Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230322e302f32332d3233203d3e20323636343537.roa
File:                     3137302e38322e3230322e302f32332d3233203d3e20323636343537.roa (raw, json)
Hash identifier:          wHzxy6w4KfogH4FMVqlWQ2zq8fpLj5hw82A65IP3eug=
Subject key identifier:   E7:24:CC:E4:35:63:AC:4F:DC:80:62:65:03:52:A5:1D:9F:F4:2D:8D
Certificate issuer:       /CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
Certificate serial:       17D743ABDBE2640D0BFF797FFADCFF1136206555
Authority key identifier: 1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230322e302f32332d3233203d3e20323636343537.roa
Signing time:             Fri 17 Jan 2025 11:46:30 +0000
ROA not before:           Fri 17 Jan 2025 11:41:30 +0000
ROA not after:            Fri 16 Jan 2026 11:46:30 +0000
asID:                     266457
IP address blocks:        170.82.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl
                          rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 10:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d7:43:ab:db:e2:64:0d:0b:ff:79:7f:fa:dc:ff:11:36:20:65:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
        Validity
            Not Before: Jan 17 11:41:30 2025 GMT
            Not After : Jan 16 11:46:30 2026 GMT
        Subject: CN=E724CCE43563AC4FDC8062650352A51D9FF42D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:fe:10:0b:54:87:6a:31:29:ba:d9:e9:60:
                    d6:e9:a1:b2:e9:65:24:81:f9:7d:dc:6d:2a:d0:d8:
                    32:14:d6:aa:39:ee:b2:64:1a:e4:91:61:7d:13:98:
                    df:53:7b:39:99:f9:e7:73:39:f3:39:35:25:a9:2d:
                    8e:37:ab:a9:e4:5f:63:1b:70:b3:f0:9f:bb:f5:89:
                    a3:64:c6:51:f8:5b:96:aa:0f:dc:7b:49:76:e7:9f:
                    c8:4f:2e:36:b6:29:95:7d:45:6b:96:ee:31:04:68:
                    3f:1b:ed:5d:fd:53:e8:2c:0c:62:52:7b:74:ee:4b:
                    8c:f0:38:5a:66:a1:3a:4b:f2:68:4c:26:10:10:cd:
                    ad:5c:80:92:8b:3b:66:dc:b0:81:01:19:45:e8:cb:
                    df:de:98:c2:5b:cb:25:5a:d0:87:66:d1:f1:e6:ad:
                    79:41:9b:b6:5e:e7:85:ab:28:df:a8:a6:b4:98:5a:
                    46:e3:56:f5:bc:ae:54:bc:f1:67:1d:ca:93:af:f6:
                    f5:a3:3d:c1:18:e7:d8:75:c7:9f:a2:bc:59:2a:86:
                    75:20:6d:59:15:fd:89:98:17:98:05:b5:ed:9c:b4:
                    e8:8d:8c:4a:61:ea:0f:4d:85:a7:c6:67:6b:3d:8a:
                    27:75:03:e6:e0:79:3f:36:38:45:fa:04:a5:56:01:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:24:CC:E4:35:63:AC:4F:DC:80:62:65:03:52:A5:1D:9F:F4:2D:8D
            X509v3 Authority Key Identifier:
                keyid:1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230322e302f32332d3233203d3e20323636343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:ba:88:0d:40:df:3b:82:e1:c5:14:71:63:f6:ac:3b:74:da:
         c0:bf:13:3a:aa:a5:63:3a:d4:33:18:2a:ec:45:1f:63:62:93:
         27:61:f5:c5:c2:da:79:a6:d3:89:0c:8b:e4:d9:07:5d:ab:2f:
         d0:01:bb:c1:9a:cb:9b:0b:70:e6:8e:37:34:0e:51:70:3d:21:
         83:5e:8b:82:00:34:0b:04:be:07:39:b0:5a:13:53:e1:df:98:
         5e:b3:b6:b4:77:40:a6:e3:4e:b7:a6:49:b4:15:fd:ed:0d:69:
         64:1f:40:9c:7b:94:d8:81:8d:83:0e:a8:58:53:77:9f:e1:f5:
         2e:c8:98:14:b5:62:15:b3:51:a3:9f:ba:a3:9f:41:3d:d5:76:
         8c:38:94:e4:c1:03:a3:57:f5:26:cf:60:b0:06:d8:fd:db:34:
         af:80:88:f0:f0:e8:87:cd:1f:4c:8f:d9:80:18:2f:60:2b:96:
         eb:b8:aa:30:5e:42:f4:ca:6d:cb:1d:3d:ab:cc:41:d7:05:22:
         98:4e:bf:86:5d:43:1e:0f:77:72:66:ac:70:1f:9f:b7:b3:c5:
         af:c4:ac:dc:28:21:9c:0d:9a:58:b7:bd:56:85:de:f5:2a:11:
         56:16:d4:3a:b9:7b:15:8c:ba:e2:eb:fd:04:3b:b5:9e:80:97:
         27:b9:ee:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:20:15 2025 by rpki-client