Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234352e302f32342d3234203d3e20323730363330.roa
File:                     3137372e37302e3234352e302f32342d3234203d3e20323730363330.roa (raw, json)
Hash identifier:          eb2CoPJU5IJ77ScDmtxkVQLfgGIh4WubuvH3UAxkLkQ=
Subject key identifier:   BD:26:F8:00:CC:E7:1A:E8:9C:E1:B7:54:FE:C0:24:6D:73:43:12:4B
Certificate issuer:       /CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
Certificate serial:       514BC0213AAD204B7680ADFB09BB7A1BC1926BD8
Authority key identifier: F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234352e302f32342d3234203d3e20323730363330.roa
Signing time:             Tue 25 Mar 2025 20:18:21 +0000
ROA not before:           Tue 25 Mar 2025 20:13:21 +0000
ROA not after:            Tue 24 Mar 2026 20:18:21 +0000
asID:                     270630
IP address blocks:        177.70.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.crl
                          rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4b:c0:21:3a:ad:20:4b:76:80:ad:fb:09:bb:7a:1b:c1:92:6b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7FDF8A9EE071B0475D890E4E63DFDC5219615DB
        Validity
            Not Before: Mar 25 20:13:21 2025 GMT
            Not After : Mar 24 20:18:21 2026 GMT
        Subject: CN=BD26F800CCE71AE89CE1B754FEC0246D7343124B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:31:71:83:65:0d:42:02:48:11:50:12:d0:90:
                    68:e9:9f:d4:d3:3d:ba:39:27:cb:c6:1c:2c:52:dd:
                    b5:31:31:c0:11:36:c4:df:ef:fe:bd:9e:d0:f1:67:
                    ff:6e:24:ff:73:e7:bf:9f:0e:12:f7:7b:97:b5:bd:
                    00:e8:38:52:eb:13:3d:99:9c:68:b6:2e:f5:28:e8:
                    28:2d:b3:15:a3:3f:9c:f9:47:f4:7a:47:fe:f9:94:
                    ef:55:5a:b4:47:4d:09:d4:2a:e0:9d:79:40:b7:09:
                    50:b2:c1:d2:fa:29:c6:b3:29:fd:e1:47:b1:60:17:
                    d1:18:91:54:cf:82:42:cd:62:17:da:89:40:d8:e5:
                    1f:66:99:57:57:b3:f7:e2:1b:63:09:4f:eb:5b:06:
                    37:30:53:3f:ff:76:19:04:1c:7b:7a:6a:70:de:5f:
                    24:46:46:2f:4b:f7:57:d7:43:0c:0c:bb:41:35:05:
                    23:e5:2f:27:e0:24:52:7b:fb:27:5b:d1:86:bd:a9:
                    7d:de:ef:9e:a0:90:3c:16:fa:c0:e8:9f:25:3d:e8:
                    38:a9:62:e0:60:9b:a6:48:e3:31:e2:ed:d8:68:65:
                    45:09:6a:d4:35:dc:bb:02:07:4c:bd:67:3e:33:d5:
                    2c:1f:71:d4:b7:9f:da:70:2a:b5:b8:76:42:63:b6:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:26:F8:00:CC:E7:1A:E8:9C:E1:B7:54:FE:C0:24:6D:73:43:12:4B
            X509v3 Authority Key Identifier:
                keyid:F7:FD:F8:A9:EE:07:1B:04:75:D8:90:E4:E6:3D:FD:C5:21:96:15:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7FDF8A9EE071B0475D890E4E63DFDC5219615DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234352e302f32342d3234203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:02:83:d8:0c:e6:bf:3b:bd:94:5d:2d:81:5b:39:ad:9d:65:
         82:08:e5:9a:13:22:6e:df:0a:d9:4a:ff:c2:9a:66:fe:15:3e:
         ee:85:da:fe:b6:09:cf:e6:2f:06:81:ba:38:0c:6b:99:f8:20:
         1b:ec:d3:6e:ae:be:25:41:8e:68:81:f5:58:d5:62:32:2c:04:
         86:69:1f:6c:13:78:ad:dc:a7:e3:a6:b5:ce:cc:b8:42:d2:d9:
         66:33:6c:be:b6:32:4d:e3:b5:6c:18:ac:a6:c7:19:04:c8:f9:
         94:4f:95:ed:2d:b0:e6:a4:a9:e6:10:2e:e6:1b:c9:d4:57:dd:
         6e:8b:80:b8:b4:0b:df:72:08:b5:0e:34:9c:c3:39:71:ae:72:
         a3:84:53:f3:b0:25:84:39:c8:d2:d1:1c:87:77:cb:06:b0:b8:
         13:06:ab:72:e5:f4:dc:d2:57:fc:0d:76:97:c1:f9:12:3a:d4:
         0d:53:40:d8:6a:ee:2a:7e:a6:2c:71:81:b2:59:d2:65:31:03:
         e5:85:d1:3b:f9:7a:e8:7b:b2:bc:d7:59:7d:0e:ef:61:24:d1:
         be:47:2d:61:ea:90:49:7a:bd:dd:de:08:81:68:e9:83:93:16:
         2f:e6:2b:c3:b2:15:2a:d5:f0:4c:80:67:3b:c6:5c:d2:4e:4d:
         a9:e0:84:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:37:51 2025 by rpki-client