Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3137302e3234342e3133352e302f32342d3234203d3e20323633303738.roa
File:                     3137302e3234342e3133352e302f32342d3234203d3e20323633303738.roa (raw, json)
Hash identifier:          SjpARceEt9WjEhRRGrKVAeVaCA+ojqLAmWQ5bnWmyZY=
Subject key identifier:   3D:09:35:EF:29:CE:54:15:44:5E:BE:33:47:28:61:4D:BA:31:2D:05
Certificate issuer:       /CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB
Certificate serial:       388DA11082346A05B941923DA74D6E99E5018BF2
Authority key identifier: 6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3137302e3234342e3133352e302f32342d3234203d3e20323633303738.roa
Signing time:             Thu 06 Mar 2025 18:50:28 +0000
ROA not before:           Thu 06 Mar 2025 18:45:28 +0000
ROA not after:            Thu 05 Mar 2026 18:50:28 +0000
asID:                     263078
IP address blocks:        170.244.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl
                          rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:8d:a1:10:82:34:6a:05:b9:41:92:3d:a7:4d:6e:99:e5:01:8b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB
        Validity
            Not Before: Mar  6 18:45:28 2025 GMT
            Not After : Mar  5 18:50:28 2026 GMT
        Subject: CN=3D0935EF29CE5415445EBE334728614DBA312D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:8c:54:b7:62:35:1c:49:2a:0e:67:d8:04:
                    83:8b:b6:0d:db:ec:b9:59:7f:b3:e9:b6:08:91:6a:
                    9c:ce:16:2c:b1:c0:89:16:e6:51:33:69:f0:b2:63:
                    cb:ad:34:8e:f4:60:e3:01:64:3c:74:f9:76:ab:42:
                    a1:1a:c4:b1:3e:36:32:40:b7:88:d6:10:08:6c:85:
                    2d:78:a6:57:6e:35:2f:d2:6f:1f:2b:74:c0:00:27:
                    aa:45:c6:c7:13:c7:aa:18:8d:16:21:f4:0b:c0:9c:
                    66:5a:be:7d:be:a4:47:dd:39:51:18:9d:d3:8d:f7:
                    7f:d8:9d:a8:7e:5d:58:70:d7:1a:56:be:a8:5c:85:
                    87:19:40:2b:bf:b3:11:99:36:4a:07:70:9c:0d:de:
                    3a:f0:9a:5f:e7:ea:f6:61:f0:f8:e2:e0:f9:33:72:
                    6f:29:61:84:46:67:42:47:c1:c2:52:26:66:69:86:
                    7a:80:b3:14:0d:be:45:95:e0:0b:15:26:73:e9:be:
                    2f:5f:1e:c7:39:bc:5e:95:65:c5:6c:db:00:e9:3a:
                    46:e8:61:7a:b6:72:51:80:56:ee:fc:55:c4:15:c9:
                    21:3d:04:01:64:cc:d2:4b:b5:6f:c2:1b:33:7a:8d:
                    b7:be:d6:df:77:2c:a6:75:da:12:d9:be:93:81:81:
                    96:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:09:35:EF:29:CE:54:15:44:5E:BE:33:47:28:61:4D:BA:31:2D:05
            X509v3 Authority Key Identifier:
                keyid:6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3137302e3234342e3133352e302f32342d3234203d3e20323633303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:b3:b5:87:a4:e1:f5:26:52:63:92:9e:b9:7b:fb:dd:0c:7d:
         20:cc:c5:75:80:77:ce:73:46:dd:d0:90:30:fa:69:d6:e8:95:
         78:02:d0:d2:de:87:b2:8d:e7:49:32:ca:e8:a2:a0:d8:82:f1:
         a5:03:3a:8b:ea:8d:02:89:7a:98:00:b8:70:74:3b:b2:75:e9:
         ab:c4:f7:9d:6e:48:8d:fa:8a:86:f3:d7:02:b0:b8:8d:b5:01:
         9a:f3:0e:f4:77:ca:8e:c0:f2:b1:62:47:69:ed:77:7d:4b:71:
         29:73:3e:72:ed:38:97:a2:02:ce:83:f1:c5:3d:6f:f2:c4:6a:
         a8:76:61:d4:b3:7c:98:21:ee:14:ec:ed:a9:a7:e4:0a:c5:a8:
         b2:5e:53:83:05:1b:35:ba:48:b5:c6:7e:2d:6a:b8:df:ce:e2:
         7a:67:6a:88:e8:37:9b:cb:bf:52:ce:95:05:30:3f:1d:e9:de:
         ad:3b:85:1a:e1:7e:f4:1e:17:0b:c8:11:5c:6c:9d:e3:4a:b0:
         ae:48:34:91:bf:d9:af:d7:2c:05:9d:b4:69:d2:9d:8b:e5:fc:
         95:d8:7e:ff:b4:c4:60:01:01:b0:0c:87:9d:33:ea:48:0a:0e:
         8c:8c:7e:9c:76:08:be:0e:dd:86:66:03:16:d8:53:04:80:2d:
         55:d0:57:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:26:45 2025 by rpki-client