Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132322e302f32332d3233203d3e20323635303830.roa
File:                     3137302e3233332e3132322e302f32332d3233203d3e20323635303830.roa (raw, json)
Hash identifier:          rBsCM2T5sM5ixhGOfaq9nSlrSHfZ9ypqUvnwGFfIvpI=
Subject key identifier:   71:90:19:D9:1C:77:D0:EB:35:26:43:27:3C:16:BC:D5:E4:1B:7F:2A
Certificate issuer:       /CN=1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0
Certificate serial:       564A8617FC339D960397AC02D52CE945EDFA9196
Authority key identifier: 1D:C2:A9:E1:70:84:A1:FF:48:DC:F3:DA:9B:DC:1A:FF:64:BC:E4:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132322e302f32332d3233203d3e20323635303830.roa
Signing time:             Mon 07 Apr 2025 18:32:21 +0000
ROA not before:           Mon 07 Apr 2025 18:27:21 +0000
ROA not after:            Mon 06 Apr 2026 18:32:21 +0000
asID:                     265080
IP address blocks:        170.233.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.crl
                          rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4a:86:17:fc:33:9d:96:03:97:ac:02:d5:2c:e9:45:ed:fa:91:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0
        Validity
            Not Before: Apr  7 18:27:21 2025 GMT
            Not After : Apr  6 18:32:21 2026 GMT
        Subject: CN=719019D91C77D0EB352643273C16BCD5E41B7F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:12:53:fc:83:ec:53:d5:18:d4:8e:db:c6:a1:
                    b8:5f:55:3a:7e:59:1d:72:86:be:94:89:0a:7a:f5:
                    b1:4d:70:d2:73:02:44:fc:fd:71:5d:ff:b7:7d:57:
                    82:f6:76:e0:17:da:ee:28:b0:8c:95:b0:5b:3b:fa:
                    36:83:92:8a:05:ee:84:79:42:7c:f5:35:f7:f8:fe:
                    04:32:8e:0e:0e:3d:d7:6c:a6:3b:c4:97:76:92:a1:
                    8f:4e:ce:54:5b:c0:04:db:d5:5b:da:11:ea:0c:95:
                    7a:10:92:7b:e0:6c:8c:41:61:d6:a0:51:5d:ff:3e:
                    98:cc:49:91:46:ea:09:e2:5d:e2:39:e1:cd:e3:8a:
                    fd:e1:68:b8:21:39:0f:6a:1f:f4:a4:64:fc:2f:ac:
                    cd:ba:38:7f:a1:70:0c:65:1c:4b:bc:45:88:8b:8b:
                    ee:25:45:59:1a:e1:73:74:c6:23:b4:3b:e2:52:26:
                    34:07:5c:44:60:34:ec:8d:5d:8c:2c:e8:89:8a:0e:
                    39:54:94:a7:1f:ad:3d:12:20:1b:6a:2d:70:d3:e0:
                    4c:9f:5f:a7:a4:c2:3c:df:2d:78:4a:f8:c9:bf:2a:
                    59:2b:75:d7:2f:69:36:06:7c:46:be:79:6a:cb:ee:
                    ae:85:c7:da:85:4e:23:ff:de:9e:5b:08:42:8d:b0:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:90:19:D9:1C:77:D0:EB:35:26:43:27:3C:16:BC:D5:E4:1B:7F:2A
            X509v3 Authority Key Identifier:
                keyid:1D:C2:A9:E1:70:84:A1:FF:48:DC:F3:DA:9B:DC:1A:FF:64:BC:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132322e302f32332d3233203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:b6:b1:27:07:ec:1d:0a:d6:8b:c0:53:64:bf:3f:2b:21:93:
         5c:69:bb:41:f1:b4:19:9e:f2:d1:7c:a3:7d:63:9d:58:19:31:
         3a:cb:2e:43:1c:c1:29:82:b8:9c:75:6a:87:05:b5:d0:a5:9c:
         0a:cc:dd:3b:59:95:17:2e:fd:d3:62:d4:c8:a9:49:9d:10:50:
         66:bc:fb:53:a4:9a:f6:a9:46:12:cf:a8:1e:0d:f5:f5:45:04:
         9e:fa:37:e3:08:a8:66:eb:ed:36:1a:ba:e3:f0:21:41:86:d4:
         ed:5a:71:93:5d:c1:e0:cf:49:46:42:80:39:bd:49:2b:88:04:
         59:bc:80:a9:cd:f1:74:87:9c:7e:7f:90:08:8e:75:54:12:fc:
         65:18:f5:70:fc:77:50:fe:d8:87:5f:33:34:f3:ee:3c:98:e9:
         99:30:92:59:e3:55:fe:50:fe:b6:6f:d2:cc:10:45:74:5c:bc:
         b3:6b:f8:a6:5c:fe:7b:5b:01:67:13:13:bf:a1:1e:1f:00:07:
         fa:7a:b6:b4:4e:cf:4e:b4:60:c0:d9:ec:cd:c8:8e:25:85:1a:
         f2:66:eb:45:8c:e0:30:1e:f3:a0:c5:ce:45:3d:5e:00:53:d1:
         67:2f:8e:51:0b:c1:40:91:82:39:7b:69:8e:cb:ee:66:e0:17:
         77:1b:2e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:39:13 2025 by rpki-client