Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32342e302f32342d3234203d3e20323634303031.roa
File:                     3137302e302e32342e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier:          9EDYma4XhyI/IECrFqPl3056EL8Gu4WhUWLrrFvmX9Q=
Subject key identifier:   67:F3:FC:36:FC:4E:D2:F5:D8:FB:AA:6A:D7:C2:34:34:51:59:BB:9A
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       0108C96E26EB31352BE52E2FE601C675771BA31E
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32342e302f32342d3234203d3e20323634303031.roa
Signing time:             Thu 06 Mar 2025 11:17:53 +0000
ROA not before:           Thu 06 Mar 2025 11:12:53 +0000
ROA not after:            Thu 05 Mar 2026 11:17:53 +0000
asID:                     264001
IP address blocks:        170.0.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
                          rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:08:c9:6e:26:eb:31:35:2b:e5:2e:2f:e6:01:c6:75:77:1b:a3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Mar  6 11:12:53 2025 GMT
            Not After : Mar  5 11:17:53 2026 GMT
        Subject: CN=67F3FC36FC4ED2F5D8FBAA6AD7C234345159BB9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cb:08:6d:5a:7f:c6:1e:c3:22:7a:84:67:45:
                    51:b8:0f:67:ce:35:34:31:48:c4:e5:d0:c6:82:de:
                    58:3e:99:aa:fc:bf:0e:e0:0e:f1:cd:23:a8:bc:cf:
                    da:01:4b:ff:9e:cb:3e:65:c0:49:13:f2:96:c1:88:
                    b9:52:6c:32:71:10:5d:81:57:26:f2:1e:c3:f4:0a:
                    de:48:9e:f7:fe:e5:15:89:15:91:9a:67:8a:a7:24:
                    25:bf:21:d8:62:7f:58:cf:c9:7f:3c:5a:92:97:71:
                    52:87:d3:06:3b:99:69:a5:6e:0d:f3:ab:7e:5a:8f:
                    04:0f:0c:e9:4d:07:e3:f4:48:7b:76:3c:7f:4c:22:
                    a5:8f:33:e1:bc:de:ab:2e:9e:76:03:14:30:af:2b:
                    b8:f2:aa:36:b3:14:b1:ca:e9:43:23:f6:aa:30:f0:
                    f0:2d:12:d0:0b:9e:b6:96:57:f4:14:24:4e:20:9a:
                    4b:4d:7b:2b:1a:48:3e:fd:62:56:ed:36:82:e7:35:
                    19:ed:4a:19:1c:30:67:b5:04:5d:7f:33:a2:4f:91:
                    cd:63:dc:85:32:20:14:05:cb:59:fc:7a:65:a6:b5:
                    65:ce:4e:ec:2e:c7:e1:bd:9b:af:3d:5d:81:b7:1d:
                    b5:56:b6:da:1f:9a:24:9d:97:92:ce:e7:8c:c7:20:
                    8d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F3:FC:36:FC:4E:D2:F5:D8:FB:AA:6A:D7:C2:34:34:51:59:BB:9A
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32342e302f32342d3234203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:fa:b1:0b:c6:7f:26:11:be:44:6d:19:a0:bc:b6:e2:6e:79:
         14:32:58:d4:89:00:c7:4a:8a:ca:47:60:30:16:a9:99:99:8e:
         5d:91:d4:e6:3a:f1:26:30:bb:75:70:8d:11:aa:7e:e8:9c:5b:
         34:24:62:e8:ca:d6:c2:23:45:9b:27:a8:94:2b:96:3a:55:2f:
         b9:54:85:66:1c:03:1d:59:e5:e8:7d:2b:3b:40:64:ed:5c:5b:
         78:3f:1c:6a:02:c1:b7:29:a3:2a:cb:3c:01:38:02:4b:c6:eb:
         e5:61:86:81:8f:08:ea:a7:e9:ed:fd:2c:d7:02:06:29:dc:60:
         48:cf:f7:0e:b8:7e:da:6b:cd:f8:12:59:01:03:9d:42:74:c1:
         0d:07:ff:9b:b4:bb:46:3c:79:c0:35:30:28:d6:df:7e:61:b6:
         47:3b:72:f7:c4:b7:a9:54:e8:28:53:82:44:d6:ea:31:a6:77:
         19:ba:0c:48:f6:76:b0:cd:ec:06:b2:b0:34:34:f0:7b:44:aa:
         39:6c:19:f3:42:06:af:d5:b1:83:5d:d3:38:34:5a:f5:31:44:
         47:6a:6e:f8:01:72:3d:4f:c2:d5:f6:ee:81:3e:a4:13:09:d7:
         f9:36:fd:03:06:c3:2d:72:75:0e:4e:d6:65:0b:d1:1a:22:4b:
         d8:c1:7b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:23 2025 by rpki-client