Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa
File:                     3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa (raw, json)
Hash identifier:          0dhk37mqsQsgYkCv7Wz8xXOQ4NaJjIpODf080nO6+uM=
Subject key identifier:   5F:35:E7:44:6D:D5:F7:3C:42:01:E4:7E:7B:9C:7C:21:5D:45:C5:AD
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       2C57E75FDDC9DF14A32CF64A422379A63EF5697F
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa
Signing time:             Thu 06 Mar 2025 08:50:08 +0000
ROA not before:           Thu 06 Mar 2025 08:45:08 +0000
ROA not after:            Thu 05 Mar 2026 08:50:08 +0000
asID:                     266514
IP address blocks:        170.244.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:57:e7:5f:dd:c9:df:14:a3:2c:f6:4a:42:23:79:a6:3e:f5:69:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Mar  6 08:45:08 2025 GMT
            Not After : Mar  5 08:50:08 2026 GMT
        Subject: CN=5F35E7446DD5F73C4201E47E7B9C7C215D45C5AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c8:73:c1:09:bc:b4:47:19:6b:5e:e1:bc:6e:
                    5a:ea:03:73:5c:42:51:9a:d8:76:d9:8c:99:93:63:
                    61:96:76:ee:96:b7:bf:d4:b4:eb:69:eb:33:05:ef:
                    06:68:92:b3:8f:fe:5a:bb:41:57:e8:63:60:7f:c1:
                    15:46:de:03:6c:84:a8:c8:3c:74:df:f0:82:8c:65:
                    7b:c7:95:c6:c1:33:38:6c:f9:1d:75:51:c3:7c:4e:
                    65:86:14:83:0d:d5:7d:01:8f:f2:9f:60:09:9e:d7:
                    ed:9c:3b:c7:c9:bd:bf:46:9d:af:b3:6d:f5:4a:e9:
                    8c:4d:da:4e:06:74:bd:a4:3d:50:33:6d:92:c8:94:
                    7c:9a:30:51:36:ac:85:80:4e:5c:1e:e8:61:8d:44:
                    9a:ac:f1:3f:4d:44:24:6a:67:06:95:d2:3e:f5:ee:
                    95:5f:61:12:03:e1:59:ab:2e:54:cc:ac:c8:0f:fb:
                    ea:6d:1b:a2:27:0c:f6:26:4a:7e:38:e8:f5:20:a6:
                    70:f7:f3:90:70:89:05:88:0c:19:92:cb:f4:2e:b5:
                    87:b9:c9:36:94:19:36:21:79:6d:47:95:99:47:ef:
                    f9:0a:08:35:92:55:27:ca:d5:9f:8f:48:67:30:54:
                    a1:9c:80:d4:c2:70:00:4d:d2:e7:6d:f8:24:6b:c6:
                    3c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:35:E7:44:6D:D5:F7:3C:42:01:E4:7E:7B:9C:7C:21:5D:45:C5:AD
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:c0:b4:ac:a6:b9:84:47:5d:a7:d1:ea:0d:ba:3a:a7:3c:91:
         9a:fd:3b:85:24:26:90:2e:31:ad:84:ca:f1:3a:b2:30:a7:3c:
         6d:16:66:4e:9f:22:88:81:b3:78:d1:9d:ef:df:71:50:85:f3:
         13:d4:44:f8:d5:20:f1:33:32:a4:e5:12:1d:6b:b7:32:29:62:
         4d:69:91:f1:1b:dd:aa:98:5d:c6:15:44:0a:7e:46:29:ef:5c:
         f0:56:6c:fd:8a:a3:50:26:80:69:5a:c1:c1:82:11:6e:dd:b5:
         1b:e5:18:ab:58:21:01:fb:0c:40:6d:95:a1:25:f1:5b:7e:f7:
         be:dc:85:f2:c4:31:3b:74:33:2f:11:6c:df:01:0d:7f:6f:19:
         50:f9:f0:81:85:66:5b:ea:0a:bc:5a:3c:7b:5a:bc:22:4d:32:
         1d:ef:b3:7c:99:b5:dc:5b:5f:58:72:1c:8a:37:57:bf:d6:17:
         b0:b5:04:f5:69:36:a0:6a:56:b6:8c:c5:22:0f:29:af:46:3e:
         22:e5:43:e0:45:d4:76:1c:93:07:23:26:c3:8b:c4:ef:b0:f7:
         fc:f2:02:fa:ac:d3:88:93:f2:d9:4d:5f:db:57:64:80:c8:48:
         57:0c:34:f3:ec:6a:b4:de:c4:e4:fd:a0:fc:b2:d4:51:a9:b3:
         4e:61:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:02:34 2025 by rpki-client