Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa
File:                     3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (raw, json)
Hash identifier:          91gQ1OFtC7i3YwbFOdgAOt94iN2xUARUXKGh62+Ssos=
Subject key identifier:   C4:9B:A3:35:56:6A:EC:27:F9:D9:FA:67:C2:D7:5A:C8:C0:89:E2:EF
Certificate issuer:       /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
Certificate serial:       1DAAA9775D2FFE2DB6AF3D47EB752CD4C0EA7F3D
Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa
Signing time:             Thu 06 Mar 2025 13:33:18 +0000
ROA not before:           Thu 06 Mar 2025 13:28:18 +0000
ROA not after:            Thu 05 Mar 2026 13:33:18 +0000
asID:                     263496
IP address blocks:        170.244.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl
                          rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 07:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:aa:a9:77:5d:2f:fe:2d:b6:af:3d:47:eb:75:2c:d4:c0:ea:7f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
        Validity
            Not Before: Mar  6 13:28:18 2025 GMT
            Not After : Mar  5 13:33:18 2026 GMT
        Subject: CN=C49BA335566AEC27F9D9FA67C2D75AC8C089E2EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:00:8d:da:78:69:b6:64:65:73:6d:5e:71:fd:
                    7c:38:4c:bc:92:a1:8c:22:9f:d4:b4:50:89:c2:82:
                    28:88:7d:6e:d2:67:21:21:bc:cb:90:ac:c3:99:13:
                    23:9e:b8:dc:6f:0e:ee:d8:ca:ee:e4:39:2a:1e:21:
                    ba:5f:75:27:7d:f5:0f:90:42:f3:7d:51:f6:1e:fd:
                    24:14:b7:77:9e:d8:a3:11:1d:b2:8a:af:8b:ae:7c:
                    74:da:d1:9c:4f:70:d1:95:a8:b9:fc:06:95:9d:fd:
                    5d:bb:a0:be:5f:94:25:2b:b2:12:a6:d5:a5:f2:70:
                    ef:67:64:a0:ab:a4:01:c3:19:07:0e:7f:05:38:a1:
                    aa:06:e9:79:f7:0c:6f:7d:a9:2e:47:54:3b:9b:f6:
                    3e:52:a2:7c:06:4f:36:86:2b:3a:80:26:fd:30:4b:
                    fc:01:42:81:a9:d5:25:25:b3:1b:9b:41:9a:58:06:
                    74:dc:cb:a1:77:c0:cf:91:13:ce:fe:d1:c8:55:8d:
                    e6:df:b4:ef:05:8d:87:98:d3:70:67:3d:e0:d5:a4:
                    dc:5d:61:ea:b5:69:9b:97:31:6f:f3:57:17:88:4e:
                    46:cd:af:fc:c2:a7:fe:4e:0f:a9:bd:c6:90:12:18:
                    c4:1d:d2:18:80:e5:ec:f6:78:61:1b:3f:cd:04:c1:
                    da:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9B:A3:35:56:6A:EC:27:F9:D9:FA:67:C2:D7:5A:C8:C0:89:E2:EF
            X509v3 Authority Key Identifier:
                keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:70:e1:a3:d5:55:b7:c0:46:b6:c1:9c:33:06:6a:e2:1d:19:
         93:73:7f:76:b5:88:8a:a6:25:45:8e:eb:73:ec:1d:22:4d:b9:
         15:ab:d2:89:25:18:19:99:c2:4f:ba:5d:bc:a8:0c:cf:60:c2:
         8b:43:fa:c6:0f:36:98:29:89:8b:2d:78:ab:c5:92:46:a6:9a:
         46:9c:53:4e:61:3e:6b:1c:c1:3f:21:d2:ce:e2:c7:d9:c9:48:
         08:06:cc:fe:53:70:5b:6b:ca:b9:eb:4d:3e:0a:85:10:ae:cc:
         fb:fd:61:85:da:82:96:40:45:17:e6:e3:11:cd:8b:fc:f3:25:
         cc:a0:d0:58:32:9d:50:07:30:c7:77:14:a1:7e:f3:8b:ab:ce:
         03:6a:95:c7:70:13:af:b0:2f:f3:6c:b3:3d:61:8e:6a:ef:a4:
         eb:e0:f3:38:99:fa:c6:51:b1:5c:9e:b7:2d:44:05:66:53:cb:
         78:a6:a4:73:2d:de:ea:d1:f2:cf:13:01:bc:9d:c9:02:43:73:
         07:6a:39:e6:d1:89:a6:33:39:e2:5d:22:b5:39:db:66:b1:9e:
         e4:08:49:c6:35:89:2f:43:89:1c:bc:99:3c:f4:2f:80:24:06:
         d8:34:34:c9:9f:a6:5d:0b:8b:0d:20:ea:2d:8f:ee:7e:94:c1:
         c4:ab:ca:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:11:21 2025 by rpki-client