Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34332e302f32342d3234203d3e20323633363239.roa
File:                     3137302e302e34332e302f32342d3234203d3e20323633363239.roa (raw, json)
Hash identifier:          GPvv7mxTYimxc3RUCP9olkQIz6ZZXHHsNocB06PyVzw=
Subject key identifier:   65:9D:EC:8A:2B:B2:7B:50:3A:B5:9E:4B:35:91:29:FB:76:14:55:37
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       5449642C3D60EEFA4A902E743DC26AC8D77E6C1F
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34332e302f32342d3234203d3e20323633363239.roa
Signing time:             Mon 17 Mar 2025 17:57:26 +0000
ROA not before:           Mon 17 Mar 2025 17:52:26 +0000
ROA not after:            Mon 16 Mar 2026 17:57:26 +0000
asID:                     263629
IP address blocks:        170.0.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 09:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:49:64:2c:3d:60:ee:fa:4a:90:2e:74:3d:c2:6a:c8:d7:7e:6c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Mar 17 17:52:26 2025 GMT
            Not After : Mar 16 17:57:26 2026 GMT
        Subject: CN=659DEC8A2BB27B503AB59E4B359129FB76145537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:b3:c2:02:ad:21:04:90:6e:9b:89:47:7e:
                    23:0b:10:65:a3:e8:2b:e7:c2:75:dc:57:a9:64:ff:
                    ea:5a:b1:e4:0e:cd:43:41:d7:00:db:6a:96:62:49:
                    3c:46:5f:ea:27:08:d2:1c:df:48:f2:a9:0a:f4:5d:
                    19:fc:68:6c:b0:06:be:79:08:37:70:3c:92:ee:6a:
                    52:b2:c9:5b:42:08:ef:1b:41:0a:25:28:3e:56:6b:
                    96:34:4b:56:6c:5a:c7:64:ea:61:e0:84:ef:bc:ea:
                    cb:3b:ec:68:10:f1:0f:02:e2:b1:8f:5c:28:b7:83:
                    59:8a:01:84:99:32:0a:86:01:5b:85:59:81:2e:6c:
                    5c:48:9d:c1:82:29:f6:1c:cd:c8:b3:04:c9:43:e2:
                    b9:67:1c:92:c2:3d:2d:39:55:7e:45:39:fe:0d:0e:
                    92:56:0f:47:3f:d7:93:85:8c:d2:0c:5f:14:15:45:
                    25:0d:55:43:22:9f:ac:55:62:3c:19:c7:99:0c:03:
                    53:32:92:d1:fc:40:37:52:1a:c4:48:1e:e2:91:a8:
                    18:d1:d5:8f:07:3a:02:23:4f:dc:5a:02:d2:4a:12:
                    3b:76:1c:46:4d:a1:48:aa:5b:bc:5a:7d:00:e7:a3:
                    27:f1:4e:65:e1:dc:b5:c4:e0:2c:3d:91:b9:5d:39:
                    e8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9D:EC:8A:2B:B2:7B:50:3A:B5:9E:4B:35:91:29:FB:76:14:55:37
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34332e302f32342d3234203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ff:33:53:b9:97:67:62:4f:d4:bc:0f:7b:e7:8f:09:24:c6:
         c8:02:a1:7b:54:e8:1e:fb:a4:83:55:46:1a:bc:de:4e:dd:0b:
         2f:72:9f:dd:71:a2:de:c3:e4:ea:97:ca:bb:31:c0:c9:b8:c2:
         05:65:e3:e0:26:91:d4:0e:46:e1:ca:85:d6:2e:3d:ea:56:c7:
         6f:ac:96:97:8f:9c:6a:18:8c:f5:66:ab:b6:30:96:8b:47:54:
         92:ab:64:6f:35:9b:ce:0c:08:fc:ee:66:4f:37:4d:c0:33:c3:
         c3:28:e9:49:b5:f4:03:82:77:74:29:41:3d:b3:c4:8c:6b:7f:
         87:c9:06:35:7d:26:b4:dd:36:fd:73:cd:4e:bd:8c:78:c5:0e:
         0b:0a:0a:59:46:0a:bf:f4:eb:52:6d:b2:ce:98:a0:35:2e:0f:
         03:fb:5b:f9:74:1d:18:d8:fa:40:38:7a:cd:86:e2:b5:51:07:
         f7:31:9b:c8:ad:5c:9f:15:9e:42:90:25:42:11:ae:ea:4f:9f:
         07:24:67:3f:4f:68:a2:b0:a5:a5:d6:6a:26:8b:66:3d:f0:5a:
         f0:56:e7:8c:0c:94:51:25:fa:61:36:d4:ca:d7:d4:96:1b:1e:
         de:98:2a:f5:e8:36:a4:cc:9e:ec:bb:0e:c1:6d:56:9c:86:54:
         d1:39:04:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:37:21 2025 by rpki-client