Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32362e302f32342d3234203d3e20323634303031.roa
File:                     3137302e302e32362e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier:          L3DNdY1XOUj7WN/qfOuLK6JGfrO0tyVyVXuamP4064Y=
Subject key identifier:   3D:ED:00:79:F8:EC:A6:57:41:5D:6E:C5:C3:0E:AE:CB:2E:18:83:C3
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       699617D40DB7C8065C3313753374EE8B1026D17C
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32362e302f32342d3234203d3e20323634303031.roa
Signing time:             Thu 06 Mar 2025 11:17:53 +0000
ROA not before:           Thu 06 Mar 2025 11:12:53 +0000
ROA not after:            Thu 05 Mar 2026 11:17:53 +0000
asID:                     264001
IP address blocks:        170.0.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
                          rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 12:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:96:17:d4:0d:b7:c8:06:5c:33:13:75:33:74:ee:8b:10:26:d1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Mar  6 11:12:53 2025 GMT
            Not After : Mar  5 11:17:53 2026 GMT
        Subject: CN=3DED0079F8ECA657415D6EC5C30EAECB2E1883C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:7f:29:23:48:94:35:20:53:f8:5a:1b:35:
                    e1:aa:bd:a1:0a:38:f3:7c:f8:34:e9:67:eb:17:50:
                    a5:d7:19:19:b1:1b:b1:81:99:5c:87:1b:53:73:f2:
                    b9:1b:ec:e0:7f:a7:c0:3f:7e:d9:9f:68:cd:cc:f5:
                    32:e8:23:69:c6:7f:18:d1:f6:df:ec:20:3f:e7:38:
                    9b:17:5e:53:60:1f:8f:f8:f2:d2:ea:f3:8c:4a:2c:
                    aa:a9:21:fb:1f:95:1b:ea:5c:42:d9:2f:21:76:72:
                    d3:81:de:d4:48:c2:c4:8f:47:42:91:e2:2c:16:9c:
                    87:18:fd:2d:c0:1f:42:d1:ba:e6:eb:07:1b:df:1b:
                    e1:49:60:48:10:91:d0:55:69:b8:d5:97:41:42:8e:
                    1e:78:86:13:ef:92:52:06:cf:25:fc:b6:cd:bb:a3:
                    e8:7d:53:44:5c:d9:56:42:73:4b:d8:a0:fd:f2:2e:
                    18:0c:fe:0f:3d:74:7c:c6:23:f7:91:dc:9e:d8:35:
                    b3:34:46:bf:ba:cd:db:cc:ec:20:e8:dd:f7:dd:cc:
                    7f:d3:ef:ad:9a:b6:3b:38:fc:8d:a2:33:fb:c0:56:
                    d8:06:90:8d:b2:eb:26:c9:4d:1f:69:97:27:72:ef:
                    a0:a9:c9:4e:06:ff:05:3e:91:72:f7:00:88:9f:38:
                    b2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:ED:00:79:F8:EC:A6:57:41:5D:6E:C5:C3:0E:AE:CB:2E:18:83:C3
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e302e32362e302f32342d3234203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:3c:50:74:e4:40:99:b3:99:b7:20:25:6d:bd:ae:1a:1c:c8:
         0e:8d:ce:21:8d:80:5b:8b:8d:c9:9f:a0:03:d9:e0:37:a5:6d:
         7e:8c:0f:85:c3:df:3e:06:a2:40:24:1f:be:89:88:8d:f8:01:
         df:5d:b0:ae:6f:c8:b6:08:2a:e6:16:48:32:47:1d:c6:53:cb:
         1b:ce:9e:b5:54:3f:d5:4f:0c:8a:36:49:2c:27:50:61:fa:dc:
         29:8a:8f:64:0f:7f:1f:2b:9c:83:fc:67:1f:cd:76:e1:a2:ba:
         be:50:4c:8a:b4:92:3f:54:85:49:b1:48:0e:ed:19:21:ae:5f:
         87:8b:b2:06:07:da:6d:37:63:93:03:d6:35:9b:0d:a1:eb:a4:
         55:14:17:67:0d:4b:a3:bb:1d:f6:33:42:24:e1:78:12:96:73:
         95:ed:3a:6e:0d:a6:07:e2:2f:65:da:5a:d3:5c:f7:a3:ce:44:
         97:85:f3:45:a3:f1:c2:78:2a:7f:77:fb:f5:72:57:b2:e5:e3:
         49:15:b2:3d:30:f8:4f:49:e1:b9:c7:58:ce:aa:25:dc:c6:ff:
         6d:cf:0f:18:b9:0a:90:6f:68:4b:ad:a5:83:01:a1:e0:2e:44:
         2e:17:8e:57:ec:2a:7d:42:c0:11:42:13:3f:75:7c:3e:2e:67:
         ea:a4:70:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:02 2025 by rpki-client