Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/3136372e3234392e38302e302f32332d3233203d3e20323635313639.roa
File:                     3136372e3234392e38302e302f32332d3233203d3e20323635313639.roa (raw, json)
Hash identifier:          7c/Lyk/0BQls8psILSHHnmqPvUZgccpyMalwitG9BXg=
Subject key identifier:   F2:CB:7F:CD:AF:04:D2:5A:03:73:58:82:85:8E:1D:B3:89:9D:EA:AE
Certificate issuer:       /CN=E63A041BE4EC9A73C342C10EECB20754B5BD248D
Certificate serial:       7EA5D628B51BDE38A7482C86AB1E10E7BC83E40A
Authority key identifier: E6:3A:04:1B:E4:EC:9A:73:C3:42:C1:0E:EC:B2:07:54:B5:BD:24:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/3136372e3234392e38302e302f32332d3233203d3e20323635313639.roa
Signing time:             Thu 06 Mar 2025 01:11:44 +0000
ROA not before:           Thu 06 Mar 2025 01:06:44 +0000
ROA not after:            Thu 05 Mar 2026 01:11:44 +0000
asID:                     265169
IP address blocks:        167.249.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.crl
                          rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 15:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a5:d6:28:b5:1b:de:38:a7:48:2c:86:ab:1e:10:e7:bc:83:e4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A041BE4EC9A73C342C10EECB20754B5BD248D
        Validity
            Not Before: Mar  6 01:06:44 2025 GMT
            Not After : Mar  5 01:11:44 2026 GMT
        Subject: CN=F2CB7FCDAF04D25A03735882858E1DB3899DEAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:88:51:46:89:3a:61:df:b7:d6:db:9f:e6:4d:
                    69:5e:76:d1:b8:39:2a:6a:28:f6:5f:5e:0c:76:46:
                    fb:15:72:f9:ae:88:84:d1:b9:fa:c1:12:b7:5d:68:
                    a0:04:6d:0c:31:7a:55:7f:2d:e3:22:8f:bd:9b:ef:
                    85:52:ed:99:90:a2:0c:72:b4:95:d6:4c:bc:ea:53:
                    36:95:3b:dc:f0:bf:15:c8:2c:be:e8:b4:9a:25:10:
                    58:06:51:ce:ca:2b:41:21:89:9b:6f:2a:ac:60:9f:
                    0b:ec:7c:02:0a:d8:9f:a8:96:89:9a:d2:96:dd:aa:
                    09:77:28:d4:51:22:7d:a4:12:9c:4b:8b:67:04:44:
                    4c:30:2a:40:0a:0d:1b:0f:9f:79:6f:91:5a:98:98:
                    45:ec:1d:75:d7:bc:14:3e:9d:7f:05:8b:57:21:ee:
                    94:6a:14:f6:af:8f:d1:de:35:c3:fe:87:29:99:1f:
                    db:b3:8e:ef:04:09:cc:2a:32:4b:07:ab:18:26:04:
                    fc:c8:64:8f:d7:15:fc:69:c6:ef:6d:84:bd:88:93:
                    c4:90:22:dc:a5:5e:b1:93:f5:15:b4:92:b8:31:6f:
                    c7:51:f3:08:a6:03:f1:58:c4:b9:63:00:34:37:30:
                    4e:ee:a9:f8:26:70:8f:c7:e9:2e:1f:ba:d3:58:5d:
                    7f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CB:7F:CD:AF:04:D2:5A:03:73:58:82:85:8E:1D:B3:89:9D:EA:AE
            X509v3 Authority Key Identifier:
                keyid:E6:3A:04:1B:E4:EC:9A:73:C3:42:C1:0E:EC:B2:07:54:B5:BD:24:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/3136372e3234392e38302e302f32332d3233203d3e20323635313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:a3:d4:5e:16:99:a4:00:2f:59:04:e1:88:0d:c0:d4:57:85:
         86:0c:fa:69:ed:1f:8b:06:e1:10:db:ed:70:26:e7:59:63:f4:
         7d:1f:9e:dd:2e:63:ba:ed:99:d3:7c:f2:88:24:47:73:b9:39:
         d5:83:35:24:3f:71:ff:ba:7f:87:f0:bb:89:69:a0:8e:87:5b:
         ef:d6:8d:8b:3c:7d:97:b7:50:de:6e:6f:8e:75:68:60:4d:5f:
         3d:9d:d1:e4:f0:aa:a0:8b:63:aa:58:6a:66:50:a0:fb:2c:98:
         9c:88:9c:da:17:44:29:0d:8c:27:9f:0e:01:f0:cd:d3:6c:89:
         6f:65:fd:ba:75:77:ea:b4:c3:b9:51:de:f8:07:4b:1e:62:73:
         4d:19:14:1c:23:de:66:33:ef:92:a1:1f:1f:04:0e:76:b5:43:
         56:cd:72:c0:bc:81:04:33:d7:43:3b:03:c8:e4:f4:bc:b0:65:
         37:e2:65:6d:f1:64:47:65:e8:4a:55:a1:a8:f4:f1:1c:3c:8a:
         a3:eb:f8:75:7d:25:13:cf:1b:29:8d:7d:0d:1e:b9:41:d1:bd:
         2e:91:e9:ab:e3:e1:fe:52:38:ed:8a:12:c8:bb:31:ac:86:31:
         21:d4:1a:da:d8:11:b2:9f:39:db:d2:5d:f5:87:77:99:47:3d:
         c7:09:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:56 2025 by rpki-client