Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/3137302e3234352e37362e302f32322d3332203d3e20323636303135.roa
File:                     3137302e3234352e37362e302f32322d3332203d3e20323636303135.roa (raw, json)
Hash identifier:          7W9R7eUvhkBdu4XRDPO72CBqEgO4hFTf2BkYR3VJzt0=
Subject key identifier:   18:46:F5:8C:2A:7A:A3:BE:C0:F9:09:03:1C:9F:6B:3A:E9:74:3C:E8
Certificate issuer:       /CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A
Certificate serial:       6C418D90A3BBD69032DF32DF7866767C3943D03B
Authority key identifier: 54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/3137302e3234352e37362e302f32322d3332203d3e20323636303135.roa
Signing time:             Sat 04 May 2024 00:18:07 +0000
ROA not before:           Sat 04 May 2024 00:13:07 +0000
ROA not after:            Sat 03 May 2025 00:18:07 +0000
asID:                     266015
IP address blocks:        170.245.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl
                          rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 04:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:41:8d:90:a3:bb:d6:90:32:df:32:df:78:66:76:7c:39:43:d0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A
        Validity
            Not Before: May  4 00:13:07 2024 GMT
            Not After : May  3 00:18:07 2025 GMT
        Subject: CN=1846F58C2A7AA3BEC0F909031C9F6B3AE9743CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0f:2c:f6:59:ff:bc:a7:98:ce:c2:72:af:e1:
                    b9:fa:c5:17:1c:ca:35:24:de:58:32:71:a4:a9:80:
                    96:fc:d1:0b:46:33:7e:1b:b1:8e:bb:3c:79:c0:12:
                    ba:a7:69:bc:c9:a0:9c:73:42:01:3e:9a:f1:9e:f0:
                    05:e2:cd:1b:c0:34:34:74:46:d7:b3:6e:69:ad:e0:
                    c6:6f:ae:6a:a0:84:96:4b:2c:5b:ce:4b:3b:4c:40:
                    73:af:1a:60:70:0d:bd:80:cf:02:55:17:c4:b0:b3:
                    b4:b3:be:58:15:cb:24:54:2b:a5:72:7f:47:af:c8:
                    aa:f9:fb:e5:a7:2a:42:ea:a1:c6:e5:14:85:a2:a0:
                    88:ba:27:bd:dc:d4:0d:a2:6d:f5:b7:46:da:2a:7f:
                    c5:9c:36:23:db:a8:2e:96:27:f1:b0:89:28:e7:66:
                    ee:07:5d:f2:3d:81:cf:a7:4d:fd:32:e7:4d:af:43:
                    85:68:8f:7c:5f:27:c9:4d:f7:a3:ec:26:78:1a:02:
                    0b:d0:8c:59:5f:9f:d7:74:8c:b7:73:23:69:f3:55:
                    7a:c7:83:15:d4:71:61:38:84:92:41:83:b8:e3:07:
                    ae:d7:da:31:47:5a:1b:87:89:81:a8:b4:68:84:58:
                    12:58:42:99:c6:5f:8e:57:5d:6e:a3:e7:1a:a8:3c:
                    b6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:46:F5:8C:2A:7A:A3:BE:C0:F9:09:03:1C:9F:6B:3A:E9:74:3C:E8
            X509v3 Authority Key Identifier:
                keyid:54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/3137302e3234352e37362e302f32322d3332203d3e20323636303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:16:b2:22:63:9b:17:9c:f7:b8:2b:41:55:82:01:9a:52:d0:
         fe:d6:90:7b:24:8c:8c:31:30:54:82:3a:15:10:1b:36:50:35:
         01:6e:21:2d:e4:78:ea:6b:dd:44:35:dd:da:57:cb:50:46:37:
         58:c3:49:61:55:4e:a6:b7:e7:da:6c:e2:d0:0d:97:5c:9c:48:
         82:61:af:f9:1d:83:2a:a5:d1:44:01:55:18:34:b1:e4:a2:33:
         f7:46:68:06:38:6e:93:0a:92:c5:ab:41:bc:db:0d:3a:89:86:
         80:18:5c:3f:c8:2c:ce:4d:fc:c2:fb:cc:70:03:45:19:1d:e1:
         86:27:6c:8f:08:d3:9d:d4:73:0e:9f:8a:86:4a:36:a8:b1:fc:
         3c:6f:ff:db:03:f2:f3:f2:68:a4:80:73:87:75:2e:fa:3e:f7:
         60:8c:3a:81:3f:cd:91:9f:6a:3a:18:d3:8b:a7:b1:9d:57:6f:
         d6:0e:9c:48:71:d9:c9:84:f8:ed:e9:4b:33:b7:ad:9e:d5:3c:
         e6:84:59:f3:33:c5:5d:fd:ac:b8:f1:2d:1b:5e:1e:cc:7e:ab:
         a3:a8:6a:aa:cc:58:cb:ec:54:8b:e0:7a:2c:43:61:58:2f:a4:
         99:69:47:1b:b1:06:6a:da:f3:6a:49:69:e6:da:41:83:65:72:
         91:cb:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:10 2025 by rpki-client