Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/3137302e3234372e33382e302f32342d3234203d3e20323634353234.roa
File:                     3137302e3234372e33382e302f32342d3234203d3e20323634353234.roa (raw, json)
Hash identifier:          qAKDKmSqOd4m04rBG0B0QKITEXRiISO5wRBY74OfeVU=
Subject key identifier:   E2:5A:31:BC:74:05:FE:16:BE:68:A1:D1:12:7B:0D:D4:2B:F8:67:33
Certificate issuer:       /CN=26FA74E0D62EEDA20044D86ED870C4AC8AF90B99
Certificate serial:       632E842065811C4E2A088DCF04AA25F875D3A3C4
Authority key identifier: 26:FA:74:E0:D6:2E:ED:A2:00:44:D8:6E:D8:70:C4:AC:8A:F9:0B:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/3137302e3234372e33382e302f32342d3234203d3e20323634353234.roa
Signing time:             Thu 06 Mar 2025 03:42:06 +0000
ROA not before:           Thu 06 Mar 2025 03:37:06 +0000
ROA not after:            Thu 05 Mar 2026 03:42:06 +0000
asID:                     264524
IP address blocks:        170.247.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.crl
                          rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2e:84:20:65:81:1c:4e:2a:08:8d:cf:04:aa:25:f8:75:d3:a3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26FA74E0D62EEDA20044D86ED870C4AC8AF90B99
        Validity
            Not Before: Mar  6 03:37:06 2025 GMT
            Not After : Mar  5 03:42:06 2026 GMT
        Subject: CN=E25A31BC7405FE16BE68A1D1127B0DD42BF86733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:3d:ac:ae:08:aa:0b:a0:5a:58:a4:f6:2a:
                    0d:c9:8b:c4:7d:8f:3e:31:61:06:71:4e:3c:2f:54:
                    ef:20:94:41:cd:52:e5:db:32:48:69:1b:ce:ab:1a:
                    40:1d:a6:34:58:8d:f5:f2:32:8a:de:dc:3c:58:eb:
                    21:6c:40:6e:e1:22:27:38:13:9c:11:bf:fc:dc:be:
                    63:d6:f5:98:06:ab:19:79:5a:1e:5d:57:4c:08:44:
                    05:d6:4c:49:41:a6:43:b7:6d:34:ba:f1:7d:03:cb:
                    8c:cf:fb:98:6a:e2:56:1e:48:3d:3a:99:73:2e:f6:
                    70:13:28:37:db:21:b4:24:58:5f:57:5a:11:dc:3b:
                    c2:c4:9b:cb:11:e8:e8:76:11:31:20:1e:1a:08:a5:
                    8d:26:c5:b4:be:f3:46:4d:27:85:b0:96:33:a6:61:
                    6b:c7:09:5b:b2:1c:79:8a:f5:1d:22:3c:b8:fc:04:
                    17:1b:2b:25:ac:62:d2:99:92:ec:19:8c:b2:59:9a:
                    4d:a4:61:d1:66:ab:f0:73:f1:b6:30:c3:35:55:5a:
                    e8:1f:6f:52:a8:fb:1a:aa:35:a6:05:19:58:4c:f5:
                    92:42:b9:b2:b5:98:c7:c7:86:ca:8b:f7:0d:f4:8d:
                    26:6e:cd:9a:4e:03:6a:8f:30:d4:13:07:6c:d5:4e:
                    b9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5A:31:BC:74:05:FE:16:BE:68:A1:D1:12:7B:0D:D4:2B:F8:67:33
            X509v3 Authority Key Identifier:
                keyid:26:FA:74:E0:D6:2E:ED:A2:00:44:D8:6E:D8:70:C4:AC:8A:F9:0B:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/3137302e3234372e33382e302f32342d3234203d3e20323634353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:cf:a2:b4:f9:48:a9:b3:c0:dd:74:2e:61:5f:0c:ea:32:5c:
         c5:51:70:20:29:e9:6a:2c:ba:6b:ec:01:1f:d1:c5:a7:9c:66:
         26:4f:37:36:6c:e3:c9:d6:40:c3:a7:62:fd:1c:16:e2:cd:94:
         02:e8:17:82:eb:6d:a1:87:c7:68:b0:46:16:c0:af:64:02:d3:
         b0:53:3d:35:09:fd:06:3f:89:bf:dc:ea:83:15:48:27:e3:00:
         7d:87:87:28:7c:15:09:9a:21:ec:0e:1a:39:4a:1f:12:ba:8c:
         b3:b4:6e:ac:42:9f:95:0f:14:59:64:99:88:30:cb:0c:4b:72:
         e3:37:18:09:6d:51:c6:ef:42:bc:53:b7:a5:b0:d3:b7:f4:a3:
         20:4e:78:f4:c0:d7:ec:19:32:fd:f1:b3:6d:e5:e4:d7:58:ba:
         0a:fd:0c:fc:77:82:27:9e:17:b8:9f:02:cf:40:29:d0:07:59:
         ce:52:d6:ec:aa:e7:17:e1:11:af:01:b3:b8:63:4a:81:a1:8e:
         1a:36:9f:a3:81:9f:5c:91:ce:41:e8:a3:0e:92:e2:ac:b9:de:
         f0:a7:1f:25:d3:fb:ca:4b:fc:71:99:e8:16:5d:ca:b7:b7:15:
         60:d4:98:10:39:0e:33:ef:e9:eb:dc:4a:88:1d:8c:14:7f:17:
         2f:1f:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:58:57 2025 by rpki-client