Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/3139312e33372e3137302e36342f32382d3238203d3e20323731303233.roa
File:                     3139312e33372e3137302e36342f32382d3238203d3e20323731303233.roa (raw, json)
Hash identifier:          +jWW6bErvDH+p97HQB5PcfhUmhwAhJg9ry7AtQj8WHs=
Subject key identifier:   8A:2A:63:A2:20:BA:72:E4:DA:69:6E:F5:1A:03:D6:77:62:72:0A:38
Certificate issuer:       /CN=83D0155F5069287D4AA91D06FC515095D8B510B8
Certificate serial:       38097B9FC730E1BAFEECB267ABD2D010524CCD0F
Authority key identifier: 83:D0:15:5F:50:69:28:7D:4A:A9:1D:06:FC:51:50:95:D8:B5:10:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/3139312e33372e3137302e36342f32382d3238203d3e20323731303233.roa
Signing time:             Thu 06 Mar 2025 14:16:59 +0000
ROA not before:           Thu 06 Mar 2025 14:11:59 +0000
ROA not after:            Thu 05 Mar 2026 14:16:59 +0000
asID:                     271023
IP address blocks:        191.37.170.64/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.crl
                          rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:09:7b:9f:c7:30:e1:ba:fe:ec:b2:67:ab:d2:d0:10:52:4c:cd:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D0155F5069287D4AA91D06FC515095D8B510B8
        Validity
            Not Before: Mar  6 14:11:59 2025 GMT
            Not After : Mar  5 14:16:59 2026 GMT
        Subject: CN=8A2A63A220BA72E4DA696EF51A03D67762720A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:39:20:39:3a:e4:ec:17:b9:15:24:8d:25:
                    fb:12:a0:57:66:a4:00:3c:de:a3:5a:36:79:3f:a8:
                    9a:f8:2f:1f:88:99:ae:98:50:11:54:d8:60:c6:e6:
                    01:20:dd:ea:f9:2e:c7:30:d9:3c:cf:8d:f6:1d:01:
                    be:b0:b4:05:7f:1a:76:a7:98:31:a8:ad:fb:6b:c3:
                    c5:c7:fc:9e:0f:6a:ba:b3:5c:09:88:ed:e2:78:42:
                    55:02:bc:65:a6:26:67:7e:32:f6:4a:22:61:5b:9d:
                    7b:19:08:60:5a:e1:99:ad:16:87:d1:45:e4:f8:51:
                    13:cb:dc:88:43:a3:4d:41:fa:a5:90:a4:48:bb:c6:
                    fe:d5:2d:e7:2b:08:d2:c1:dc:f8:0a:cb:e9:21:48:
                    d9:86:bb:6a:b4:a6:75:c7:a1:ac:bf:92:98:7b:7e:
                    ec:92:82:fe:6e:45:64:9f:aa:f6:56:d2:da:de:29:
                    e3:b6:7c:79:0a:dc:e4:22:27:9c:84:fb:ca:a9:8b:
                    ff:6a:82:c6:e0:3b:73:2b:79:ad:ac:e3:9e:b4:46:
                    5e:1f:00:d3:4e:09:6a:8a:c3:10:a6:7a:03:17:73:
                    01:79:96:84:78:10:ae:16:bb:fa:29:c6:24:93:cf:
                    4b:52:20:22:eb:3b:d7:95:d1:cc:31:e2:74:66:f1:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2A:63:A2:20:BA:72:E4:DA:69:6E:F5:1A:03:D6:77:62:72:0A:38
            X509v3 Authority Key Identifier:
                keyid:83:D0:15:5F:50:69:28:7D:4A:A9:1D:06:FC:51:50:95:D8:B5:10:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/83D0155F5069287D4AA91D06FC515095D8B510B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83D0155F5069287D4AA91D06FC515095D8B510B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtucmGoSpqxj1FHUB3KyCDxwK2RX9BSNGdayHTfwe4wu/1/3139312e33372e3137302e36342f32382d3238203d3e20323731303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.170.64/28

    Signature Algorithm: sha256WithRSAEncryption
         88:7a:85:79:78:06:89:76:9e:e9:9d:e4:dc:50:e9:9b:4a:65:
         ac:9b:2d:b7:26:19:d0:56:b7:ba:75:8d:de:3f:62:fc:97:c5:
         28:6b:2a:65:c2:67:4f:bd:3e:ee:18:7a:43:60:13:4d:ef:85:
         08:f7:5a:42:d1:2e:6f:c2:e8:54:dd:c2:11:27:93:5f:2e:9a:
         5a:55:43:c7:b5:d7:bf:67:64:00:2f:b1:dc:5c:29:36:ae:2a:
         94:01:45:c5:57:e7:22:d3:d0:48:e5:ef:67:c1:c0:29:e3:d5:
         bd:73:4f:1d:0a:76:40:dc:e3:26:f1:39:08:37:e5:34:17:99:
         fe:e8:7b:27:f5:1d:66:a3:f4:07:a1:7a:34:56:22:1b:fe:f0:
         38:5d:04:ce:f5:73:23:81:00:3e:38:71:b8:40:f4:50:4e:19:
         ad:5e:10:b0:3f:0e:c4:03:d3:61:e1:df:b9:b7:f3:93:2e:3c:
         cf:d5:b9:70:5a:b8:e1:22:0a:c2:71:c6:f5:2d:51:d4:6f:08:
         85:98:1b:75:bd:76:b3:dc:0a:9c:57:5b:fb:82:5e:9d:d6:72:
         a8:a0:3d:7c:89:59:2d:df:df:94:e6:40:6f:66:9d:19:b0:59:
         c0:42:b1:87:75:f2:85:fd:6d:51:86:e7:71:d4:58:b8:b3:6c:
         99:82:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:10 2025 by rpki-client