Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa
File:                     3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          uIZDVN07XoocxP8LBfopC3LsdkWShm34LOE5IlBSz5Y=
Subject key identifier:   07:B6:50:EB:0A:57:B6:34:C3:94:35:24:13:C0:10:26:98:0A:1D:E4
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       6040992AEAB6F89ED36625D35ABF8FABD526B000
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     53236
IP address blocks:        170.150.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:40:99:2a:ea:b6:f8:9e:d3:66:25:d3:5a:bf:8f:ab:d5:26:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:f6:1a:04:fd:f7:9c:ef:39:0b:27:a5:d5:
                    08:28:cc:83:98:ba:0a:b3:bf:22:1c:b5:80:41:44:
                    e2:30:5e:61:c0:36:06:18:01:d2:d8:5b:72:62:96:
                    4f:60:bc:e5:13:ee:b4:15:f7:07:ac:10:c2:18:a5:
                    5e:78:b1:79:91:95:33:64:7e:13:30:e8:e9:bd:89:
                    c7:51:7d:02:c4:0e:92:56:8d:4a:86:6b:23:0f:12:
                    cd:85:4b:ca:cf:25:31:01:93:44:be:7f:64:e9:5f:
                    ea:cb:83:83:5c:99:35:e8:34:50:27:c2:a4:41:8a:
                    1f:ad:aa:6e:65:8d:cb:e2:ed:28:c8:5b:2a:3f:b8:
                    4b:fc:c7:f2:a6:90:89:b2:b1:68:6b:e3:28:02:91:
                    24:25:7b:58:49:6e:de:6a:ae:32:04:d1:6a:2d:f8:
                    38:71:eb:1f:62:8a:c4:5e:9d:49:eb:2d:78:13:d1:
                    f2:08:9d:e0:17:24:ce:5d:3e:a3:97:ab:25:7e:4e:
                    60:e1:84:74:c4:15:81:2b:11:53:89:b3:c9:ef:27:
                    2d:f9:eb:37:cc:e5:1a:2f:8f:db:2e:aa:9c:f7:92:
                    00:3c:2b:b6:a4:8d:25:e0:3e:45:2b:57:ca:01:f7:
                    68:8c:b8:37:5e:85:52:59:bd:75:1d:a5:8a:df:e6:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B6:50:EB:0A:57:B6:34:C3:94:35:24:13:C0:10:26:98:0A:1D:E4
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137372e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:f3:da:36:61:8b:8d:d8:f2:40:d9:b7:f1:0c:f6:b1:34:fb:
         f1:d3:be:94:46:ed:c7:d4:fa:30:14:ec:9c:54:44:8e:fa:11:
         93:1b:61:17:15:ba:71:26:0d:d1:7f:b8:b9:9d:c7:aa:01:82:
         6f:ba:77:48:c0:7c:5e:91:9d:b3:72:a8:c0:1d:57:4a:b1:fc:
         b6:99:99:df:fe:fb:f5:9f:dc:ce:a6:a8:20:bb:e0:d2:1b:f1:
         66:be:22:fd:0e:52:3b:6f:78:0d:46:77:25:49:c9:7b:3e:59:
         3a:56:70:cc:a2:85:0f:5f:0f:75:f2:af:72:be:7a:0c:ac:64:
         aa:0b:c0:d1:f8:62:ba:4c:ca:4a:78:91:b4:dc:f0:1e:c7:3c:
         a0:4b:bd:56:ce:32:4f:14:a2:2f:53:6e:2f:67:4f:5b:18:a1:
         f4:a2:c0:cc:b0:c0:b7:9c:40:72:96:b3:09:ac:a4:ed:47:a0:
         88:12:74:a5:ce:e2:9b:7d:0c:2b:9b:ac:1c:9a:c9:26:01:ba:
         09:2a:3b:38:21:0f:e4:55:0b:ac:34:66:1d:ee:f0:40:fd:be:
         58:91:05:09:d2:64:f9:d9:f0:e8:53:20:00:56:08:cf:80:40:
         6e:0d:26:16:cb:45:bd:c2:72:e3:7a:9e:11:09:a8:82:0e:03:
         bd:dc:db:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:28:56 2025 by rpki-client