Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233362e302f32322d3332203d3e20323731303037.roa
File:                     3137302e3235342e3233362e302f32322d3332203d3e20323731303037.roa (raw, json)
Hash identifier:          PjKIEpC7l9Zq/jZeslmuKaGta1lbrxgvrdiPjZJYmbM=
Subject key identifier:   93:E0:71:E4:EC:00:C7:DF:24:2B:9B:87:E4:63:70:49:A0:AE:37:D7
Certificate issuer:       /CN=67EA103DA5543711281365C64EA7698F5F23FAEE
Certificate serial:       7AFD17CA725F99F6B4D1A05C71D2634866549280
Authority key identifier: 67:EA:10:3D:A5:54:37:11:28:13:65:C6:4E:A7:69:8F:5F:23:FA:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67EA103DA5543711281365C64EA7698F5F23FAEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233362e302f32322d3332203d3e20323731303037.roa
Signing time:             Sat 08 Feb 2025 12:38:18 +0000
ROA not before:           Sat 08 Feb 2025 12:33:18 +0000
ROA not after:            Sat 07 Feb 2026 12:38:18 +0000
asID:                     271007
IP address blocks:        170.254.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/67EA103DA5543711281365C64EA7698F5F23FAEE.crl
                          rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/67EA103DA5543711281365C64EA7698F5F23FAEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67EA103DA5543711281365C64EA7698F5F23FAEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 23:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fd:17:ca:72:5f:99:f6:b4:d1:a0:5c:71:d2:63:48:66:54:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EA103DA5543711281365C64EA7698F5F23FAEE
        Validity
            Not Before: Feb  8 12:33:18 2025 GMT
            Not After : Feb  7 12:38:18 2026 GMT
        Subject: CN=93E071E4EC00C7DF242B9B87E4637049A0AE37D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d6:3a:a5:93:b4:62:5e:b5:f8:40:ba:38:c1:
                    e2:1a:e4:79:68:c0:9a:31:9c:34:72:0d:09:86:8f:
                    0c:54:f4:df:ae:3a:8a:53:b6:0d:7b:de:35:40:a8:
                    a2:be:d9:2d:a1:14:b4:f9:7d:23:d0:fb:2b:fc:2f:
                    9a:20:80:43:2b:74:20:a6:4e:a4:e0:5f:4e:b0:17:
                    9d:af:05:95:fb:84:b9:02:57:3b:cf:33:69:07:4a:
                    f5:31:ab:b3:6c:e0:ef:48:13:85:27:99:b3:c8:b2:
                    90:d7:f1:b3:6e:cf:14:b7:61:64:dc:ed:84:f9:a4:
                    2b:29:51:30:94:d0:f9:8c:28:7f:73:18:86:f6:62:
                    1a:8e:ed:74:9b:07:55:0a:52:fd:59:db:8d:e8:a5:
                    a9:07:36:68:14:5b:1f:12:ee:2d:59:9e:ad:0c:dd:
                    6f:28:d8:d7:9e:a1:e2:9e:20:3a:09:b5:62:e5:0e:
                    60:a5:3c:26:4b:cc:c4:cd:66:e7:24:6e:d7:80:0c:
                    4c:68:05:b2:6e:d7:66:ef:28:db:3e:bc:9e:ba:92:
                    61:cf:36:b2:6a:a0:72:1d:0f:c2:54:6a:b0:f1:f2:
                    9d:fd:56:07:3d:e8:ae:cf:2b:00:bd:0e:71:a7:15:
                    1a:11:48:50:7c:89:9e:e4:6b:38:1e:f6:49:8f:4a:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E0:71:E4:EC:00:C7:DF:24:2B:9B:87:E4:63:70:49:A0:AE:37:D7
            X509v3 Authority Key Identifier:
                keyid:67:EA:10:3D:A5:54:37:11:28:13:65:C6:4E:A7:69:8F:5F:23:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/67EA103DA5543711281365C64EA7698F5F23FAEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67EA103DA5543711281365C64EA7698F5F23FAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/3137302e3235342e3233362e302f32322d3332203d3e20323731303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:9d:64:8a:b7:84:8f:f2:74:3d:b1:72:fd:bc:34:f6:6d:5c:
         3d:17:82:69:5b:24:dc:5b:da:fb:ff:b0:30:63:07:50:be:0d:
         06:6b:a8:39:79:87:4c:50:04:23:52:3f:ad:1f:17:1b:bd:20:
         24:42:d5:87:b4:a7:f4:73:ca:7a:8e:f0:68:e9:df:8f:10:a9:
         01:7c:29:ba:bb:f0:3a:52:70:5d:2b:81:ee:64:93:d5:c9:f5:
         37:ca:aa:55:83:49:6f:b8:9b:61:52:cc:d7:37:82:2c:a4:46:
         35:03:e1:30:c5:cf:6f:0d:f2:49:c8:37:7f:02:a9:b4:f7:f7:
         c6:f0:30:02:6d:0c:e8:4b:12:eb:28:11:50:3d:32:23:08:7e:
         cc:1a:f5:85:66:30:76:28:80:fe:d1:f8:5b:c3:d3:41:20:18:
         73:84:3d:35:bd:89:5f:73:3c:2f:0b:8e:a5:17:06:6b:d6:2a:
         15:7c:cc:be:b4:54:65:03:8d:c8:fd:df:0a:e1:a5:8e:18:68:
         07:ac:75:71:bd:89:de:11:f6:03:9e:d3:86:5c:57:16:fb:63:
         1c:f2:31:63:be:a1:5f:e9:55:7f:44:44:3a:e9:4e:bd:84:c3:
         bc:45:57:56:03:8f:fb:2e:a6:98:0e:09:8a:52:76:18:f9:ff:
         b5:9b:f1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:51:17 2025 by rpki-client