Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137302e38312e38382e302f32322d3234203d3e203532363337.roa
File:                     3137302e38312e38382e302f32322d3234203d3e203532363337.roa (raw, json)
Hash identifier:          uD3/cdgK0gipxf+KAsBxd5wDpRyCNsrUJVbxauP9+EY=
Subject key identifier:   8D:4D:4C:14:DE:C9:04:4A:17:AE:BA:E2:50:29:6C:24:B3:D1:D5:68
Certificate issuer:       /CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
Certificate serial:       0A80DB508B15011E3D4842EE5E9FE082D3CBBF73
Authority key identifier: BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137302e38312e38382e302f32322d3234203d3e203532363337.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     52637
IP address blocks:        170.81.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl
                          rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:80:db:50:8b:15:01:1e:3d:48:42:ee:5e:9f:e0:82:d3:cb:bf:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=3082010A0282010100E86496FB4EA89D53BBC2DB80946C115B2A35DC488C759E9DF247C8031644EA79598C2266D9779FA3BB1C8F3E1B6604540DBB7E87221C2A01CB74C5E09D8062ACADA66E30117B38532529B2C2CEA5D48E7FDFF3DACA2A46C16478A8AD2C99CF3D71FF3727ABF14A0A5412CCEBBA352F8A9EFB6A7445CBB823B684E0E84727A19E1F3396BED5AA554F64A7D4443F4C8BDB7B15E7F666270689CA7AB3CF64444188203FEDEDB98C2531BA058490135182D6FD51DD584142FE8028DF45446A6F53C428D397964CB77FCA84A4DC6D02C154428152C783114F426A27DC9A69FBDE114C69798986DD9823A036673D1A65CFD25D63C31F1E9B26EBE57F542D0B5291CBFD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:64:96:fb:4e:a8:9d:53:bb:c2:db:80:94:6c:
                    11:5b:2a:35:dc:48:8c:75:9e:9d:f2:47:c8:03:16:
                    44:ea:79:59:8c:22:66:d9:77:9f:a3:bb:1c:8f:3e:
                    1b:66:04:54:0d:bb:7e:87:22:1c:2a:01:cb:74:c5:
                    e0:9d:80:62:ac:ad:a6:6e:30:11:7b:38:53:25:29:
                    b2:c2:ce:a5:d4:8e:7f:df:f3:da:ca:2a:46:c1:64:
                    78:a8:ad:2c:99:cf:3d:71:ff:37:27:ab:f1:4a:0a:
                    54:12:cc:eb:ba:35:2f:8a:9e:fb:6a:74:45:cb:b8:
                    23:b6:84:e0:e8:47:27:a1:9e:1f:33:96:be:d5:aa:
                    55:4f:64:a7:d4:44:3f:4c:8b:db:7b:15:e7:f6:66:
                    27:06:89:ca:7a:b3:cf:64:44:41:88:20:3f:ed:ed:
                    b9:8c:25:31:ba:05:84:90:13:51:82:d6:fd:51:dd:
                    58:41:42:fe:80:28:df:45:44:6a:6f:53:c4:28:d3:
                    97:96:4c:b7:7f:ca:84:a4:dc:6d:02:c1:54:42:81:
                    52:c7:83:11:4f:42:6a:27:dc:9a:69:fb:de:11:4c:
                    69:79:89:86:dd:98:23:a0:36:67:3d:1a:65:cf:d2:
                    5d:63:c3:1f:1e:9b:26:eb:e5:7f:54:2d:0b:52:91:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4D:4C:14:DE:C9:04:4A:17:AE:BA:E2:50:29:6C:24:B3:D1:D5:68
            X509v3 Authority Key Identifier:
                keyid:BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137302e38312e38382e302f32322d3234203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:9e:9b:71:8b:2a:d9:8f:97:04:3d:3c:45:3a:e8:8e:96:95:
         68:47:3f:73:57:f4:bf:2f:ca:8a:06:4e:39:0a:d0:64:14:7f:
         12:2d:21:4d:1b:47:1d:ec:44:79:94:b9:91:f9:14:ac:22:58:
         b2:f5:27:50:c6:93:6a:c2:fa:f2:9c:b0:83:7a:83:a0:09:a2:
         47:a3:8b:73:59:b6:4c:30:5a:00:ce:cc:ea:85:ee:a4:e1:8c:
         5c:8f:e1:98:ba:99:ff:3e:51:eb:fb:b9:77:1f:8b:2b:8b:9d:
         7f:c9:9f:4c:65:43:f6:27:64:8e:71:c8:37:db:55:74:cc:dd:
         2c:27:4b:54:bf:80:73:5a:43:7c:a9:b9:bc:f4:5f:fb:70:6c:
         7a:7c:d0:ae:4a:58:51:98:13:b3:78:05:50:2b:34:21:e6:00:
         0f:1f:13:f1:2e:ae:05:d9:66:94:03:58:06:6f:31:73:0b:c2:
         6f:f0:8c:5f:be:53:02:be:c0:14:ea:a3:b2:15:69:a9:49:6b:
         df:02:15:4d:41:87:86:3e:eb:d9:22:3a:a8:5e:86:f8:1c:37:
         4e:3b:99:5c:d8:3d:be:92:11:c2:02:3e:52:26:a8:de:5b:95:
         67:92:3a:eb:9d:13:3e:8a:13:5d:4b:1c:56:cd:df:51:e4:4d:
         f5:4e:71:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:35 2025 by rpki-client