Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230372e302f32342d3234203d3e203533323336.roa
File:                     3137302e38332e3230372e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          KKlAgxPpZ07buBjuW+miq4o52zkhhezA7wpwSfcIFOA=
Subject key identifier:   58:DB:19:E8:3A:55:3F:7A:95:B6:FC:16:CA:D2:D9:53:DD:3C:76:7C
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       062C328096A64618644BA32468897E1E529C0A59
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230372e302f32342d3234203d3e203533323336.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     53236
IP address blocks:        170.83.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2c:32:80:96:a6:46:18:64:4b:a3:24:68:89:7e:1e:52:9c:0a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:0f:03:58:ad:7e:62:d0:69:74:75:c5:69:
                    c9:af:13:f3:0b:a4:1d:87:5f:9b:01:f3:c1:1f:21:
                    98:c2:5c:af:49:54:b9:ce:79:66:db:2a:87:1d:35:
                    80:e3:6d:4d:ba:c6:7f:c0:62:ff:46:58:fd:06:bd:
                    87:6a:5b:82:55:a7:1b:3d:ce:97:26:a6:e8:7d:87:
                    ff:0b:36:00:31:87:00:38:a1:6b:6b:1a:f3:83:47:
                    05:be:f6:e0:27:46:82:09:d4:db:c9:ee:4b:ff:e2:
                    23:86:f5:17:37:a6:70:65:a7:d4:68:f5:a4:47:71:
                    0d:4f:73:55:2f:e8:a2:6e:06:25:a7:9b:be:e7:46:
                    b3:f6:49:d1:98:32:58:93:43:ce:72:1e:0a:b3:b5:
                    a6:3d:d0:7a:5b:ef:d7:d6:d3:ca:b0:b3:53:b8:6e:
                    ad:36:48:05:5d:9a:b0:fc:aa:36:7d:4b:42:59:7b:
                    c7:f0:d1:e9:9d:07:96:6a:84:47:dc:1e:10:b6:3f:
                    75:fc:29:27:34:86:18:18:be:c6:f6:25:e3:5f:8d:
                    64:d8:8d:21:bb:79:67:c3:8d:69:9a:13:a6:62:af:
                    a9:27:b3:c0:4c:10:a2:0b:96:e2:de:01:a1:56:7d:
                    41:4e:c3:44:66:e9:81:f6:86:51:26:4b:9a:08:8a:
                    7a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DB:19:E8:3A:55:3F:7A:95:B6:FC:16:CA:D2:D9:53:DD:3C:76:7C
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230372e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:3e:43:bd:d6:12:a6:41:23:19:67:56:77:15:cd:cb:6d:8f:
         4b:50:fb:d4:f4:52:87:0c:d1:81:26:21:a8:23:bd:e8:8f:12:
         cf:9e:3a:44:88:40:c1:14:fe:84:07:79:e2:a1:f4:b2:f6:80:
         e0:c5:96:48:12:a3:09:c9:5b:ab:9e:fd:ba:14:03:d4:d5:8d:
         f6:2c:33:3e:fc:e5:98:55:18:81:b7:45:78:79:d0:0f:ee:23:
         8b:20:e7:e0:6a:b2:d9:bd:df:6e:4d:e5:8a:c8:95:eb:95:2c:
         23:69:4c:95:a7:bf:7c:56:48:22:9b:ab:e9:15:de:e0:31:c5:
         86:20:94:b2:4a:d2:55:49:2f:c7:22:9f:ee:d3:fa:bc:bd:46:
         dd:80:85:62:74:53:91:e9:ad:3e:9e:17:0c:d4:ff:18:40:a1:
         9d:4b:38:ca:ed:9d:65:3d:59:d9:32:84:20:47:63:b7:be:c4:
         00:ff:57:73:70:d7:1b:7e:84:95:6f:4f:ff:bb:71:cb:c7:72:
         f0:07:90:21:0b:29:47:63:52:90:3a:fe:56:08:a2:b4:08:c6:
         f4:89:a9:d7:f1:86:fb:fe:02:d0:0c:a5:83:e1:a8:c6:41:ae:
         f0:04:5e:95:9f:1d:fd:40:80:c5:36:48:88:e3:97:d2:4e:48:
         3c:c5:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:32:09 2025 by rpki-client