Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3137302e3233332e37362e302f32322d3234203d3e20323633343935.roa
File:                     3137302e3233332e37362e302f32322d3234203d3e20323633343935.roa (raw, json)
Hash identifier:          goukACg1UlzVvgtgPyjhuMs+XpZ16rzIKhZrNiWL8ps=
Subject key identifier:   89:7E:5A:2B:F1:16:B1:3B:37:FE:77:CC:84:12:9E:33:75:9F:66:CB
Certificate issuer:       /CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
Certificate serial:       2DDAAA775F2D20A2F097EACCCC6F625CAB781CA7
Authority key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3137302e3233332e37362e302f32322d3234203d3e20323633343935.roa
Signing time:             Wed 05 Jun 2024 19:02:17 +0000
ROA not before:           Wed 05 Jun 2024 18:57:17 +0000
ROA not after:            Wed 04 Jun 2025 19:02:17 +0000
asID:                     263495
IP address blocks:        170.233.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl
                          rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 03:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:da:aa:77:5f:2d:20:a2:f0:97:ea:cc:cc:6f:62:5c:ab:78:1c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
        Validity
            Not Before: Jun  5 18:57:17 2024 GMT
            Not After : Jun  4 19:02:17 2025 GMT
        Subject: CN=897E5A2BF116B13B37FE77CC84129E33759F66CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:0f:fd:01:5d:b3:91:ce:39:55:e2:97:0f:
                    50:e0:e5:29:4f:0c:6f:90:98:32:31:f4:f3:4e:65:
                    f0:ea:13:39:c5:d7:53:5e:22:64:cb:9b:82:3e:9c:
                    e6:42:92:b7:f1:aa:0b:fd:50:db:53:cf:43:43:30:
                    60:0d:6e:5c:7f:88:b6:24:ce:37:b4:dd:37:2c:34:
                    6b:42:d8:61:2c:f3:7c:0f:e5:e9:24:9c:9c:03:d3:
                    eb:80:1f:7c:62:be:03:af:aa:6b:05:ff:14:bd:26:
                    20:2d:af:a7:92:c2:bd:ee:27:ec:a0:1b:e3:ed:5f:
                    bb:3f:02:c6:e9:75:68:b6:69:47:74:e1:49:3e:31:
                    a1:d9:95:ed:f7:ee:6c:ff:42:6e:8c:89:26:c6:b2:
                    fa:3f:59:08:41:70:ce:4f:bf:71:fd:ee:d3:ba:01:
                    c9:7f:6f:a9:a1:44:38:b7:7e:0d:bf:13:94:6b:bf:
                    fb:c5:1c:77:89:c1:8f:05:80:3f:5d:64:5d:28:a1:
                    fc:e1:ed:69:af:65:e2:ec:90:a2:56:5a:76:3a:c3:
                    c5:4d:52:d1:b8:19:22:3b:29:e4:63:14:19:13:ec:
                    c9:f0:5b:d7:4e:2b:f9:17:72:1c:41:df:b2:ed:c4:
                    5a:db:94:2d:76:87:3a:3e:e5:14:ca:4a:72:c2:9d:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7E:5A:2B:F1:16:B1:3B:37:FE:77:CC:84:12:9E:33:75:9F:66:CB
            X509v3 Authority Key Identifier:
                keyid:DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/3137302e3233332e37362e302f32322d3234203d3e20323633343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:8e:a8:75:26:18:75:7c:08:e9:65:f1:39:43:50:90:bc:e5:
         4f:88:c4:6f:67:f9:ca:e6:58:84:6c:06:63:eb:3e:b6:1e:ac:
         4f:6f:82:09:12:84:74:7b:61:65:85:e9:1c:d7:96:31:ee:3a:
         5c:2e:e4:d3:a9:eb:09:a8:5a:ed:58:96:58:12:b2:6e:e3:2b:
         cf:17:ef:e4:0d:7d:1a:28:c8:b0:f8:14:12:a8:fa:af:67:14:
         7d:b1:36:16:d2:16:50:2c:c3:6e:b0:6d:9e:de:88:b2:2c:ab:
         3c:f9:38:73:d1:00:d8:31:b0:51:4f:04:f8:8e:8b:00:56:d6:
         db:86:00:a4:ef:93:f4:57:33:5d:87:0e:cd:f0:59:21:36:15:
         53:ee:c2:5d:74:1c:a3:d2:a4:0d:5f:64:24:e6:49:5d:7e:fb:
         cd:72:97:e3:84:49:43:d1:23:a8:5d:fd:f0:e5:e0:53:d0:f3:
         3c:36:a7:3a:30:d8:e3:e6:b6:34:3a:04:14:7d:1f:70:cd:25:
         09:dd:52:17:8a:77:ae:32:c6:dc:d5:5b:55:13:33:c4:14:d4:
         bc:94:c7:fd:eb:db:b1:e9:e7:aa:e0:51:8a:53:0e:f3:4e:35:
         2b:6e:9f:ef:b9:df:bb:19:33:96:23:19:4f:67:ca:36:cb:6a:
         c0:99:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:28:22 2025 by rpki-client