Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa
File:                     3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          PNNZ2vi8Trla56OigQXr9BsxxlSGzbS7K2s7SsKRQTU=
Subject key identifier:   C7:1F:A9:F4:79:EB:4B:12:78:F4:CE:78:08:FF:C0:1D:A9:AB:AF:5D
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       29C47CA0FDAE0BB99FB4A3EE1436BF96B1E80A7C
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 12 Mar 2025 13:33:19 +0000
ROA not before:           Wed 12 Mar 2025 13:28:19 +0000
ROA not after:            Wed 11 Mar 2026 13:33:19 +0000
asID:                     28201
IP address blocks:        170.239.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c4:7c:a0:fd:ae:0b:b9:9f:b4:a3:ee:14:36:bf:96:b1:e8:0a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Mar 12 13:28:19 2025 GMT
            Not After : Mar 11 13:33:19 2026 GMT
        Subject: CN=C71FA9F479EB4B1278F4CE7808FFC01DA9ABAF5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:ce:5f:61:9a:fb:db:05:06:98:3f:ed:fd:
                    25:05:be:b5:8a:c6:95:1b:ac:e6:31:a4:15:fa:f3:
                    f7:1b:5f:7a:18:34:ac:96:ab:8f:d6:dd:93:2e:d9:
                    87:e5:48:6f:ed:1b:de:e5:3d:cb:6f:02:7f:56:c0:
                    96:23:e5:d4:a4:d4:cb:10:52:13:be:c1:bf:79:27:
                    0e:3b:ee:b0:05:d6:0a:3c:49:2f:85:e1:68:d2:3f:
                    62:66:a3:2f:eb:4b:c7:17:44:8e:75:a1:51:0f:ff:
                    8a:b4:1f:56:49:f1:04:6b:ae:50:3a:4b:da:84:9b:
                    24:8d:7a:46:4f:45:8a:7d:68:55:15:16:71:df:e1:
                    f3:d0:a4:4a:c2:7f:a9:b6:30:aa:fb:b1:93:9d:81:
                    da:ae:f7:95:d8:ca:9f:b4:b6:5c:aa:45:f3:0f:9e:
                    c4:99:63:4a:81:6f:1c:bd:d3:66:ed:d8:45:1e:ee:
                    ba:4b:84:e3:00:a4:b5:c8:8e:c1:18:45:b9:7f:b9:
                    cd:ce:4c:f8:71:cc:0d:c2:91:8f:2b:c5:26:57:7b:
                    21:1b:1e:98:dc:da:af:02:5e:f2:a5:42:92:ae:d6:
                    6f:e8:60:15:58:0a:56:3e:a4:48:25:a3:86:e2:95:
                    9b:b4:a6:66:35:c4:5d:4d:2d:34:c1:5f:59:eb:ed:
                    81:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1F:A9:F4:79:EB:4B:12:78:F4:CE:78:08:FF:C0:1D:A9:AB:AF:5D
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:6f:38:40:d9:d4:5a:e2:15:50:78:87:aa:38:47:65:2c:ea:
         dd:de:a4:23:94:fc:fd:a0:6f:0a:6d:d9:1f:6a:7c:82:6f:c9:
         d0:7f:17:10:f4:a5:61:0e:a0:58:5f:c3:bd:69:87:a7:db:98:
         e3:93:aa:9b:d6:46:76:23:ee:39:11:d5:30:55:a4:48:d6:c1:
         ef:cf:12:e2:02:e3:3a:0a:6c:2c:74:14:9a:66:34:24:e4:fc:
         f0:1a:77:b5:77:a0:a2:b3:89:0a:0d:d9:bc:6e:03:c0:96:7c:
         6a:50:af:a0:96:47:40:01:f7:c7:b2:75:db:46:21:96:04:9b:
         01:92:94:9e:33:96:1c:db:71:96:05:a9:19:49:16:f3:99:98:
         8e:b3:6b:8c:db:55:af:ba:5d:06:d9:85:e3:59:90:1e:0c:25:
         00:20:38:a4:4e:94:7e:73:ea:8b:4f:70:35:d9:67:b4:6e:d2:
         77:47:3f:ba:ef:7a:44:d0:60:d0:87:0b:2f:24:ec:89:33:bd:
         bc:0c:e6:9d:9d:dd:49:83:5d:b6:4c:2b:68:9d:a2:77:8d:a5:
         0c:d1:65:ee:86:f4:e7:ac:0b:1f:f1:59:33:61:47:c7:d7:87:
         bc:eb:eb:69:61:29:ee:74:66:05:53:c0:15:35:a4:c7:26:52:
         e4:67:be:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:29:05 2025 by rpki-client