Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa
File:                     3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa (raw, json)
Hash identifier:          aJ/QgIVJaB4TtSSosHZh65S8/KwiFBO7tuYXDtEo0mo=
Subject key identifier:   4A:8C:96:10:D1:F5:90:8B:52:0E:9D:02:C0:85:CD:C9:05:60:6C:C1
Certificate issuer:       /CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Certificate serial:       6288118CBF845F3BEB56F8A59B877EFBB95D9201
Authority key identifier: AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     264342
IP address blocks:        170.245.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
                          rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:88:11:8c:bf:84:5f:3b:eb:56:f8:a5:9b:87:7e:fb:b9:5d:92:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f9:54:cd:0f:d4:46:18:fd:fe:4d:13:8b:1e:
                    5b:33:f9:19:b1:70:5d:49:88:9d:7c:73:fb:30:e2:
                    6c:50:1d:0c:33:f1:da:c2:51:55:28:63:8f:36:dc:
                    6a:07:86:d3:f7:34:ce:a0:04:13:69:4c:e7:d2:b0:
                    a8:c1:82:08:f8:fd:63:70:9d:51:ef:05:c6:73:97:
                    c4:04:79:fc:6a:42:9f:8d:81:81:68:47:99:aa:42:
                    b1:65:f3:73:9c:7e:0e:43:d3:19:67:43:87:0e:3c:
                    8d:bf:c9:71:0b:2a:eb:bd:b5:74:1e:07:10:65:97:
                    82:9c:57:e8:ac:df:d7:ff:fd:1e:98:aa:bb:f3:30:
                    1f:38:ce:0c:2e:a3:b4:8b:2b:57:8d:0f:4c:aa:e8:
                    82:33:a6:13:fe:26:6d:12:ea:d3:ca:ed:64:ee:f8:
                    8f:38:3e:4a:95:32:08:3b:5a:db:88:41:0a:a2:94:
                    a8:d6:bf:b1:fe:ec:3a:56:b6:dc:f5:96:52:fc:ed:
                    17:e0:8f:f4:ea:5c:87:dc:da:01:60:53:96:fa:ac:
                    17:c9:db:0a:4f:f2:b5:80:73:ed:e4:a4:e1:a5:eb:
                    ad:a1:a0:91:15:d3:53:1b:bf:a0:95:3c:34:a6:8f:
                    29:94:b3:fe:35:6f:9d:45:57:02:c0:70:55:dc:ab:
                    29:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8C:96:10:D1:F5:90:8B:52:0E:9D:02:C0:85:CD:C9:05:60:6C:C1
            X509v3 Authority Key Identifier:
                keyid:AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:28:0b:da:ca:b2:71:fe:30:c4:90:9d:45:a6:2d:30:b5:01:
         0d:60:2a:ed:14:5f:ea:b2:39:d3:e2:41:e0:50:b0:c8:37:fc:
         ed:85:ca:05:b2:49:98:4c:5f:a4:8b:64:8d:11:5d:df:98:ab:
         b1:a7:77:29:f1:df:31:9e:c5:aa:94:29:ad:fe:5c:3d:69:43:
         76:95:cb:b4:46:bb:a2:6d:56:fe:cc:48:f3:75:67:62:24:c6:
         61:0a:35:43:1d:94:ec:e7:f2:6a:5d:6d:27:6f:02:35:f8:d5:
         2e:98:76:c0:48:69:ec:1f:40:9b:6e:d4:cb:a1:17:1d:07:27:
         54:29:cb:c8:20:8a:64:af:b9:c5:71:fa:5a:86:b4:9d:68:aa:
         24:0f:cf:c0:32:db:41:2f:8d:9b:16:bc:cb:7f:1e:7c:61:59:
         c3:f0:ec:f5:fc:04:4d:1a:3d:c1:45:e7:3e:16:da:f1:e3:85:
         e8:ce:42:fe:55:b4:eb:2f:4d:b0:cb:b8:8b:22:71:6a:c9:b7:
         79:67:87:0c:87:7d:6e:f8:ac:c2:58:d5:3c:de:91:9d:17:5c:
         e0:09:3c:ee:db:1f:9b:5f:b6:fa:9f:de:12:fd:e1:6c:b3:77:
         95:d2:77:f4:37:ef:3e:c0:de:15:89:7f:ee:28:c8:b1:32:59:
         6f:82:c6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:31:59 2025 by rpki-client