Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137392e39362e3136302e302f32312d3234203d3e203532363337.roa
File:                     3137392e39362e3136302e302f32312d3234203d3e203532363337.roa (raw, json)
Hash identifier:          EBGyjPtIZv1szyE4ZK1m+CjXebtEwNS0wBqvHO2Brgg=
Subject key identifier:   49:F1:A7:5B:D8:71:AA:BB:D6:72:09:03:B2:88:DE:52:87:6B:71:42
Certificate issuer:       /CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
Certificate serial:       0D21F437C222DBAE6BFEB743A6A56DD2C86D2A91
Authority key identifier: BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137392e39362e3136302e302f32312d3234203d3e203532363337.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     52637
IP address blocks:        179.96.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl
                          rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:21:f4:37:c2:22:db:ae:6b:fe:b7:43:a6:a5:6d:d2:c8:6d:2a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=3082010A02820101009F3BBAD6CA57A3AC77BA30A65E58D04931CFE83348B23BB5EB590CDD4F68A7DCEE9A7A10448AFA86DA81B2D693033B74A00A8F1A19BD8584C9E94F1B189189F23637C512D1B5857F1A8CB87B45AF53289C3F4BDBF99D57BAB49680862C5F8F77152D010224BF3635C7C9AC2D13DEF26BC4F071FD1C37FF07988CB9BED45B5CD47E4E72ED4F1E5C7245A134E4AC5D773738799A1B8863C4DEF4DAD5030CF8556F32DF10280B8F64D99F17F9DC315669631CC1A56A6A4B9E25B47D817BC93F5169F4C50D950E5F19FCF4E34CE4D2F841A62FEA1F15946C732F9211AB7FFEDA930D780C87749B9DF89E51F1A146083BCEC488FD91D6529E35917F8920881BBFEB570203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3b:ba:d6:ca:57:a3:ac:77:ba:30:a6:5e:58:
                    d0:49:31:cf:e8:33:48:b2:3b:b5:eb:59:0c:dd:4f:
                    68:a7:dc:ee:9a:7a:10:44:8a:fa:86:da:81:b2:d6:
                    93:03:3b:74:a0:0a:8f:1a:19:bd:85:84:c9:e9:4f:
                    1b:18:91:89:f2:36:37:c5:12:d1:b5:85:7f:1a:8c:
                    b8:7b:45:af:53:28:9c:3f:4b:db:f9:9d:57:ba:b4:
                    96:80:86:2c:5f:8f:77:15:2d:01:02:24:bf:36:35:
                    c7:c9:ac:2d:13:de:f2:6b:c4:f0:71:fd:1c:37:ff:
                    07:98:8c:b9:be:d4:5b:5c:d4:7e:4e:72:ed:4f:1e:
                    5c:72:45:a1:34:e4:ac:5d:77:37:38:79:9a:1b:88:
                    63:c4:de:f4:da:d5:03:0c:f8:55:6f:32:df:10:28:
                    0b:8f:64:d9:9f:17:f9:dc:31:56:69:63:1c:c1:a5:
                    6a:6a:4b:9e:25:b4:7d:81:7b:c9:3f:51:69:f4:c5:
                    0d:95:0e:5f:19:fc:f4:e3:4c:e4:d2:f8:41:a6:2f:
                    ea:1f:15:94:6c:73:2f:92:11:ab:7f:fe:da:93:0d:
                    78:0c:87:74:9b:9d:f8:9e:51:f1:a1:46:08:3b:ce:
                    c4:88:fd:91:d6:52:9e:35:91:7f:89:20:88:1b:bf:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F1:A7:5B:D8:71:AA:BB:D6:72:09:03:B2:88:DE:52:87:6B:71:42
            X509v3 Authority Key Identifier:
                keyid:BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137392e39362e3136302e302f32312d3234203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:61:6a:ee:00:e2:d1:16:d8:29:b4:e9:56:3e:9b:89:bd:15:
         cb:9f:b4:0e:5d:b7:18:9b:3f:0c:e1:34:5a:05:e2:75:80:84:
         2a:46:01:68:71:07:0b:d5:d5:d4:8e:a8:76:da:4d:a2:2b:4a:
         8f:be:dd:ff:d5:ce:6c:aa:6f:5a:45:87:a8:16:98:38:19:3e:
         f1:99:9a:f2:3c:23:03:58:af:f4:f0:7a:9f:05:f8:1f:55:25:
         67:09:d6:84:db:06:4f:b8:6c:a4:82:bc:26:c1:52:62:e7:1a:
         bc:3a:a2:4b:28:16:80:90:16:75:fe:cc:f0:1e:da:1c:f1:3c:
         46:a5:02:df:ed:8f:11:db:44:ce:6b:22:88:be:6a:1c:1e:91:
         ff:36:2b:1f:41:23:c9:88:18:0d:aa:b6:51:19:d8:21:1e:1a:
         06:ae:b8:c4:d6:7a:d4:bb:50:5d:79:db:b2:c9:c5:db:1a:cb:
         b0:29:f5:18:20:1e:1c:b2:02:b2:2c:d5:04:94:c8:47:fc:3a:
         8d:e1:9e:31:e3:ae:11:3d:2e:8a:40:ed:30:3d:36:05:e5:76:
         cd:2a:b7:dc:89:1c:8d:9b:88:d4:5c:b4:64:97:e1:38:f1:dd:
         c5:93:ce:4a:f4:74:8e:3c:fc:ed:9b:91:02:f1:92:c3:a8:58:
         8e:11:f5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:35 2025 by rpki-client