Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132302e302f32322d3234203d3e203533323336.roa
File:                     3137372e31302e3132302e302f32322d3234203d3e203533323336.roa (raw, json)
Hash identifier:          kqWsqN5EeNGR+mT1yNqDRseU5iZXMKQYn+8mtpzKRu0=
Subject key identifier:   6C:4C:C6:3F:44:FF:71:C1:DD:C7:55:1F:20:33:1A:05:90:2A:14:3F
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       1BFA88435F935A7D9FF1E905277B8BCDBD0A3611
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132302e302f32322d3234203d3e203533323336.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     53236
IP address blocks:        177.10.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fa:88:43:5f:93:5a:7d:9f:f1:e9:05:27:7b:8b:cd:bd:0a:36:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:2e:77:29:88:30:e5:79:e0:cd:cf:1e:f2:
                    9e:9b:e8:6d:9d:40:a4:50:46:a4:65:f1:31:11:08:
                    12:a4:55:4a:e5:55:e1:c8:a6:84:ac:dc:8d:4b:08:
                    33:76:af:82:2b:3b:26:b3:13:f4:a4:27:2c:6d:97:
                    72:cc:b1:e9:af:70:8d:89:29:5b:19:3a:e2:5e:4b:
                    a9:30:ff:8a:82:54:40:eb:d9:bf:e7:04:15:02:0d:
                    58:86:1f:dd:c9:f7:d2:cc:4d:94:46:98:3a:a9:7d:
                    fb:20:5e:f5:e7:f8:a5:79:35:78:f5:ca:6c:4c:63:
                    a6:6a:24:22:3e:55:e7:32:c2:ac:be:82:d8:a9:91:
                    fe:ce:13:d3:e0:8b:6e:1f:a2:40:f6:22:7e:68:0b:
                    50:c2:2c:d8:84:81:b1:08:b6:93:8d:85:f4:86:b7:
                    e7:d8:91:bb:5f:3f:8d:37:d0:1c:37:dc:a3:82:a6:
                    bb:5e:a7:61:40:f3:07:33:c4:e7:e4:66:fa:db:71:
                    b0:2f:40:09:6d:1f:db:bc:60:e9:f9:61:27:8c:e5:
                    68:7d:9e:5f:5e:2a:55:95:b7:40:ed:b0:c6:93:9f:
                    5b:b3:db:58:75:99:2d:42:ef:23:df:2d:9c:82:08:
                    0a:c1:a2:2e:99:f5:62:16:c8:9e:e0:46:14:31:1a:
                    59:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4C:C6:3F:44:FF:71:C1:DD:C7:55:1F:20:33:1A:05:90:2A:14:3F
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132302e302f32322d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:c7:b5:97:e9:b0:29:6c:f2:dd:d4:0d:0b:54:42:d0:55:45:
         61:6d:7a:ab:d0:0b:d6:ca:47:7a:c4:76:94:48:19:ae:12:aa:
         22:c0:9a:c6:d5:ee:08:09:ad:bb:95:77:80:e8:52:f5:da:60:
         fa:ac:bd:cb:c2:78:dd:a2:18:08:51:c5:ab:de:2c:a0:93:bf:
         5e:49:dd:d7:77:81:cc:d2:33:0f:9f:9b:67:dc:da:90:da:f8:
         eb:5a:4c:3f:d1:7f:a5:35:03:f1:bc:d0:8b:bf:12:d1:f7:f3:
         2e:a2:cb:d1:f7:a7:19:9c:ab:bf:13:8d:39:0b:19:fc:42:fd:
         2d:ef:5f:c0:cf:f6:92:5a:e1:40:f2:51:5d:7d:c3:a8:1b:f0:
         81:37:9c:5a:51:e6:d4:f3:07:bc:02:63:07:e8:59:e3:80:f5:
         9b:8d:ba:3f:b9:04:64:cc:ca:79:c2:df:10:04:4e:ff:6e:f5:
         1c:af:cb:be:96:48:24:9a:fa:2b:c3:7a:5a:88:9e:d2:f8:3a:
         cb:43:a1:1d:35:cc:5a:d1:38:46:a1:91:a5:88:d2:2e:bc:42:
         bd:f9:9a:fd:e0:9c:c7:b6:6e:d9:e0:80:bf:5b:d3:07:e7:74:
         bf:66:a4:b5:89:f2:06:1b:16:12:9e:aa:34:cd:3b:db:f6:40:
         c2:4c:0c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:24:04 2025 by rpki-client