Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa
File:                     3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa (raw, json)
Hash identifier:          wlPnqD7qa81i/u0GABiCUaJGTeP2DvD2cJaBWTo4WcI=
Subject key identifier:   DF:8A:22:6E:07:6D:0F:50:D3:91:39:A0:3C:4F:32:1C:F1:76:7C:00
Certificate issuer:       /CN=A1E6749C09E9E32D11C15678D45C1B936D525291
Certificate serial:       3F5DCF4BE038FC5EBAF327D426CC7834A5EE939E
Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa
Signing time:             Thu 03 Apr 2025 19:14:55 +0000
ROA not before:           Thu 03 Apr 2025 19:09:55 +0000
ROA not after:            Thu 02 Apr 2026 19:14:55 +0000
asID:                     263250
IP address blocks:        177.234.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl
                          rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5d:cf:4b:e0:38:fc:5e:ba:f3:27:d4:26:cc:78:34:a5:ee:93:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291
        Validity
            Not Before: Apr  3 19:09:55 2025 GMT
            Not After : Apr  2 19:14:55 2026 GMT
        Subject: CN=DF8A226E076D0F50D39139A03C4F321CF1767C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:96:9b:34:c3:17:a0:bb:7c:11:89:9b:53:
                    41:e7:ce:b3:a9:b3:c5:f5:2c:64:91:eb:3f:5c:5e:
                    3f:e3:8d:7c:d9:ff:a5:b9:5a:d5:9f:23:dd:d3:00:
                    c4:53:e8:3f:fe:82:bf:a6:c5:bc:4b:5c:45:5f:c5:
                    88:f4:ed:cc:f7:a2:25:7e:52:00:da:2f:8b:59:f0:
                    13:41:e4:49:12:a5:ab:9e:43:9c:6c:1c:c8:67:9e:
                    04:8d:9a:81:d5:b6:14:b7:e7:01:f2:d2:de:9d:da:
                    6f:a5:0c:3a:ab:c2:5c:36:79:f3:d5:3f:02:b4:1b:
                    90:1e:56:ea:cb:a0:33:86:ea:65:d8:ec:c9:a0:98:
                    97:2d:d4:e7:d7:a7:c6:cd:91:0f:71:a0:f0:5e:8e:
                    98:d4:61:f8:5a:9e:b5:17:e1:c1:69:1a:00:67:10:
                    e3:37:1c:6b:2f:4f:93:7c:cb:7f:f2:b2:ff:4f:12:
                    f9:77:7d:26:94:e0:0a:fe:75:76:e5:e9:4b:1d:93:
                    1f:c2:49:c8:a6:91:30:c8:94:33:64:ee:89:ca:08:
                    c8:22:66:c8:60:4b:8f:1b:1d:b8:81:81:3b:32:ea:
                    e3:f9:10:f1:28:f2:28:14:6d:85:0c:85:d1:09:5e:
                    61:17:4a:e1:ed:1a:55:55:32:ae:d9:9c:4a:a6:77:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8A:22:6E:07:6D:0F:50:D3:91:39:A0:3C:4F:32:1C:F1:76:7C:00
            X509v3 Authority Key Identifier:
                keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6f:ad:4b:22:2d:50:9d:8b:14:f1:5b:10:b0:28:d7:32:9f:81:
         ca:91:b0:cf:77:67:c6:6d:c6:d6:26:47:30:5d:51:c1:57:ae:
         db:36:c3:6a:32:a6:16:b9:92:92:da:e4:a1:a4:5c:40:2f:da:
         7a:e3:f3:c6:60:e4:d8:a7:85:b6:5f:08:c5:5f:59:75:d9:a5:
         70:4d:a5:ea:0e:82:03:b8:98:05:8c:1e:10:78:b6:d9:20:ee:
         9b:8f:f2:9c:e7:65:4a:93:f3:97:d7:c0:af:35:e7:38:d1:6b:
         16:91:9f:e2:1e:93:94:c7:7a:0a:aa:73:36:98:d7:fe:d7:64:
         1a:3a:28:eb:a8:ec:24:6f:da:3e:c9:79:fe:1d:1f:58:5f:6d:
         ad:55:eb:d5:35:57:ab:c5:c1:dd:42:ab:0d:ba:0c:35:bd:ac:
         2b:00:1a:a2:b3:bd:f4:39:e2:c8:27:0a:62:b8:32:d7:18:33:
         39:6b:25:ac:ae:eb:80:68:1a:32:6e:90:15:2f:41:fc:83:df:
         ac:db:2e:c2:f2:ed:7c:fa:5d:3b:19:e8:01:d6:68:3c:d4:4d:
         a3:f2:64:c2:42:d2:1d:37:24:17:d5:c6:fd:49:37:ed:6d:05:
         ca:0f:6e:77:83:8b:24:c7:9f:e0:68:7f:82:4e:fb:bb:a2:fa:
         02:52:a5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:14:57 2025 by rpki-client