Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230352e302f32342d3234203d3e203533323336.roa
File:                     3137302e38332e3230352e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          dv6xP+1mTzRgiN5pMZOry4fxcK+azpCCsM6QIEWvCLc=
Subject key identifier:   73:D8:F9:9D:12:6F:BD:D3:CB:96:E6:79:67:67:8B:C9:D0:93:0F:C6
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       339E87C039D095A9F853854BF70E9DD8E76D6388
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230352e302f32342d3234203d3e203533323336.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     53236
IP address blocks:        170.83.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9e:87:c0:39:d0:95:a9:f8:53:85:4b:f7:0e:9d:d8:e7:6d:63:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=3082010A0282010100C37BB9CDBA0BEFE03773E106DE1A121725CF73F3E86554ACF1C0F51A1B38A80990901CAA9711A99613E3C5BA74EAD40616D1094FADCF1F79980FCF9F4F537DB578D7588BAD61BE26E981CD13304C646234914CC8D7059F72EC1E0028F06B5C83CD6E66F1565B5C11D416A122A9118C6B369CF368512B944C0119D6745C2A124F23F399418C669A2CDB9EA46BDE0364CE7D559D738648745D1F1E0D5228A23E633AFA3855FF55F537BB129BD9AE7BA5E4C4CBDFDA363C094741C076AC99AA1F85405D39A64495F7B94F1794BD8FC82D7EBC8DB39B3C2E7DC1F875DF5194E760ADD6577C581234257C78E3400BE48506FC04BE876D59B4B319045D878DA88D1FC90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:b9:cd:ba:0b:ef:e0:37:73:e1:06:de:1a:
                    12:17:25:cf:73:f3:e8:65:54:ac:f1:c0:f5:1a:1b:
                    38:a8:09:90:90:1c:aa:97:11:a9:96:13:e3:c5:ba:
                    74:ea:d4:06:16:d1:09:4f:ad:cf:1f:79:98:0f:cf:
                    9f:4f:53:7d:b5:78:d7:58:8b:ad:61:be:26:e9:81:
                    cd:13:30:4c:64:62:34:91:4c:c8:d7:05:9f:72:ec:
                    1e:00:28:f0:6b:5c:83:cd:6e:66:f1:56:5b:5c:11:
                    d4:16:a1:22:a9:11:8c:6b:36:9c:f3:68:51:2b:94:
                    4c:01:19:d6:74:5c:2a:12:4f:23:f3:99:41:8c:66:
                    9a:2c:db:9e:a4:6b:de:03:64:ce:7d:55:9d:73:86:
                    48:74:5d:1f:1e:0d:52:28:a2:3e:63:3a:fa:38:55:
                    ff:55:f5:37:bb:12:9b:d9:ae:7b:a5:e4:c4:cb:df:
                    da:36:3c:09:47:41:c0:76:ac:99:aa:1f:85:40:5d:
                    39:a6:44:95:f7:b9:4f:17:94:bd:8f:c8:2d:7e:bc:
                    8d:b3:9b:3c:2e:7d:c1:f8:75:df:51:94:e7:60:ad:
                    d6:57:7c:58:12:34:25:7c:78:e3:40:0b:e4:85:06:
                    fc:04:be:87:6d:59:b4:b3:19:04:5d:87:8d:a8:8d:
                    1f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D8:F9:9D:12:6F:BD:D3:CB:96:E6:79:67:67:8B:C9:D0:93:0F:C6
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230352e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:4b:cc:0b:7c:1a:20:b8:2d:d9:af:69:e6:e2:19:bf:b1:dd:
         32:06:81:be:01:ec:c5:af:51:db:06:5e:fa:b5:49:24:d1:b1:
         c4:53:fb:a2:9e:a1:7d:a6:55:cc:74:ed:11:2b:3c:38:ba:f1:
         94:ae:59:90:43:44:8f:02:6a:ee:25:5e:af:e7:eb:16:35:c3:
         0f:c4:fb:87:16:98:63:d8:16:33:7e:7c:fb:54:74:98:91:40:
         19:5b:03:88:39:1c:c1:7a:b4:f5:41:af:21:2b:91:7d:d9:f3:
         a8:fa:ff:07:30:4c:06:66:29:47:1d:c3:70:50:86:2c:9e:20:
         d4:bf:b8:89:36:3a:94:b2:4a:80:a8:05:5b:e7:a6:db:bb:04:
         5c:2d:62:a9:77:85:be:5d:05:90:bd:04:3b:40:46:0c:ef:e5:
         3f:22:3a:81:37:cf:f6:f2:b8:d8:76:f6:65:85:d3:50:f0:22:
         99:42:6d:3b:54:58:8b:5f:26:c7:0e:ac:dd:ac:a5:81:b7:6b:
         11:97:c6:45:21:91:9f:94:eb:98:b5:c4:2d:50:3c:a7:f5:87:
         66:88:8e:cb:58:7b:1c:58:de:4d:8e:0d:2c:22:81:93:f2:10:
         06:81:aa:16:00:05:6b:5a:21:b4:de:a6:73:36:96:3a:bf:e6:
         37:52:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:31:57 2025 by rpki-client