Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233352e302f32342d3234203d3e20323636353134.roa
File:                     3137302e3234342e3233352e302f32342d3234203d3e20323636353134.roa (raw, json)
Hash identifier:          NhUsr7Is90mgZVtnaN1XFFFPS/U58jXbjRxC6qmoPVE=
Subject key identifier:   9A:B1:4D:49:3A:A6:58:14:44:04:5A:4D:6E:4D:63:A2:25:B3:36:13
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       49348550578031669C653217144C1DC7A6B1FD87
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233352e302f32342d3234203d3e20323636353134.roa
Signing time:             Thu 06 Mar 2025 08:50:07 +0000
ROA not before:           Thu 06 Mar 2025 08:45:07 +0000
ROA not after:            Thu 05 Mar 2026 08:50:07 +0000
asID:                     266514
IP address blocks:        170.244.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:34:85:50:57:80:31:66:9c:65:32:17:14:4c:1d:c7:a6:b1:fd:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Mar  6 08:45:07 2025 GMT
            Not After : Mar  5 08:50:07 2026 GMT
        Subject: CN=9AB14D493AA6581444045A4D6E4D63A225B33613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:61:59:58:71:ac:2b:56:a7:49:ec:34:4f:dd:
                    e9:90:16:90:34:54:19:05:8e:79:37:89:a5:2b:2d:
                    ba:e6:de:2e:13:c4:36:0e:41:d7:07:df:4e:04:39:
                    a7:5d:b0:44:b5:dc:a0:e8:bf:83:f6:22:65:d0:12:
                    57:c0:1a:16:db:e0:a7:1c:ed:bd:00:bf:84:6d:a1:
                    bb:63:75:34:a6:d7:55:db:bd:d7:7e:d0:00:da:bc:
                    f9:23:a7:d4:6f:e6:a2:fe:56:55:32:2d:eb:b1:4a:
                    61:b4:ea:f7:96:8b:77:2c:1d:4b:26:c4:59:33:48:
                    28:8d:59:03:60:26:fd:8a:f3:8d:4a:a2:4c:da:ab:
                    2f:8a:23:a1:93:1a:dc:e4:5e:96:ef:b8:2a:99:85:
                    ba:53:92:48:44:64:eb:c9:6e:e3:92:96:6f:98:a4:
                    3e:c7:9a:48:1b:08:0e:39:c0:a3:dd:f0:ca:1d:53:
                    a8:80:bb:5a:d6:f9:8d:b9:0a:0d:3f:56:71:eb:14:
                    20:3f:be:b6:9f:10:7b:17:98:fb:1e:14:f5:93:00:
                    3e:92:d4:f9:1f:b3:7e:5d:d5:e3:3f:dc:70:ea:77:
                    37:ee:a7:ac:1d:b9:42:29:8c:cf:60:ca:8c:dc:3a:
                    ac:79:ef:bb:4f:52:4d:c8:b2:01:e3:d1:1e:4e:5d:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B1:4D:49:3A:A6:58:14:44:04:5A:4D:6E:4D:63:A2:25:B3:36:13
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233352e302f32342d3234203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:5f:67:45:5c:56:c7:b1:66:b2:7d:7c:f7:b4:4a:b7:90:af:
         10:4c:25:1f:0d:19:af:7d:8d:a1:08:15:fa:4b:33:6e:10:65:
         dc:26:63:21:68:5a:e1:fc:d6:7e:e3:2d:c3:e0:92:d9:6c:d2:
         ca:49:e5:b8:97:a4:21:03:a5:79:ce:71:76:cc:05:e0:a0:16:
         22:33:59:a4:84:aa:1b:13:d1:fa:23:68:56:72:3f:d3:37:98:
         af:21:81:ae:5c:56:fd:15:9a:a8:dc:1a:1d:a0:e1:2c:9d:98:
         f7:ad:c4:5b:95:c2:6d:6b:cf:1a:9c:46:6a:d4:ee:17:ab:3b:
         e6:50:de:78:17:22:d8:a7:de:a9:ab:59:5b:70:44:63:6b:ba:
         99:30:88:82:18:10:16:60:ce:25:fd:be:5d:22:19:5a:2b:11:
         96:c6:aa:22:5d:9b:b9:b3:39:96:7e:c6:5e:e6:22:bc:74:58:
         e2:88:13:59:2d:e4:17:b4:10:f6:84:1d:79:d2:f1:92:70:62:
         8c:2d:05:1b:71:37:62:3e:42:7f:57:95:d2:5f:77:14:14:cb:
         01:d8:9f:d8:16:44:a7:cb:00:5a:0a:1c:11:37:8a:16:fb:5f:
         ed:4c:ec:47:dc:93:a4:69:24:92:5d:e0:e5:fb:d0:41:30:77:
         fc:87:48:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:02:31 2025 by rpki-client