Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3234382e302f32332d3234203d3e20323632333031.roa
File:                     3137302e302e3234382e302f32332d3234203d3e20323632333031.roa (raw, json)
Hash identifier:          GQBytCgMXSf455iXxBeGdiCxGy5KOKrTSFR8XCUkJiY=
Subject key identifier:   95:30:11:6F:95:58:3B:01:C3:3C:C6:6C:8F:53:43:66:80:03:80:11
Certificate issuer:       /CN=E30CAFF45780AC90434C232E196752E3283B9BD2
Certificate serial:       42710C21B6F5633938E7724C45CD5169CD017D2F
Authority key identifier: E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3234382e302f32332d3234203d3e20323632333031.roa
Signing time:             Thu 06 Mar 2025 07:33:13 +0000
ROA not before:           Thu 06 Mar 2025 07:28:13 +0000
ROA not after:            Thu 05 Mar 2026 07:33:13 +0000
asID:                     262301
IP address blocks:        170.0.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 14:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:71:0c:21:b6:f5:63:39:38:e7:72:4c:45:cd:51:69:cd:01:7d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E30CAFF45780AC90434C232E196752E3283B9BD2
        Validity
            Not Before: Mar  6 07:28:13 2025 GMT
            Not After : Mar  5 07:33:13 2026 GMT
        Subject: CN=9530116F95583B01C33CC66C8F53436680038011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8f:0a:9b:74:97:3d:3d:0b:53:4a:57:42:85:
                    bc:e8:fc:9b:56:78:60:96:34:39:b2:06:20:af:9d:
                    41:c1:bf:7a:a4:72:54:b5:01:9a:a7:37:bb:43:21:
                    ba:b2:74:b7:cc:1f:51:b5:81:05:79:6c:ba:69:ea:
                    f6:46:76:b3:a8:20:46:16:46:7e:7f:53:ae:2f:8b:
                    2d:eb:b9:ae:1d:bf:85:fc:5f:dd:92:38:90:fb:6f:
                    7d:7d:45:3d:90:43:5a:56:09:52:bc:03:77:4d:c9:
                    19:9e:25:5c:a6:7a:6c:23:70:d0:51:d1:5c:21:b5:
                    e5:c1:64:0f:07:10:e3:50:a6:50:ca:74:15:08:26:
                    cb:d1:b4:58:12:22:69:45:a7:50:8d:c0:45:18:fa:
                    5e:59:6f:7e:75:44:02:99:da:32:af:93:59:30:3d:
                    43:53:dd:4a:78:bb:5c:b7:34:ca:7f:3b:ac:ea:4a:
                    c5:0a:7f:05:ab:c8:02:70:62:df:ee:db:eb:6b:37:
                    63:34:eb:f2:70:a2:ed:46:eb:e7:f6:df:fb:8b:47:
                    33:cb:49:b4:0e:9f:be:f9:6d:9c:23:2e:f8:90:a2:
                    3f:da:23:87:ed:83:ac:17:c3:83:0a:c0:a8:98:aa:
                    46:ed:00:13:69:a1:cf:66:13:24:4b:3a:e8:ce:cb:
                    65:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:30:11:6F:95:58:3B:01:C3:3C:C6:6C:8F:53:43:66:80:03:80:11
            X509v3 Authority Key Identifier:
                keyid:E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3234382e302f32332d3234203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:10:25:bf:3c:83:01:98:73:75:fa:af:9d:14:8a:b8:3f:bd:
         74:7d:09:99:a9:c0:a2:99:95:93:c4:fa:fa:18:6a:fd:f9:2a:
         94:ab:63:71:5c:8c:60:41:b8:56:1f:0c:58:20:00:75:0e:b7:
         15:87:a8:3b:70:f0:c1:00:46:a4:d3:5f:2e:1a:53:5f:29:c8:
         5f:e1:2a:7a:ea:50:f9:4c:f2:87:06:fa:af:75:1f:dc:dc:1e:
         67:97:a7:6d:8b:d1:ab:4f:86:30:95:94:1f:4f:ee:9a:3c:d0:
         d1:d6:64:2c:fc:22:9b:9b:b1:2c:c0:f3:5d:26:e7:9c:17:de:
         18:f9:56:6f:ca:a7:00:71:d6:94:13:7b:9c:6e:c5:4a:5e:a2:
         48:f6:08:97:9a:02:66:07:9b:de:14:f8:b4:90:6e:a9:8a:b4:
         d1:95:a8:82:d8:c6:eb:3a:3c:f5:86:be:00:a5:9d:ff:2f:70:
         23:13:c8:e2:02:37:21:cf:54:e0:b9:ac:6c:c6:e4:e8:64:27:
         f6:83:20:ae:f7:26:9e:53:57:10:ee:81:6f:2d:92:09:e2:81:
         5b:3e:7d:5a:5c:07:af:c1:ea:e5:48:a7:6c:40:55:ba:e3:2c:
         63:8a:db:bf:f6:16:d7:b2:cf:23:3a:ee:2f:1c:62:35:84:e0:
         1c:8d:9a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:54:34 2025 by rpki-client