Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/3137392e3130392e3131332e302f32342d3234203d3e20323730373431.roa
File:                     3137392e3130392e3131332e302f32342d3234203d3e20323730373431.roa (raw, json)
Hash identifier:          jPyLfNm2kmcBPYORiX0ph7OsZlhjgiNrlUNMywIsZY8=
Subject key identifier:   E3:A1:E6:9E:A0:DE:DC:D3:3A:C0:CE:1E:99:7E:04:C8:8A:10:94:2B
Certificate issuer:       /CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
Certificate serial:       1F2EF835326C7B17278CE0057E68D49904AAC77C
Authority key identifier: 60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/3137392e3130392e3131332e302f32342d3234203d3e20323730373431.roa
Signing time:             Tue 04 Feb 2025 15:39:30 +0000
ROA not before:           Tue 04 Feb 2025 15:34:30 +0000
ROA not after:            Tue 03 Feb 2026 15:39:30 +0000
asID:                     270741
IP address blocks:        179.109.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl
                          rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 12:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2e:f8:35:32:6c:7b:17:27:8c:e0:05:7e:68:d4:99:04:aa:c7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
        Validity
            Not Before: Feb  4 15:34:30 2025 GMT
            Not After : Feb  3 15:39:30 2026 GMT
        Subject: CN=E3A1E69EA0DEDCD33AC0CE1E997E04C88A10942B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:86:f3:e7:e0:3d:7e:2a:f5:d0:45:ee:b7:64:
                    84:3b:12:92:ae:ec:1f:93:2f:c7:33:00:ca:30:a8:
                    32:0a:df:dd:e0:0e:fa:76:18:be:69:8d:cc:cc:79:
                    0a:76:a0:a9:e4:54:36:7b:cb:b9:a3:0d:68:45:a1:
                    50:81:7b:f7:68:62:76:fb:1f:42:0f:3a:c0:36:8e:
                    b4:43:db:c5:fd:c0:ae:ba:12:08:4f:d5:1f:20:a8:
                    83:19:21:67:00:9b:1d:d9:2d:a5:85:53:7c:b4:06:
                    40:59:0f:5d:9d:01:cb:93:8f:1a:1c:f7:6e:a0:6a:
                    ef:f7:13:5d:fa:0c:5d:2e:bf:4f:12:b6:60:97:2a:
                    d9:77:97:a4:85:77:26:ec:bc:4c:7d:d0:1c:1a:8e:
                    39:fe:07:21:a3:bf:97:d0:b5:7d:cd:d3:44:a1:81:
                    22:76:3b:49:91:51:99:c2:cd:37:58:82:8c:2b:1f:
                    56:1f:96:0e:63:b8:80:4f:f5:aa:f5:bb:51:c0:6b:
                    e5:f7:ba:e0:c4:67:80:6f:69:aa:ec:fd:bc:6a:b0:
                    6d:dd:f6:49:1f:d7:4c:42:28:ad:98:14:56:3a:99:
                    d9:8a:85:17:a2:7c:3c:5a:d6:c2:dc:4d:1f:c4:f0:
                    31:5e:ea:d3:b8:ed:e2:5d:26:03:9c:a4:22:0f:03:
                    d4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A1:E6:9E:A0:DE:DC:D3:3A:C0:CE:1E:99:7E:04:C8:8A:10:94:2B
            X509v3 Authority Key Identifier:
                keyid:60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/3137392e3130392e3131332e302f32342d3234203d3e20323730373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:64:e8:06:cf:97:98:a1:c7:0a:e3:6a:fd:95:40:94:07:31:
         8f:97:14:55:6b:04:6f:8d:09:7d:32:20:6d:2f:04:1c:bf:af:
         4c:42:f8:8b:e9:27:33:5a:f6:ee:7f:dc:93:3b:9a:08:b3:61:
         32:1e:32:c7:a8:a3:bd:78:31:bb:81:95:fc:5a:cd:c9:2b:52:
         4d:b9:4f:ae:cf:53:c8:67:83:66:ad:73:36:77:4a:8a:4b:8e:
         7c:37:03:ee:e8:0b:0c:3e:f1:9b:2d:31:68:21:00:de:70:8b:
         0b:2c:c2:d8:19:2a:db:41:11:89:08:d9:78:80:c9:8e:f5:1f:
         8c:e8:5c:6d:7a:8e:d3:3d:0d:55:a2:ba:f6:27:f8:94:61:84:
         58:5e:d1:9d:34:f9:04:e6:6f:6e:09:b1:ea:f1:3a:c7:d0:86:
         49:20:1f:b7:f4:38:ba:27:24:67:5b:42:af:26:c8:a2:f2:81:
         94:fc:ad:e0:2a:1c:32:cb:c6:8c:86:f8:92:64:99:3f:3b:36:
         40:eb:7b:90:2a:0e:36:54:0d:87:ad:7e:71:6b:bb:f3:00:dd:
         63:ac:72:d4:3d:36:33:4f:d2:53:7a:94:6b:aa:ef:66:b7:94:
         d6:50:f8:fa:2d:4e:42:d3:ea:17:ac:cb:b0:f0:24:27:fa:8c:
         74:87:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:08:02 2025 by rpki-client