Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa
File:                     3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa (raw, json)
Hash identifier:          9vkM44Why6sGQcMypDT8T8Q9VtBz4wbE97cshJxXhpQ=
Subject key identifier:   66:B1:C7:42:47:10:0E:7A:BA:BB:13:51:64:BF:B7:FB:E3:04:38:B8
Certificate issuer:       /CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F
Certificate serial:       633690EEE0302492A390D42FDD5265C571DB561D
Authority key identifier: 8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa
Signing time:             Mon 12 May 2025 14:38:49 +0000
ROA not before:           Mon 12 May 2025 14:33:49 +0000
ROA not after:            Mon 11 May 2026 14:38:49 +0000
asID:                     263959
IP address blocks:        170.238.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl
                          rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 11:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:36:90:ee:e0:30:24:92:a3:90:d4:2f:dd:52:65:c5:71:db:56:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F
        Validity
            Not Before: May 12 14:33:49 2025 GMT
            Not After : May 11 14:38:49 2026 GMT
        Subject: CN=66B1C74247100E7ABABB135164BFB7FBE30438B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:2d:31:3e:b3:7b:8d:da:d7:a4:0d:bb:be:
                    f6:94:50:a6:d6:e4:38:5c:4f:65:3c:fc:41:b6:f3:
                    e1:3d:3c:41:98:b9:a6:50:d4:7b:26:20:ec:0f:7f:
                    29:2d:19:16:b6:68:cc:63:d2:be:57:4d:79:b6:6d:
                    ad:38:8e:22:00:af:56:c5:e3:f5:09:e6:d8:5d:5f:
                    57:83:4b:e9:03:cf:80:e3:ea:29:25:96:68:6d:e8:
                    72:9e:35:de:b7:43:ca:a2:66:37:42:f0:b8:1d:84:
                    be:00:d9:1e:2a:db:14:db:ac:84:03:0a:eb:fb:79:
                    c0:f9:c7:3e:d4:ad:9e:8e:8e:ca:fd:1b:94:93:85:
                    3e:36:95:dc:ad:e9:34:08:2a:4f:bf:e9:9e:64:3f:
                    34:99:b4:8d:ae:47:7a:c7:b7:84:16:ae:65:29:c6:
                    19:73:94:0b:49:bc:a4:2d:ab:32:f6:3e:71:5f:8c:
                    e2:67:da:88:bc:1b:4b:5d:b0:ff:d0:cd:2e:63:24:
                    43:6d:a4:2d:b5:14:ad:f5:ac:dd:08:c1:e0:45:76:
                    66:22:1e:2b:42:b7:df:ba:57:68:1b:3a:81:da:1b:
                    50:bf:a7:b1:d1:3c:aa:19:61:46:47:5b:56:e3:bc:
                    5d:e4:fb:ee:5e:9f:52:02:ed:4e:05:a6:78:dc:14:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B1:C7:42:47:10:0E:7A:BA:BB:13:51:64:BF:B7:FB:E3:04:38:B8
            X509v3 Authority Key Identifier:
                keyid:8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:da:39:34:51:0d:9d:1c:31:d3:09:e3:4e:5f:99:dd:2a:51:
         7e:83:aa:a3:1e:4d:84:84:8a:70:e6:35:eb:0a:e8:35:4d:46:
         03:66:96:8e:df:7d:f5:28:17:0d:e9:14:91:71:1e:d7:36:5f:
         8e:e3:00:3c:b0:07:94:79:31:ad:24:22:c6:b5:c7:4d:c2:e8:
         0b:36:97:96:fe:a8:ca:91:7f:53:1b:7b:d3:53:71:66:d2:ce:
         d7:24:91:52:8e:6b:21:64:6a:15:c1:2b:96:90:9b:b9:3c:74:
         53:4d:54:b0:1d:a6:a5:92:8b:93:1b:57:d4:e8:5b:36:0e:73:
         4d:1b:24:af:aa:c0:40:23:f1:c1:0a:b3:75:82:15:d8:39:f2:
         a2:10:6b:7e:95:c4:04:b0:91:03:c2:86:ba:8b:45:ee:60:6c:
         5f:9d:bc:3e:4d:6f:6c:ef:df:0c:b8:c7:af:42:fc:32:7f:e5:
         66:ff:30:fe:27:bb:bb:07:43:97:e6:56:c8:0b:a3:07:43:04:
         aa:94:68:47:17:9f:82:88:8a:45:74:f3:31:a6:b8:2f:0c:4f:
         22:d6:26:d2:71:f0:9a:f3:7b:15:f2:01:9a:b5:ed:01:de:b0:
         6f:51:08:e1:5e:21:68:23:8a:a0:f1:fb:0b:7b:05:c5:2e:71:
         29:72:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:11:23 2025 by rpki-client