Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/3137302e38332e36382e302f32322d3234203d3e203631373534.roa
File:                     3137302e38332e36382e302f32322d3234203d3e203631373534.roa (raw, json)
Hash identifier:          60sCxbjX6bYqsDiesgIQs+TGZwWEhk0DLSmsV8it1fM=
Subject key identifier:   82:74:9C:C9:F3:B7:6E:F7:66:59:49:32:3E:93:0E:97:0C:BD:14:93
Certificate issuer:       /CN=B92001871A07D03B31A6C890436B41249FAC3A6E
Certificate serial:       0C32CA2095B43526888E6363166C0CCC9F726215
Authority key identifier: B9:20:01:87:1A:07:D0:3B:31:A6:C8:90:43:6B:41:24:9F:AC:3A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/3137302e38332e36382e302f32322d3234203d3e203631373534.roa
Signing time:             Thu 06 Mar 2025 22:33:30 +0000
ROA not before:           Thu 06 Mar 2025 22:28:30 +0000
ROA not after:            Thu 05 Mar 2026 22:33:30 +0000
asID:                     61754
IP address blocks:        170.83.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.crl
                          rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 23:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:32:ca:20:95:b4:35:26:88:8e:63:63:16:6c:0c:cc:9f:72:62:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92001871A07D03B31A6C890436B41249FAC3A6E
        Validity
            Not Before: Mar  6 22:28:30 2025 GMT
            Not After : Mar  5 22:33:30 2026 GMT
        Subject: CN=82749CC9F3B76EF7665949323E930E970CBD1493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:e2:c7:f0:de:2f:92:1b:66:5e:30:7e:63:
                    38:cc:4b:ed:6a:b3:0d:ee:9d:64:47:f8:66:ab:f5:
                    46:d3:b0:19:5b:da:93:09:0e:f2:42:80:01:df:39:
                    65:88:f6:85:8b:02:a9:67:c3:ae:24:dd:97:5d:50:
                    91:41:a1:c7:f2:8f:46:30:e6:e2:74:b1:80:8b:c2:
                    5a:a0:7c:e5:27:ba:60:5e:26:3e:cb:4e:4d:bb:69:
                    c1:23:32:06:18:83:bc:69:ce:09:71:3d:29:54:4e:
                    e9:da:d6:5f:e3:75:32:be:d7:02:99:35:b5:24:3a:
                    1b:ea:7a:b1:cf:9f:7a:96:4c:63:77:86:da:75:29:
                    4d:83:34:72:f2:e0:e2:a1:6a:85:8f:44:5b:2b:23:
                    7f:3b:55:50:7c:3d:ba:0b:fd:1a:be:84:e3:8c:71:
                    53:cd:6c:09:b1:ee:a0:dd:f6:48:18:0f:cd:ec:0b:
                    df:f5:9f:2a:6c:38:75:72:d9:a8:fa:44:75:2c:15:
                    83:b2:41:d9:ab:2d:27:31:00:ea:87:3f:2f:0f:3c:
                    0f:52:86:c9:44:a7:54:2e:84:90:e8:59:9d:19:27:
                    92:0a:3f:85:21:f6:09:ad:b5:8d:9c:65:ba:c4:b4:
                    26:f0:de:94:d5:a9:6c:09:75:4e:47:b8:51:e0:29:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:74:9C:C9:F3:B7:6E:F7:66:59:49:32:3E:93:0E:97:0C:BD:14:93
            X509v3 Authority Key Identifier:
                keyid:B9:20:01:87:1A:07:D0:3B:31:A6:C8:90:43:6B:41:24:9F:AC:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/3137302e38332e36382e302f32322d3234203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:dc:27:77:78:cd:8c:e3:0a:bd:c3:7f:19:e1:71:4a:44:68:
         ab:34:63:a3:98:5b:9b:47:ed:09:d1:de:b5:75:92:df:9b:5d:
         c3:6f:ce:22:40:b5:b9:2f:b9:92:0e:6d:80:1a:9b:b4:75:0d:
         0d:12:dd:a1:64:d3:35:4b:24:01:88:f5:de:b1:6b:44:41:a4:
         9a:0d:62:0e:45:f1:75:23:67:91:87:2f:b0:48:ee:3f:a7:30:
         96:c9:07:60:ca:2e:59:3f:e5:70:67:c8:e1:a9:cc:ed:38:07:
         0c:d3:93:d7:19:3a:f3:61:e5:0b:96:3c:b6:6e:63:fc:0c:67:
         92:13:a6:9b:ba:ef:d9:47:44:99:ab:b5:e9:e7:94:8a:27:8b:
         73:16:30:54:bf:bb:95:57:46:65:9c:a7:a5:e3:56:f5:23:0c:
         76:ca:db:67:c6:6c:05:e6:52:f1:15:02:3c:72:35:02:14:f4:
         8b:05:71:8b:7c:f4:8b:ec:1a:b8:80:c6:78:de:68:2d:5f:eb:
         64:58:39:ee:a5:46:cd:a1:b0:9c:0c:0a:da:79:75:c7:fa:9c:
         3a:9e:af:d5:5c:6c:29:ad:a0:4f:bb:dc:8e:a9:b2:1e:e7:42:
         c3:36:d1:57:13:ef:6e:d7:2e:ae:11:b0:f3:26:1f:7b:c3:59:
         52:4a:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:33:21 2025 by rpki-client