Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa
File:                     3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          sXeIiddgIsbS+sATicLgnnXS6mGcpy75xY5FDmKS1hQ=
Subject key identifier:   0E:A7:CA:BD:C5:E5:94:DC:27:57:4D:CB:5A:A9:25:17:6D:82:D2:68
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       6236AC34FA9EFA4EBF9F03611F1580CB011FA378
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     262595
IP address blocks:        170.79.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 22:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:36:ac:34:fa:9e:fa:4e:bf:9f:03:61:1f:15:80:cb:01:1f:a3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=0EA7CABDC5E594DC27574DCB5AA925176D82D268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:bc:d5:9f:12:3f:ea:36:0a:99:a1:8f:bc:
                    82:07:55:43:ff:20:09:38:c3:28:66:35:f7:62:bd:
                    99:40:59:3b:c1:7d:88:43:ce:95:94:67:f7:3c:a8:
                    14:cc:35:00:1e:a1:e8:2d:de:ba:3d:b9:f9:27:c4:
                    94:2b:fc:c2:bb:c3:89:c0:a6:e5:77:06:f5:dd:fc:
                    92:6c:e0:a9:54:9f:15:d5:8a:de:13:0f:be:97:47:
                    ac:bc:ff:56:70:0d:a5:df:ac:ff:8e:12:ab:70:ee:
                    a7:89:0e:6e:ef:c5:01:c5:b9:c6:78:cc:c3:22:31:
                    db:eb:e1:a6:44:d1:ca:03:2e:0d:15:42:6f:d7:d8:
                    08:5b:2b:2f:e4:b2:69:58:64:3c:1c:14:45:61:fe:
                    d7:a4:c3:89:62:e3:44:fe:41:44:96:33:d7:e2:a3:
                    89:15:a0:d8:cd:7c:13:d9:ee:1d:56:04:bf:07:b6:
                    1d:5d:36:a5:6e:bf:c6:51:f6:d0:d7:d7:c8:4e:a9:
                    12:e4:b5:e1:a9:58:9f:5a:92:4a:fd:55:a7:ef:fc:
                    21:9a:ec:eb:b3:92:20:b3:02:9f:0e:57:99:10:2a:
                    0d:84:9c:cb:2f:e6:62:d4:c3:97:6b:b2:50:da:9b:
                    e2:cf:03:6d:a4:17:be:40:89:23:e3:a8:ff:69:56:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A7:CA:BD:C5:E5:94:DC:27:57:4D:CB:5A:A9:25:17:6D:82:D2:68
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3137302e37392e3232342e302f32322d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:e7:76:42:2d:2d:fc:a5:63:b7:ee:ef:b1:53:ee:b3:99:b8:
         3d:f9:84:45:c9:76:e3:cc:93:db:d2:d1:57:c2:0b:51:15:98:
         0b:f7:fa:af:08:c8:cf:2a:d8:4d:ee:83:1f:ea:d5:66:75:52:
         59:18:c5:ea:f9:79:56:db:e1:eb:ca:e6:8b:86:8b:6b:d6:c6:
         9d:47:40:30:a0:9b:e0:6c:84:80:c3:c3:86:fa:ad:b2:6d:83:
         79:a7:bd:a1:a2:07:ed:65:39:95:1e:4a:86:8d:56:76:84:79:
         66:03:21:e7:ff:ad:ff:92:90:25:b8:d4:dc:9a:d2:55:88:33:
         71:8f:4d:ab:3b:73:50:ba:b5:f4:92:4b:f0:43:ce:6f:05:71:
         c3:c5:af:f4:a9:4d:92:25:36:d5:e2:25:8c:71:72:7c:9e:3e:
         bf:1e:b9:74:11:33:22:6c:6b:4d:1f:09:21:b0:07:1e:72:f4:
         48:40:64:54:44:1b:48:bb:27:ab:39:83:01:5c:c3:23:93:0d:
         8e:c5:34:a9:78:3d:f0:95:f3:11:ce:ca:f5:36:f8:8c:3f:44:
         07:48:bd:37:12:50:99:33:03:3c:ac:5f:1f:08:00:aa:5c:f2:
         c0:63:b7:0d:9f:07:69:4f:e3:23:c0:d4:08:72:21:68:b2:d7:
         73:11:be:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:10:53 2025 by rpki-client