Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3234382e302f32322d3232203d3e20323632333031.roa
File:                     3137302e302e3234382e302f32322d3232203d3e20323632333031.roa (raw, json)
Hash identifier:          1T9oP+arsA88KVrJ13DBH/3OTuDAMUC7qh00wYJAbjU=
Subject key identifier:   79:A4:34:7C:C4:11:12:04:8F:6A:B3:C9:43:94:CC:B8:DB:65:9F:3A
Certificate issuer:       /CN=E30CAFF45780AC90434C232E196752E3283B9BD2
Certificate serial:       4A20A439F4A60D1E8B6840C5C17729FFC696C6DF
Authority key identifier: E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3234382e302f32322d3232203d3e20323632333031.roa
Signing time:             Thu 06 Mar 2025 07:33:13 +0000
ROA not before:           Thu 06 Mar 2025 07:28:13 +0000
ROA not after:            Thu 05 Mar 2026 07:33:13 +0000
asID:                     262301
IP address blocks:        170.0.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 14:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:20:a4:39:f4:a6:0d:1e:8b:68:40:c5:c1:77:29:ff:c6:96:c6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E30CAFF45780AC90434C232E196752E3283B9BD2
        Validity
            Not Before: Mar  6 07:28:13 2025 GMT
            Not After : Mar  5 07:33:13 2026 GMT
        Subject: CN=79A4347CC41112048F6AB3C94394CCB8DB659F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:57:24:0d:87:25:a6:3f:20:c4:7f:51:e9:
                    f9:ea:1f:08:c0:6a:13:de:7e:c5:91:38:4e:50:2b:
                    d8:f7:78:ea:8b:89:7f:e7:ed:e1:93:9c:11:ac:7e:
                    bf:0f:79:47:25:52:79:99:cc:4b:68:1c:5e:62:6d:
                    da:23:59:41:06:92:82:f6:44:1c:ae:74:40:5d:d7:
                    d8:d5:ec:89:85:44:31:19:e5:b8:fc:db:7b:a0:a6:
                    39:63:7f:73:3d:6c:34:00:14:c3:34:17:6a:c6:62:
                    c4:30:79:4f:13:f1:65:05:7e:ed:c3:54:35:67:53:
                    f0:53:b4:86:73:e9:30:ea:44:20:1e:36:6e:18:69:
                    75:a8:6c:ae:8f:0d:1a:b6:c0:66:f6:fd:01:8b:10:
                    43:ac:16:4a:44:45:ea:75:cd:ea:b1:c0:e9:a2:30:
                    fe:53:5c:27:5b:ef:67:30:14:70:86:6c:ef:d6:b2:
                    d6:15:05:92:9d:36:9a:b7:18:fb:a4:84:c2:cf:7a:
                    68:74:20:a1:d7:fe:b9:b2:77:7a:7f:e4:ba:f0:4b:
                    b3:b3:33:b0:fa:bd:36:20:38:7e:1a:94:60:86:01:
                    d9:3a:41:b4:54:c9:f7:66:bc:02:9d:6a:10:2b:40:
                    0e:2d:99:a3:30:7d:60:58:e5:9f:50:4f:4a:36:d4:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A4:34:7C:C4:11:12:04:8F:6A:B3:C9:43:94:CC:B8:DB:65:9F:3A
            X509v3 Authority Key Identifier:
                keyid:E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3234382e302f32322d3232203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:1e:08:fb:4a:e2:bd:a6:7d:c7:11:d3:2e:da:af:34:8f:cf:
         92:5a:7c:01:7a:48:32:a0:83:56:6e:e7:18:87:7d:ad:42:2e:
         8b:78:82:98:58:cd:6c:a0:85:e9:c9:20:3d:a6:07:d6:6f:e9:
         07:42:f8:4e:0f:54:35:b2:89:d5:1b:1a:fa:54:1a:83:9b:52:
         9f:6f:55:d0:1c:81:10:04:dc:7b:04:57:0e:11:8b:32:52:15:
         4d:82:34:cb:7d:05:a6:27:2b:c1:f4:eb:13:3a:30:58:19:96:
         d7:86:29:d9:e0:37:35:64:24:bc:3e:80:c8:65:d3:59:78:43:
         a6:b9:96:35:15:80:b9:55:81:65:53:8d:e7:e6:05:e9:b9:cf:
         57:bf:4f:e8:a1:19:91:a5:c0:e6:ce:3c:04:e4:a0:a2:f6:e0:
         36:01:82:97:45:c2:4a:76:1a:e9:f8:20:ac:a3:c3:09:97:d3:
         22:95:13:cc:bb:c8:85:2f:c4:78:35:d8:ef:9b:41:59:8f:dc:
         7c:6a:5c:42:74:a5:b5:2c:a6:68:02:92:d9:09:6c:2e:84:7e:
         dd:de:75:9b:32:fe:23:7e:89:83:93:04:2c:5f:5f:18:20:4e:
         bc:7a:76:b0:27:e8:39:6c:a8:ca:2e:9d:e1:1c:0e:23:fd:28:
         70:1b:f3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:54:51 2025 by rpki-client