Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3137302e37392e35322e302f32322d3234203d3e20323634353532.roa
File:                     3137302e37392e35322e302f32322d3234203d3e20323634353532.roa (raw, json)
Hash identifier:          UQ56rMkePIWmRQnxJEolgK/byYB/tX2CcoDpZOtnz1o=
Subject key identifier:   BD:EE:9F:70:6B:BA:D8:A7:FD:0C:42:C0:04:27:A0:D4:53:FF:4A:71
Certificate issuer:       /CN=42E0C742D5DC5A6C41753F73202F41323E27436C
Certificate serial:       7BC65D1D6411B391F00F9F9AF8A692401D7E8312
Authority key identifier: 42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3137302e37392e35322e302f32322d3234203d3e20323634353532.roa
Signing time:             Thu 06 Mar 2025 04:31:20 +0000
ROA not before:           Thu 06 Mar 2025 04:26:20 +0000
ROA not after:            Thu 05 Mar 2026 04:31:20 +0000
asID:                     264552
IP address blocks:        170.79.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl
                          rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c6:5d:1d:64:11:b3:91:f0:0f:9f:9a:f8:a6:92:40:1d:7e:83:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E0C742D5DC5A6C41753F73202F41323E27436C
        Validity
            Not Before: Mar  6 04:26:20 2025 GMT
            Not After : Mar  5 04:31:20 2026 GMT
        Subject: CN=BDEE9F706BBAD8A7FD0C42C00427A0D453FF4A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:12:63:88:b0:e5:35:b0:aa:64:85:d1:92:
                    6a:66:fb:c7:5b:ab:89:ae:0f:39:53:aa:f4:2c:31:
                    eb:53:b1:b2:b4:4b:d4:9b:70:d4:c0:28:d9:d1:26:
                    58:d1:1e:5a:07:33:1d:15:e6:60:7e:89:e4:69:f7:
                    38:b2:58:8d:f2:17:b1:79:78:a6:91:98:84:8c:62:
                    1f:45:3f:25:91:1a:85:43:17:cf:10:f8:e5:7e:66:
                    8b:a9:2f:cd:e6:be:3b:49:50:a9:86:3e:54:68:26:
                    8e:ab:1c:f3:04:57:3e:11:3f:9b:3b:e0:09:dc:d6:
                    f5:d1:b2:ad:cf:97:a3:4e:78:13:36:51:95:78:97:
                    91:b6:ac:f2:af:f5:de:ad:d4:f3:c0:39:9f:30:58:
                    e8:76:06:d1:8a:e5:9f:99:46:ab:67:63:e6:17:e2:
                    ab:6c:70:39:d8:3c:f6:4e:8c:5c:1a:a7:72:a0:10:
                    08:8b:03:a4:10:aa:eb:db:8a:e6:9a:28:87:22:a4:
                    61:97:57:0b:34:b7:c7:21:1b:07:5c:05:b4:a0:0c:
                    86:d5:e7:94:c6:2e:46:10:d1:93:c2:91:df:16:19:
                    7e:a5:1b:c1:dd:2d:81:dd:1c:9a:71:51:9d:18:23:
                    eb:1a:07:32:b9:e6:6c:ab:5c:2c:bd:92:4c:56:22:
                    d6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EE:9F:70:6B:BA:D8:A7:FD:0C:42:C0:04:27:A0:D4:53:FF:4A:71
            X509v3 Authority Key Identifier:
                keyid:42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3137302e37392e35322e302f32322d3234203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:de:6a:95:cb:10:18:35:3f:1c:74:65:98:4c:43:9d:0f:5a:
         cb:a5:54:9d:d5:15:10:ec:a6:10:b4:85:57:5c:83:10:65:39:
         26:e1:19:29:24:1a:e6:0b:a9:b5:69:8e:c1:55:97:8b:6e:41:
         7a:be:5b:69:68:eb:ad:c1:05:1f:af:5e:2f:aa:e9:50:4f:46:
         38:3a:c7:e6:16:02:1a:0e:ba:a4:41:ed:d3:85:9d:1e:c9:be:
         1e:e6:db:92:71:32:cb:97:17:d9:cd:e5:cb:3c:3c:4b:a1:83:
         ce:b5:fb:23:e1:2c:1c:19:e4:31:0c:38:1f:ae:6b:19:ec:ee:
         d3:68:9d:7c:87:44:b0:0b:54:cb:88:a6:ee:6f:63:59:bf:0a:
         41:4e:14:39:5f:6c:32:cd:e3:f6:41:c2:69:61:2e:28:d2:a8:
         2f:09:72:81:5f:d5:72:28:40:0b:6d:be:4f:54:e5:07:b8:c2:
         47:28:eb:fe:b0:46:3d:be:93:3e:de:c3:84:81:41:c3:e5:55:
         62:0d:ae:9b:a5:d9:52:36:c6:cb:c6:55:7a:51:13:95:be:9c:
         eb:03:0e:99:64:cf:38:f4:a1:e8:bb:2d:2b:03:f7:8b:7f:d6:
         a0:0a:92:1a:d4:9e:d1:ce:55:cd:98:ad:63:99:88:41:db:d1:
         90:54:69:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:08:44 2025 by rpki-client