Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232302e302f32342d3234203d3e20323636343438.roa
File:                     3137302e38322e3232302e302f32342d3234203d3e20323636343438.roa (raw, json)
Hash identifier:          qLtEUyKCa/qnfXR1siz3cCkL52L+n+z2wIw2bkS9V1s=
Subject key identifier:   31:27:EA:7A:5D:CC:E5:09:D8:CE:36:76:DC:36:D9:52:62:C3:88:D2
Certificate issuer:       /CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
Certificate serial:       688CB9B0F801339E0C946322CF354112A25AC5E4
Authority key identifier: 10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232302e302f32342d3234203d3e20323636343438.roa
Signing time:             Thu 06 Mar 2025 04:42:08 +0000
ROA not before:           Thu 06 Mar 2025 04:37:08 +0000
ROA not after:            Thu 05 Mar 2026 04:42:08 +0000
asID:                     266448
IP address blocks:        170.82.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl
                          rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 22:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8c:b9:b0:f8:01:33:9e:0c:94:63:22:cf:35:41:12:a2:5a:c5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
        Validity
            Not Before: Mar  6 04:37:08 2025 GMT
            Not After : Mar  5 04:42:08 2026 GMT
        Subject: CN=3127EA7A5DCCE509D8CE3676DC36D95262C388D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c0:78:7d:b0:fb:fe:f7:a7:b2:a4:87:6c:ee:
                    1f:d6:37:5c:ba:e1:48:e8:c1:04:61:b8:a7:4f:80:
                    1a:bf:f2:36:c6:14:f5:b6:29:ec:8b:8d:3f:0f:4a:
                    6e:8f:06:76:92:a0:3f:78:45:05:76:90:4f:97:21:
                    d7:e7:ed:c5:5b:26:26:fe:ea:42:64:ae:86:ed:6c:
                    29:5e:20:bb:e2:cd:7a:93:8a:b1:a6:5c:a5:9a:92:
                    9a:96:0c:50:4c:ba:ac:02:c7:5b:7d:81:f5:a4:01:
                    e5:77:f4:81:df:7c:32:70:77:70:d1:99:40:c2:c2:
                    ee:22:e9:f0:2c:d4:8c:04:5e:b5:7e:4e:af:a5:6f:
                    06:2b:a9:31:8e:6e:6f:88:82:01:4c:65:02:fc:b4:
                    16:7c:2e:78:78:84:52:97:0b:50:9f:18:7b:1b:02:
                    18:95:2c:4b:6b:91:57:7f:0e:68:4a:99:05:df:01:
                    f2:8f:71:d6:8c:e0:7a:55:95:42:a2:ff:30:04:f8:
                    94:cc:fe:2e:8c:5a:2c:dd:40:56:b4:9f:54:0f:7f:
                    08:23:b1:23:76:51:22:6d:e1:b4:31:fe:8a:97:cf:
                    11:49:d2:7a:c0:4d:7c:79:63:3e:80:3c:b9:a0:c6:
                    e0:31:62:15:80:fc:6d:99:8f:b8:a0:ae:09:13:93:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:27:EA:7A:5D:CC:E5:09:D8:CE:36:76:DC:36:D9:52:62:C3:88:D2
            X509v3 Authority Key Identifier:
                keyid:10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232302e302f32342d3234203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:b6:5e:01:8f:8b:88:f4:07:6c:39:f1:f8:84:8c:f3:95:3e:
         14:72:58:06:21:55:3b:d4:25:51:60:01:50:68:bb:b7:f1:be:
         74:8e:10:5a:63:eb:bc:f9:bb:d7:86:bb:9e:e5:6a:21:3e:e9:
         e9:7b:66:19:f4:22:e2:0a:4c:73:5d:67:08:41:f7:99:65:7f:
         d0:f9:ca:c0:85:3f:f3:2b:3d:98:ba:b9:12:4b:cf:c4:d7:dd:
         5a:3b:53:60:b0:55:a7:71:47:5e:9e:56:d0:68:b9:3a:ae:18:
         f7:97:40:f2:7e:62:d6:2a:49:26:bf:15:76:c9:e2:02:84:0a:
         85:97:7f:5d:d5:94:a0:dc:b8:b1:0b:7d:a9:cc:b2:1b:e2:4d:
         ee:ab:80:85:da:25:9d:e8:1c:e1:92:fc:af:38:29:7d:e8:92:
         bb:35:fd:42:01:0a:fb:50:86:9b:72:7b:f8:37:be:08:21:a6:
         ad:a0:fb:76:0a:f3:af:07:27:93:69:dc:1a:4f:d6:39:cf:ee:
         72:ef:72:68:92:92:ab:5d:d6:39:b6:07:47:f2:35:69:4d:0e:
         58:cb:94:79:8a:32:01:ef:f6:1a:ea:72:0d:e3:b6:dc:77:9f:
         aa:cc:1c:e2:00:e1:cb:f9:d0:6c:d3:d1:b0:94:6c:b5:4a:21:
         3f:78:dc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:22:54 2025 by rpki-client