Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/3137302e3233312e3130382e302f32322d3234203d3e20323635303533.roa
File:                     3137302e3233312e3130382e302f32322d3234203d3e20323635303533.roa (raw, json)
Hash identifier:          EOgwtNBBilmt1ZX709JnCShQA9MyJrp20Et/adECCZc=
Subject key identifier:   5E:7D:B1:CF:FC:59:6D:8D:36:2E:46:87:F8:01:F1:60:20:CC:F1:B3
Certificate issuer:       /CN=EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF
Certificate serial:       7A71B1AA2D04E6E1836A7CAA160BBA9056796107
Authority key identifier: EB:B9:51:B5:7F:CD:B4:FC:B1:62:FE:5C:BA:65:54:D2:2C:AD:4B:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/3137302e3233312e3130382e302f32322d3234203d3e20323635303533.roa
Signing time:             Thu 06 Mar 2025 10:55:32 +0000
ROA not before:           Thu 06 Mar 2025 10:50:32 +0000
ROA not after:            Thu 05 Mar 2026 10:55:32 +0000
asID:                     265053
IP address blocks:        170.231.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.crl
                          rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:71:b1:aa:2d:04:e6:e1:83:6a:7c:aa:16:0b:ba:90:56:79:61:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF
        Validity
            Not Before: Mar  6 10:50:32 2025 GMT
            Not After : Mar  5 10:55:32 2026 GMT
        Subject: CN=5E7DB1CFFC596D8D362E4687F801F16020CCF1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a3:7a:c7:90:d9:f8:ad:92:4b:a8:e1:01:28:
                    ca:5c:2a:43:1e:50:e7:0b:85:68:d5:48:83:36:2f:
                    70:07:36:4a:d6:85:69:7a:44:37:92:eb:2c:28:62:
                    88:86:46:26:a8:24:96:79:e1:bc:ac:47:70:5b:69:
                    9a:ca:38:69:e9:3a:d0:e1:27:91:e7:9c:73:9c:dc:
                    63:93:0b:1d:4f:cd:96:f5:71:eb:c6:b0:d7:77:cc:
                    26:ed:bb:24:bb:f4:73:ab:1d:c4:d6:3c:98:08:0a:
                    7c:04:2a:74:aa:85:75:fa:4f:0d:5d:00:d3:8d:e7:
                    18:df:6e:7c:32:22:5f:9a:37:81:8a:6a:cf:f7:00:
                    ab:c2:98:e4:5e:02:0a:7d:8f:02:3f:d7:ad:70:48:
                    b1:38:ca:4b:77:4e:86:fa:0a:59:50:ad:ec:f7:b8:
                    5c:69:43:73:7d:00:b9:48:cc:a9:45:02:f8:5d:47:
                    d6:e6:d9:44:96:8f:bc:e2:d0:1d:f9:ba:01:bf:7c:
                    c8:fb:23:2e:c4:d4:59:33:12:31:09:83:fc:c8:c6:
                    6c:61:e8:40:0c:65:a4:cb:97:b8:3d:28:30:c0:1b:
                    9e:f6:f9:5f:8d:24:68:64:34:4d:54:57:cd:10:2f:
                    47:b8:ea:f8:f6:1e:ec:e9:35:b8:0d:e6:1d:54:41:
                    2b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7D:B1:CF:FC:59:6D:8D:36:2E:46:87:F8:01:F1:60:20:CC:F1:B3
            X509v3 Authority Key Identifier:
                keyid:EB:B9:51:B5:7F:CD:B4:FC:B1:62:FE:5C:BA:65:54:D2:2C:AD:4B:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB951B57FCDB4FCB162FE5CBA6554D22CAD4BBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHNsGYhEF1unP8E4NgohPEcfmwcuCkM8bJBV6sfc4Rnt/1/3137302e3233312e3130382e302f32322d3234203d3e20323635303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:48:67:bf:61:54:f4:48:c3:59:40:4d:c3:f1:1c:54:9e:66:
         63:57:6b:c9:56:57:76:d2:f0:08:cd:69:3e:4b:f0:9e:e7:d1:
         be:ad:84:74:77:35:32:6a:36:24:1d:7f:f9:21:39:62:87:f9:
         63:1d:14:83:93:d2:e7:ec:e5:c0:95:23:2f:78:a2:fc:95:31:
         9f:f4:4f:64:60:11:ec:65:ef:03:25:40:a2:ff:85:76:4f:77:
         af:ae:fe:0f:ec:e5:67:71:bb:df:1d:96:1e:88:3a:57:32:08:
         0f:25:47:1f:7f:18:a2:4e:db:e9:ab:0f:3c:ad:96:db:c9:db:
         a7:9c:b8:cd:24:18:7f:9a:37:ec:aa:94:e8:8e:e9:a9:5a:fa:
         b2:bb:fb:b3:55:61:98:57:ec:91:1e:f0:95:9a:f8:0d:97:e9:
         3e:e8:39:5b:61:8d:51:0d:0c:5e:2c:72:b7:d3:cb:01:c2:1e:
         c6:f8:37:91:d1:76:7d:1a:9c:f9:89:27:2e:bb:ef:4a:e9:4e:
         20:07:80:8a:1c:b7:f0:5b:46:40:f1:fa:b2:b2:2b:75:15:f6:
         d0:3c:35:ce:71:32:0c:8f:46:6c:7a:17:a8:b1:79:4b:f0:99:
         10:4e:85:d0:71:7c:73:85:cb:98:d0:68:3f:ba:5d:b5:97:a6:
         5b:c8:e0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:24:01 2025 by rpki-client