Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139372e302f32342d3234203d3e20323636353436.roa
File:                     3136302e3233382e3139372e302f32342d3234203d3e20323636353436.roa (raw, json)
Hash identifier:          joM+u7PORJdGnFjZhmPBlsrsIlNkPKAPY/Z0Gbc8cy0=
Subject key identifier:   7C:D2:A9:04:7D:41:D7:E6:F6:8F:BA:DE:A7:30:80:3A:68:17:8F:04
Certificate issuer:       /CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
Certificate serial:       6255766E885131F31E2C3BAB8BEEFE44DB5EA84E
Authority key identifier: A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139372e302f32342d3234203d3e20323636353436.roa
Signing time:             Tue 18 Mar 2025 20:06:36 +0000
ROA not before:           Tue 18 Mar 2025 20:01:36 +0000
ROA not after:            Tue 17 Mar 2026 20:06:36 +0000
asID:                     266546
IP address blocks:        160.238.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl
                          rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 03:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:55:76:6e:88:51:31:f3:1e:2c:3b:ab:8b:ee:fe:44:db:5e:a8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
        Validity
            Not Before: Mar 18 20:01:36 2025 GMT
            Not After : Mar 17 20:06:36 2026 GMT
        Subject: CN=7CD2A9047D41D7E6F68FBADEA730803A68178F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ec:c9:7f:3e:c4:98:aa:3b:bd:fd:fb:a2:5f:
                    a5:a5:2f:3a:d0:ac:36:6c:5c:c2:2a:78:c5:24:0c:
                    06:b6:5d:44:4a:ad:46:3b:70:0e:fb:17:de:30:b0:
                    9d:6d:1c:52:fd:5f:4c:80:bd:5d:66:56:d2:7d:c0:
                    f8:15:23:e3:93:75:52:14:29:ab:cb:b3:8c:1c:22:
                    57:ba:8a:20:6c:a0:5b:e2:70:59:18:18:43:82:10:
                    aa:11:ad:cb:19:84:6b:e2:c8:5f:9e:8f:1d:33:ea:
                    34:3d:88:9d:70:c4:d2:5d:a0:dd:70:1e:63:c2:df:
                    2d:e1:14:09:5a:fb:0b:14:f7:76:8e:a7:a2:17:8f:
                    87:29:44:77:37:4f:f8:a7:c4:c2:07:b1:ee:ff:29:
                    18:c5:0c:4b:c3:df:e5:d8:45:e2:3c:bc:28:40:78:
                    37:1b:8c:21:70:61:dc:a0:87:34:26:bb:a8:da:47:
                    52:ca:db:14:bc:18:8d:a3:91:ca:80:2d:03:58:10:
                    94:f1:b9:43:2a:63:47:0d:60:3e:d4:28:2a:a3:1d:
                    d3:16:79:76:36:92:a4:6c:96:30:5e:92:52:c5:f8:
                    6d:fb:fd:4f:a5:72:2a:e6:2e:47:03:89:2e:ef:78:
                    ab:8b:4b:a4:99:08:d3:c0:11:d1:ea:c5:21:0b:d0:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D2:A9:04:7D:41:D7:E6:F6:8F:BA:DE:A7:30:80:3A:68:17:8F:04
            X509v3 Authority Key Identifier:
                keyid:A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139372e302f32342d3234203d3e20323636353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:90:44:ac:8f:d7:ec:ad:a9:34:5e:95:05:da:9b:d3:ea:b0:
         da:00:0f:3e:f2:97:0b:39:2f:c2:3c:68:19:41:34:67:a9:26:
         1b:f0:91:fb:ee:c2:47:0f:ec:d4:f3:9a:38:33:2f:36:7f:8e:
         1b:cd:5f:9b:88:27:2c:5d:50:0d:0a:0a:fd:e1:91:56:2a:aa:
         3a:90:84:83:5f:2d:f0:57:0c:97:44:83:32:ca:54:ba:9d:8c:
         ea:95:5b:98:40:ea:8c:7c:3c:87:bf:26:b5:28:4e:9b:dc:b7:
         de:1d:a1:7b:a4:da:1e:01:7b:d5:39:88:18:2d:1b:71:5b:a7:
         94:17:dd:b2:be:bf:94:02:61:4f:fd:43:58:7f:7f:44:16:a5:
         a4:0d:5d:f4:88:6a:04:ee:f0:8b:13:65:d2:39:52:51:c7:30:
         4e:66:ff:e4:3d:c8:5f:27:8d:33:a8:75:53:da:15:52:dd:80:
         f2:09:6c:87:5c:c4:17:b9:f9:9e:20:bd:f3:97:74:b8:f4:ea:
         7a:59:a2:b5:7c:45:0d:ce:24:c7:81:78:31:df:2c:ba:c5:98:
         4e:0d:79:09:78:0f:55:14:c8:f3:c9:ee:13:aa:23:aa:93:d7:
         1a:87:29:38:2a:67:65:fe:5c:76:7d:03:39:6e:d3:64:a9:92:
         a0:cc:31:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:44:30 2025 by rpki-client