:59:92:
                    17:ec:0d:a4:50:98:cf:25:a9:1e:42:0a:85:72:05:
                    1b:ae:67:f4:85:c8:52:ac:a9:bf:1e:f4:77:da:10:
                    c0:42:74:83:eb:1b:d0:4f:36:80:89:2f:48:3a:4e:
                    ef:d6:c1:32:cf:5e:8e:d0:a1:47:45:20:6c:31:62:
                    4c:4f:16:bb:e7:6e:82:84:1f:8f:33:65:74:92:07:
                    4f:06:14:7c:b1:a2:86:85:f3:99:c6:f4:ba:90:4c:
                    2a:05:a2:1f:2d:53:48:63:5c:95:7b:3a:e8:8e:fa:
                    cd:52:04:99:84:54:58:06:50:f3:92:96:fe:c9:26:
                    62:94:5c:e8:11:e6:ce:e5:f1:77:dd:6d:a3:5c:2e:
                    2b:e1:e6:d7:fd:66:e2:96:dc:50:63:6a:c0:f1:1a:
                    11:18:f9:a2:ac:2a:e1:9e:b5:ee:d3:e1:e8:f5:09:
                    32:2d:f4:d9:4a:60:98:c0:5b:e2:94:c2:a6:bb:71:
                    0d:59:a3:15:a4:25:0c:23:e1:bc:5a:3f:63:7d:81:
                    82:58:18:37:40:7e:bd:69:75:5f:27:0b:c2:54:82:
                    ed:da:de:c3:5b:76:c0:d3:f3:25:ce:a9:d2:ce:51:
                    db:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E8:89:E5:05:49:2B:AC:55:AF:10:44:9B:2D:A8:45:F5:DF:05:CB
            X509v3 Authority Key Identifier:
                keyid:DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:80:1a:4f:a2:93:34:74:8f:3e:a3:26:9c:8b:29:d2:ee:44:
         aa:fb:4c:91:f9:8a:74:59:66:8c:83:0c:46:05:23:36:4c:5c:
         1a:fa:8b:48:0f:8d:d9:4e:1f:cb:bd:f9:b5:e4:8b:9a:2a:e6:
         cb:29:1a:ee:89:39:e0:eb:01:46:27:3d:c0:c4:ac:eb:e9:19:
         ae:d6:b8:ff:20:38:0e:2e:97:be:41:98:e0:8d:fe:ec:7d:ab:
         73:e4:c7:23:35:71:72:70:2f:d0:12:e6:f3:2b:ee:78:28:87:
         71:c0:de:30:11:05:90:ac:d4:08:f8:c4:f0:2a:06:ff:3c:3a:
         e4:b9:dc:96:5b:33:9b:b6:c0:75:fc:f4:f0:48:2b:49:84:a3:
         8d:dd:cf:a8:65:b4:90:95:d1:d1:8d:ab:fb:bc:6e:e3:5a:43:
         0c:15:e1:35:19:86:5a:63:87:dc:91:85:95:9b:d4:e0:ee:79:
         f1:58:44:47:44:1e:47:52:bd:fb:63:c9:f6:24:3c:77:91:61:
         43:9d:02:91:b4:e6:81:05:75:cd:d4:03:26:69:d5:27:35:21:
         b5:5c:5c:76:33:c9:c8:38:21:18:58:65:cd:5b:7b:bc:59:f2:
         1b:78:51:8a:77:8c:88:ac:f2:a4:2c:9a:d6:ab:43:bc:54:78:
         a5:d2:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:46:41 2025 by rpki-client