Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa
File:                     3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa (raw, json)
Hash identifier:          p8W8veq7Lvg13s22TEkKvPEGhG5J155S2orjeEClMbI=
Subject key identifier:   C6:79:76:4C:79:41:AC:A2:1C:98:DF:15:23:1B:59:6C:B0:36:1E:0C
Certificate issuer:       /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Certificate serial:       29629D72059D4DCE857573F2971D759DD51FC76A
Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa
Signing time:             Thu 06 Mar 2025 14:08:24 +0000
ROA not before:           Thu 06 Mar 2025 14:03:24 +0000
ROA not after:            Thu 05 Mar 2026 14:08:24 +0000
asID:                     265078
IP address blocks:        170.233.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl
                          rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 19:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:62:9d:72:05:9d:4d:ce:85:75:73:f2:97:1d:75:9d:d5:1f:c7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
        Validity
            Not Before: Mar  6 14:03:24 2025 GMT
            Not After : Mar  5 14:08:24 2026 GMT
        Subject: CN=C679764C7941ACA21C98DF15231B596CB0361E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8e:6b:f3:e4:ba:a5:f7:b7:97:14:b2:c6:b6:
                    1e:ec:95:3d:2d:9b:14:a5:c1:a0:04:6b:1b:26:4c:
                    98:02:55:44:11:59:9f:de:37:e3:58:af:69:89:54:
                    f3:b0:13:c6:5b:13:77:50:a4:a1:06:19:3a:7e:50:
                    e4:cb:01:33:02:89:25:1a:67:42:23:69:02:d7:9d:
                    45:0b:50:33:22:da:61:bd:aa:72:19:89:aa:80:be:
                    9c:7c:6d:78:be:d7:89:6b:5c:58:ba:91:25:4e:db:
                    63:4f:11:4b:37:5e:da:90:f5:b9:d9:f0:4d:d4:37:
                    d2:3c:fb:e0:2a:f1:72:3c:73:9e:38:9f:b3:dc:07:
                    17:55:fd:ce:1f:8a:57:9c:13:e2:c7:a8:d7:36:9c:
                    51:b9:1c:77:f7:a8:08:a6:a2:ca:cb:8f:98:0a:6f:
                    5a:3e:66:63:df:98:a9:90:0b:c5:14:5e:7f:3a:f5:
                    c2:ae:a8:0f:f4:e6:67:b1:a7:80:47:4c:35:0d:ed:
                    b3:c4:17:30:3c:ae:0b:cd:41:cc:d1:8f:46:49:c6:
                    38:a5:f2:ad:37:9b:82:ae:d5:57:9f:98:56:39:ae:
                    7b:e1:88:ab:5d:af:e1:ce:d7:7f:c9:bd:1f:6c:e5:
                    28:10:16:9f:89:b5:0c:c5:d3:dd:fb:56:9b:8e:f0:
                    79:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:79:76:4C:79:41:AC:A2:1C:98:DF:15:23:1B:59:6C:B0:36:1E:0C
            X509v3 Authority Key Identifier:
                keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:36:a7:61:cb:df:72:cf:8e:5e:2e:57:91:7b:b2:9a:c8:a3:
         5d:14:98:ec:59:78:02:47:43:01:1d:d3:63:94:ff:cb:cd:55:
         57:73:43:c8:cf:e1:39:84:ce:98:30:98:9b:0b:ee:cc:1b:27:
         66:6e:96:c9:7f:2f:a8:c5:ad:a5:85:de:7f:ac:95:a0:dc:26:
         9f:aa:50:df:b4:f2:69:b3:71:f2:dc:95:0e:d7:87:20:c4:ed:
         51:49:a4:01:45:03:8e:f5:16:70:ea:94:80:7e:07:3c:da:19:
         35:6c:09:61:09:ae:31:3d:ac:c7:b5:70:fc:34:ee:48:59:d6:
         79:a6:b8:7c:d7:dd:4a:d7:46:e3:8b:59:19:61:4d:bc:af:14:
         b6:0b:fe:df:4e:cd:4a:7f:22:82:3d:fe:ee:8b:dc:b5:62:9d:
         a5:c2:80:87:a5:68:88:45:4e:b3:79:96:bd:d7:31:b3:27:1d:
         91:af:fc:95:1f:cb:36:95:5f:d5:37:1b:48:39:13:4c:72:6e:
         59:72:87:9f:2b:79:3f:e5:2c:27:e3:fa:57:88:3e:38:f8:87:
         6d:74:73:16:81:64:83:99:74:9e:8c:ef:da:ae:5c:6b:20:e5:
         e1:9a:5c:fa:83:30:7e:48:0a:07:b5:1a:1c:ff:e5:16:09:38:
         85:27:aa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:27:36 2025 by rpki-client