Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230342e302f32322d3234203d3e203533323336.roa
File:                     3137302e38332e3230342e302f32322d3234203d3e203533323336.roa (raw, json)
Hash identifier:          OYfQuO3Msp2gRhwNtumHzYc7M1inQa9JLUyr8yeXWTU=
Subject key identifier:   8C:73:72:AE:AA:02:32:A6:5D:1E:7A:F3:5C:1E:FB:47:A6:29:0A:5B
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       1471CE1E20901D4A05F892CB49510E678B5C0629
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230342e302f32322d3234203d3e203533323336.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     53236
IP address blocks:        170.83.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:71:ce:1e:20:90:1d:4a:05:f8:92:cb:49:51:0e:67:8b:5c:06:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4a:ca:71:c0:7f:a1:40:9e:4c:7d:cb:42:5a:
                    28:35:fa:36:7e:54:c2:f0:37:c3:4d:ee:b7:d3:39:
                    a8:56:35:e8:11:b2:1d:0a:df:4f:a7:53:76:99:59:
                    48:e7:1a:6e:ba:1d:7a:f4:f3:52:0c:22:ee:e4:11:
                    30:d3:b2:48:46:6d:60:90:ef:b9:39:07:86:06:3a:
                    48:7d:94:ff:40:bb:f9:e1:72:6c:32:c1:5b:0a:70:
                    35:54:3a:da:aa:48:2a:91:07:10:4c:29:9e:54:b8:
                    ae:35:61:78:ea:6a:a6:81:20:10:ec:91:19:0b:64:
                    7a:e2:2f:b1:fc:a4:6f:30:34:79:05:8f:c4:a3:4c:
                    29:b7:da:60:2c:5e:c8:e5:21:2c:b3:d4:a0:7a:a3:
                    99:0d:d9:46:d2:da:98:52:4d:b9:61:44:b6:65:dc:
                    d7:15:dd:4f:9d:e1:6d:d9:0b:91:65:d8:73:d8:e8:
                    90:33:ed:9b:6c:c1:cf:c1:3d:05:2b:cd:be:60:38:
                    55:26:55:ab:64:fc:a5:73:73:bb:72:c5:bd:35:6e:
                    09:4d:f5:f0:21:1e:29:e1:84:6a:f8:be:c6:09:31:
                    29:7d:d7:50:47:60:f3:fb:dc:af:fc:f6:7e:45:1a:
                    d5:0b:3b:5e:ce:be:bd:1b:c5:a7:af:d3:3d:67:2a:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:73:72:AE:AA:02:32:A6:5D:1E:7A:F3:5C:1E:FB:47:A6:29:0A:5B
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230342e302f32322d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:96:c7:26:6e:ea:c7:52:ea:fa:24:46:f6:42:7c:13:d5:41:
         cb:0f:6c:a4:16:e0:ba:07:6f:07:09:5b:03:9b:66:41:64:35:
         2d:2f:b5:bc:0f:26:c5:aa:2f:43:84:96:cd:eb:fe:7c:60:35:
         d9:1e:6f:4f:da:10:a6:96:29:fc:c6:1f:f9:47:03:3f:00:e8:
         f7:f2:1d:33:f8:e3:f5:96:b9:4d:25:6f:ff:9e:4e:3f:6a:ef:
         eb:40:a2:c6:a6:b5:d4:6c:7b:4b:32:ab:ff:d7:15:ba:2c:59:
         71:d2:30:25:0d:64:d7:a1:ee:9a:97:d5:22:5d:73:01:85:ab:
         a0:49:7a:2b:ac:1f:b6:b2:30:ae:a9:c6:b8:70:7d:f7:73:2e:
         07:c9:90:e0:03:a8:2b:ad:2b:bd:70:4b:f5:fb:3d:2e:81:eb:
         2c:6f:ad:7a:d3:54:ee:b2:df:0f:cd:e5:20:26:41:c2:f9:c6:
         0c:0e:43:aa:b7:4e:cb:52:78:54:5c:11:fc:0a:81:fc:a4:dc:
         b5:4f:fa:fa:94:14:e8:e8:8f:6d:3c:34:3e:80:0c:24:33:0c:
         51:2e:10:4b:92:23:86:93:4a:1f:e7:f8:77:14:49:e8:c1:24:
         9d:2a:91:25:ec:21:31:36:db:fb:80:1e:97:69:b1:e8:f3:d7:
         94:2f:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:26:23 2025 by rpki-client