Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa
File:                     3137302e3235342e35342e302f32342d3234203d3e203631393031.roa (raw, json)
Hash identifier:          4GvLE5HtCjR0jn1akFfJAIZff70at4htkUrqkZgFpPc=
Subject key identifier:   4E:5A:29:A8:18:60:13:33:0B:1B:76:11:FB:D1:36:17:42:3D:5E:5D
Certificate issuer:       /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial:       30C2BDFB17D7B8E07A2D14E94F183FA4F93F4873
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa
Signing time:             Thu 06 Mar 2025 17:33:27 +0000
ROA not before:           Thu 06 Mar 2025 17:28:27 +0000
ROA not after:            Thu 05 Mar 2026 17:33:27 +0000
asID:                     61901
IP address blocks:        170.254.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 23:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c2:bd:fb:17:d7:b8:e0:7a:2d:14:e9:4f:18:3f:a4:f9:3f:48:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
        Validity
            Not Before: Mar  6 17:28:27 2025 GMT
            Not After : Mar  5 17:33:27 2026 GMT
        Subject: CN=4E5A29A8186013330B1B7611FBD13617423D5E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:05:05:ce:39:10:5c:04:c4:20:06:63:f7:
                    92:e0:cc:9f:79:09:9e:54:6b:26:71:67:a7:1e:09:
                    9b:b5:00:11:19:16:26:d0:3e:b4:6e:9d:47:8c:c2:
                    30:d1:ff:f8:b4:8b:5a:66:46:77:5d:4f:41:3d:ef:
                    39:b0:77:33:d3:ce:e1:86:18:e3:06:c4:29:cb:00:
                    dc:cc:c2:54:a0:21:f5:7f:55:91:00:14:f7:a2:17:
                    67:9f:ea:c7:cb:1e:40:49:e2:fa:94:c5:e0:3b:5e:
                    5f:1e:c0:9d:07:1f:9d:13:34:d0:c2:ad:a0:ee:57:
                    b3:f8:72:81:6d:16:54:ce:ff:a7:99:0b:14:80:0d:
                    cd:9f:a2:b0:6c:78:b0:05:82:60:b7:d5:88:db:09:
                    82:dc:65:b5:04:e9:e8:6c:8b:ef:eb:9f:85:05:ea:
                    0a:0b:c5:fc:ae:26:92:4e:33:36:74:64:fa:3b:a4:
                    e4:5d:cd:50:c6:8b:9d:f9:a7:94:02:70:55:eb:23:
                    e8:ed:dd:37:9a:75:6e:58:f1:9b:49:72:44:e0:7b:
                    ca:a5:3a:3e:9b:7a:fe:2e:69:8b:e8:cf:73:c2:98:
                    9a:ef:27:76:2f:2d:d3:bd:3b:38:97:8e:8f:dd:47:
                    29:95:d3:ee:a0:b8:b2:9d:3b:7d:70:c8:88:6b:ce:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5A:29:A8:18:60:13:33:0B:1B:76:11:FB:D1:36:17:42:3D:5E:5D
            X509v3 Authority Key Identifier:
                keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:5c:88:3d:1d:ac:5a:57:93:75:51:84:93:2a:c6:7f:bb:53:
         23:7f:2d:e8:2b:a7:80:a3:7b:ea:92:3e:c4:da:77:75:b5:36:
         0a:23:f0:69:fe:78:18:14:4e:bb:87:36:76:ab:66:61:c4:e6:
         3d:64:34:e5:9c:4c:01:2a:7c:fc:6d:f9:30:97:93:58:8d:14:
         4e:b1:e1:83:f0:d4:26:80:44:93:50:c0:6c:2a:f5:1a:e3:f2:
         b5:ef:30:8d:8f:9b:d1:95:68:0f:7c:14:e3:9a:fe:51:69:ef:
         94:ed:e4:11:75:c2:e4:4b:b4:81:f8:7f:9a:8b:93:ff:eb:da:
         a0:fc:e6:0a:da:59:10:50:2e:4e:35:f1:48:99:d1:d0:22:f8:
         48:0a:45:ea:ae:95:d5:98:24:08:4f:75:29:3d:2f:a6:c6:01:
         70:6c:1c:b4:05:a6:05:b4:57:25:59:8a:72:28:30:ef:05:1c:
         80:33:0f:88:74:4b:8e:32:1e:e2:01:3b:6b:5c:0b:18:68:c8:
         46:20:f6:ab:3f:61:d7:af:19:34:b0:7b:78:47:a2:f6:a6:a1:
         5f:9a:de:92:24:56:31:4c:c8:6e:f6:cd:9f:97:11:5c:bc:99:
         04:ec:3a:e6:b1:8f:a0:ae:c7:37:f1:c1:d0:e9:c1:02:c3:35:
         7c:4d:09:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:30:02 2025 by rpki-client