Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa
File:                     3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa (raw, json)
Hash identifier:          amplB2JLDJJAckH9IaBBkn+qJzqilzpjHxaNCTaCWYQ=
Subject key identifier:   F2:95:E4:99:02:3D:E4:10:66:F4:74:23:87:FB:0F:3A:F3:F4:B7:69
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       5817C624A432B5E93265DA37736FD81274AB8D1D
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     266505
IP address blocks:        170.244.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 10:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:17:c6:24:a4:32:b5:e9:32:65:da:37:73:6f:d8:12:74:ab:8d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=F295E499023DE41066F4742387FB0F3AF3F4B769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:e0:97:78:38:76:86:9e:cd:bb:df:b6:d5:
                    14:e7:7e:fe:e5:2a:bc:46:77:45:a1:26:2b:8b:e6:
                    87:ed:aa:e0:f8:dd:cb:e2:d7:1f:d0:6f:d2:8b:3b:
                    df:19:bc:bc:cf:db:c4:c5:53:26:8a:1e:ad:a9:f4:
                    8b:be:d3:22:9b:1a:82:bf:c9:45:e9:11:32:0c:38:
                    51:09:a2:a9:87:24:0f:a0:a3:7f:80:09:ad:dd:fe:
                    e8:91:4b:9e:46:10:9b:89:5c:ca:fc:5c:e1:8f:ee:
                    f4:02:06:c4:d6:16:b3:bf:98:b4:09:1b:ed:b7:52:
                    77:8a:74:17:bf:35:73:2a:d4:89:21:60:dd:e4:03:
                    fd:5b:3b:95:b3:72:fd:62:a2:f3:a2:5c:9b:a9:b9:
                    68:dd:62:79:d7:b3:01:c6:69:cd:11:0e:df:91:03:
                    25:bf:2c:1e:f5:18:70:99:02:f9:9c:7b:8b:ef:76:
                    e7:08:09:16:74:99:c5:fb:11:03:b8:85:33:25:b7:
                    7e:c8:b9:cd:4b:f2:c9:00:53:2d:37:df:15:4c:87:
                    b1:d2:57:4f:e6:3d:ab:0b:1e:41:b7:5d:f5:c2:4c:
                    bf:1d:33:63:c7:80:d7:e0:b0:50:cc:f4:c0:d6:1d:
                    34:7b:d8:47:e2:1d:18:69:a2:60:7c:19:ac:e3:87:
                    39:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:95:E4:99:02:3D:E4:10:66:F4:74:23:87:FB:0F:3A:F3:F4:B7:69
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:39:32:42:14:17:89:81:78:96:62:06:76:92:45:9b:21:f7:
         cf:db:9e:2b:7a:18:9d:91:28:24:38:54:81:27:2e:3a:20:19:
         3d:3a:82:f9:59:de:6f:3e:45:95:2d:89:57:9d:a8:45:d7:0f:
         57:47:51:2d:7e:75:82:84:50:f6:53:8c:79:26:a4:bc:95:99:
         cf:88:ca:de:a0:89:b9:d2:7f:b5:6b:73:66:a0:a7:71:56:f7:
         29:35:8a:f3:8b:10:05:07:ad:34:ec:b2:cd:5a:70:f5:61:95:
         17:a4:1c:6e:9f:29:1f:28:87:e3:90:1d:9f:69:72:3c:c4:6e:
         71:d5:1d:29:66:fb:98:08:89:55:c3:76:e5:0d:24:41:dd:90:
         66:3d:f4:30:dd:49:b5:35:7c:21:7e:7a:c6:41:ad:dd:e6:ef:
         ab:53:c2:b2:99:a2:82:30:e8:58:5b:c2:dc:99:49:06:1f:c3:
         53:3f:a5:b9:9a:54:e4:67:27:2e:64:00:19:6b:6c:8a:4e:2e:
         33:41:32:87:90:dd:35:d2:2c:f5:55:4c:46:39:fe:1f:60:64:
         1e:78:59:a1:3d:0a:54:64:58:3a:60:b3:85:26:53:63:0b:7a:
         c8:b1:d9:6b:e5:22:5a:78:fe:c7:71:70:d1:a2:e7:1e:25:01:
         4f:f6:49:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:08:42 2025 by rpki-client