Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/1/3137302e38312e3130342e302f32322d3234203d3e20323636343032.roa
File:                     3137302e38312e3130342e302f32322d3234203d3e20323636343032.roa (raw, json)
Hash identifier:          RUpC1WKFLW2/Dgl8P6p45Gf5f4PKatoEvHfYPzRU1mA=
Subject key identifier:   0B:96:FC:B1:36:18:62:D8:86:D5:14:AC:8F:BC:2F:F0:2D:3B:A2:79
Certificate issuer:       /CN=A940AAD948DF51968F2CFC007E5775994F255968
Certificate serial:       177F489AD81454EF30B32660BAD060D7A5B5A830
Authority key identifier: A9:40:AA:D9:48:DF:51:96:8F:2C:FC:00:7E:57:75:99:4F:25:59:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A940AAD948DF51968F2CFC007E5775994F255968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/1/3137302e38312e3130342e302f32322d3234203d3e20323636343032.roa
Signing time:             Thu 06 Mar 2025 19:52:24 +0000
ROA not before:           Thu 06 Mar 2025 19:47:24 +0000
ROA not after:            Thu 05 Mar 2026 19:52:24 +0000
asID:                     266402
IP address blocks:        170.81.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/1/A940AAD948DF51968F2CFC007E5775994F255968.crl
                          rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/1/A940AAD948DF51968F2CFC007E5775994F255968.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A940AAD948DF51968F2CFC007E5775994F255968.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7f:48:9a:d8:14:54:ef:30:b3:26:60:ba:d0:60:d7:a5:b5:a8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A940AAD948DF51968F2CFC007E5775994F255968
        Validity
            Not Before: Mar  6 19:47:24 2025 GMT
            Not After : Mar  5 19:52:24 2026 GMT
        Subject: CN=0B96FCB1361862D886D514AC8FBC2FF02D3BA279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:e6:38:85:d5:07:4f:23:fb:43:df:dd:ea:
                    18:8f:6a:21:b3:a1:90:11:66:a8:a5:09:0d:65:45:
                    6f:8d:e1:dc:33:fe:40:56:5b:b8:21:e1:dc:af:65:
                    bf:41:49:4d:b8:b4:bd:01:64:5a:8a:19:cc:38:05:
                    54:64:c1:be:e4:28:dd:33:3e:0d:ea:bd:a7:1d:6f:
                    19:35:0f:55:be:52:27:35:b2:fd:45:0d:99:df:28:
                    45:b7:27:47:d0:30:7e:0d:f5:11:ba:0a:28:0d:c0:
                    67:f3:d5:30:09:3d:ed:54:95:ea:05:01:4d:68:68:
                    73:5a:83:e6:81:11:45:64:f9:0a:87:60:26:53:a0:
                    bf:e7:01:d2:da:55:6d:cf:2a:c0:48:55:2d:69:ca:
                    1a:c5:28:41:be:5a:fe:13:0c:2f:b7:04:c5:dc:77:
                    bf:98:d9:06:64:c2:12:4b:f7:1e:d2:b6:b9:bc:db:
                    80:b5:16:37:7e:50:bf:0f:01:aa:0a:39:62:75:fa:
                    4c:c1:4f:06:08:82:8f:dd:0f:cd:75:03:55:84:14:
                    d4:93:98:0f:cd:9f:3f:8b:37:b1:4b:4b:32:f6:f9:
                    d8:9c:ca:91:b6:e7:09:ec:76:a7:2b:b4:ab:3f:2a:
                    14:bc:91:b9:8d:7f:17:e8:07:90:cf:73:1f:30:89:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:96:FC:B1:36:18:62:D8:86:D5:14:AC:8F:BC:2F:F0:2D:3B:A2:79
            X509v3 Authority Key Identifier:
                keyid:A9:40:AA:D9:48:DF:51:96:8F:2C:FC:00:7E:57:75:99:4F:25:59:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/1/A940AAD948DF51968F2CFC007E5775994F255968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A940AAD948DF51968F2CFC007E5775994F255968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Em8u3mjx6DGFMbj5nsHkYs3vkzDhuSAai1UdSxFDuAdE/1/3137302e38312e3130342e302f32322d3234203d3e20323636343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:9d:2f:4f:06:ff:0b:ff:1a:98:54:7d:7d:ee:ec:be:40:8e:
         ef:bc:6e:23:de:62:ba:28:8f:80:c7:8b:81:d1:af:4a:2f:30:
         ff:28:3a:14:0e:91:35:47:65:c9:07:f7:17:31:f6:31:57:83:
         51:d0:64:55:66:00:42:76:79:02:5f:1f:e3:e4:c9:6f:7a:db:
         b9:91:30:a3:f4:a1:9d:4c:b5:e7:f6:eb:c4:4e:de:f8:fc:2f:
         94:9c:3c:74:6d:7a:e7:c5:bc:e8:ef:0e:d1:69:da:03:3f:93:
         1e:41:17:72:53:ac:aa:f8:0a:1e:a4:54:60:64:cb:67:81:aa:
         a6:9d:76:ad:69:2c:e0:4b:87:d3:bb:ca:18:94:73:0b:f2:8d:
         b9:e3:aa:24:17:97:1b:ba:1c:1c:9c:b7:cb:ea:a6:3f:97:fb:
         03:33:ac:93:98:06:b6:3b:3a:80:2e:af:ba:cb:8d:1b:06:07:
         8b:df:b4:ab:68:ef:33:87:aa:24:a4:3c:a0:d3:1d:95:c9:8c:
         80:48:75:7f:65:c4:5f:11:d8:e2:95:f5:fc:03:19:b4:cd:df:
         95:d3:b0:19:8c:f2:0e:b5:22:5b:68:c6:f0:37:29:ae:f1:37:
         d0:70:1b:7c:78:e1:fc:37:69:c0:38:e1:d0:d8:13:b9:e6:75:
         97:cd:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:34:18 2025 by rpki-client