Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa
File:                     3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa (raw, json)
Hash identifier:          STqejPz2D46FTAmvX61f5FJTCXTwYDv6kvajcAW/zz4=
Subject key identifier:   A5:72:6C:AA:5B:39:5C:A0:F4:F6:75:02:EE:7F:6C:73:CD:A5:F4:12
Certificate issuer:       /CN=13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B
Certificate serial:       74948D3A713D5D87F762A7194D5E02D7266BD9A6
Authority key identifier: 13:B4:8D:14:4C:CB:1B:4D:E4:7F:34:FF:8F:F3:AE:F8:2D:87:14:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa
Signing time:             Thu 09 Jan 2025 12:57:32 +0000
ROA not before:           Thu 09 Jan 2025 12:52:32 +0000
ROA not after:            Thu 08 Jan 2026 12:57:32 +0000
asID:                     263913
IP address blocks:        170.231.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.crl
                          rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 19:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:94:8d:3a:71:3d:5d:87:f7:62:a7:19:4d:5e:02:d7:26:6b:d9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B
        Validity
            Not Before: Jan  9 12:52:32 2025 GMT
            Not After : Jan  8 12:57:32 2026 GMT
        Subject: CN=A5726CAA5B395CA0F4F67502EE7F6C73CDA5F412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:86:ba:23:44:ee:9c:ea:ce:09:24:3c:0e:e3:
                    5f:b4:75:16:3e:99:26:e4:f0:bf:91:07:9c:0b:ed:
                    dc:6b:30:96:ea:c5:85:a8:0e:aa:2f:02:37:1b:cf:
                    8f:bf:01:a4:f9:d3:33:f6:3c:22:dc:ee:6c:24:07:
                    3b:e0:e7:a5:80:f3:96:a3:7c:71:fa:ac:be:eb:6e:
                    3f:9c:3a:b1:a4:b4:24:56:8a:0d:dd:8d:49:4f:dd:
                    e9:13:58:1d:7c:1c:76:71:0d:1f:6e:b2:dc:23:ee:
                    ab:bf:ed:8f:44:78:a2:2c:e1:af:39:7b:78:b8:19:
                    7b:ab:47:51:a5:be:35:6f:8f:3f:88:c5:a4:c4:74:
                    a6:4f:89:30:ca:bf:bb:41:22:50:1b:51:51:57:1b:
                    26:5e:a1:a3:43:f4:cb:d5:e3:2a:38:6c:40:27:6c:
                    60:8d:96:97:c6:19:f5:8c:ee:9a:f3:39:d3:2d:49:
                    ff:7a:ce:9b:c7:98:64:09:a3:94:4f:11:2f:8f:d7:
                    31:27:67:54:14:10:2a:23:d3:1d:9f:02:82:18:c2:
                    04:85:18:6f:b7:17:6b:9b:c6:3f:42:09:e9:30:41:
                    b5:c1:c5:7f:4d:23:3e:32:97:23:83:16:c2:b4:54:
                    a3:67:b4:1b:b5:8f:91:e2:23:5b:e2:d4:65:f4:42:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:72:6C:AA:5B:39:5C:A0:F4:F6:75:02:EE:7F:6C:73:CD:A5:F4:12
            X509v3 Authority Key Identifier:
                keyid:13:B4:8D:14:4C:CB:1B:4D:E4:7F:34:FF:8F:F3:AE:F8:2D:87:14:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:85:a2:ac:87:1d:5a:b0:db:d4:66:a7:7c:8d:56:da:d6:76:
         00:06:b9:d6:02:37:7f:a8:be:83:53:b3:6f:d5:a1:ca:a6:23:
         f3:35:e7:49:9c:d8:86:d1:87:dc:0e:ad:05:92:c9:98:6a:a7:
         a1:19:9e:53:be:f9:16:83:b5:2d:c5:5e:67:e8:c8:37:fe:34:
         0d:20:39:47:53:e6:47:00:8d:02:83:33:55:77:ca:a2:57:d3:
         4a:2b:c7:71:dd:3d:34:01:6c:20:fe:b1:22:19:30:28:ce:c7:
         34:3e:c9:37:b7:e9:71:6e:80:fd:a2:ce:d8:9f:0d:6a:d5:c9:
         85:16:fc:1b:af:6c:cf:4d:9d:f4:1f:88:07:dc:3e:04:15:06:
         5a:f7:18:3e:62:93:ec:b4:0f:5e:50:1a:3b:d1:50:99:b6:7d:
         ec:90:d0:33:d3:d1:7a:e9:62:ce:a1:d9:a7:b9:f3:4e:6c:d7:
         46:ec:59:36:19:ba:45:a5:ac:dd:ea:c4:97:8a:e8:7a:f4:4b:
         5a:bd:fc:9b:53:da:ef:fd:72:6f:c3:09:07:97:74:f5:2c:aa:
         3e:f0:1f:07:e5:9a:a2:1e:b5:66:2b:58:1f:ff:72:4f:25:2e:
         fe:0d:14:1d:30:6d:5d:a3:c4:4e:ed:a2:98:c1:68:90:b9:7b:
         eb:02:e2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:09 2025 by rpki-client