Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/3137302e38342e37322e302f32322d3332203d3e20323633393435.roa
File:                     3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (raw, json)
Hash identifier:          t8HVSafrX1OjhJjFHS8Bmtbbsk9VCeE3SLniXiYbwmM=
Subject key identifier:   9E:9F:C9:F3:52:DF:1B:55:03:8C:65:E8:5E:5B:DB:4A:8E:FC:96:F5
Certificate issuer:       /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial:       022DBE3C46EED3D01EE878EE132718230CA1D0B7
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/3137302e38342e37322e302f32322d3332203d3e20323633393435.roa
Signing time:             Thu 06 Mar 2025 06:49:07 +0000
ROA not before:           Thu 06 Mar 2025 06:44:07 +0000
ROA not after:            Thu 05 Mar 2026 06:49:07 +0000
asID:                     263945
IP address blocks:        170.84.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl
                          rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 03:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2d:be:3c:46:ee:d3:d0:1e:e8:78:ee:13:27:18:23:0c:a1:d0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
        Validity
            Not Before: Mar  6 06:44:07 2025 GMT
            Not After : Mar  5 06:49:07 2026 GMT
        Subject: CN=9E9FC9F352DF1B55038C65E85E5BDB4A8EFC96F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:b9:ff:42:e2:f1:e1:71:fc:c9:23:9f:92:
                    54:45:1d:37:43:bb:22:27:e1:89:7b:e3:7d:63:0c:
                    c1:7d:50:72:db:5f:38:8b:6c:0d:79:7a:eb:9c:84:
                    f0:27:75:a9:8b:20:c6:eb:d0:96:fe:81:9d:a4:f5:
                    88:db:23:a1:13:ee:3b:66:d5:44:66:2a:84:27:14:
                    12:3f:34:35:a7:40:80:b4:86:b7:e6:5f:ee:f8:81:
                    5b:ea:84:06:9e:20:e9:99:b7:7c:e7:75:0c:ca:d1:
                    41:1f:a6:48:e7:69:f4:14:c4:0f:88:6d:ea:dc:d7:
                    8b:46:42:04:d5:73:78:24:56:20:de:11:28:25:2c:
                    0d:f5:74:0c:12:a6:e2:b4:d7:62:f9:80:c8:2f:fb:
                    53:f0:cb:6a:ac:1a:4c:b8:4c:0f:63:ca:e5:97:f0:
                    fb:db:4a:8e:b6:5d:50:a9:08:dd:98:a8:a7:33:ec:
                    96:89:7b:57:d1:05:47:d4:7a:22:cb:8e:66:c2:93:
                    15:38:33:9d:65:2e:8d:ac:3c:9d:84:03:1c:7c:18:
                    52:f6:84:be:fb:df:56:e3:29:9e:72:76:c8:86:48:
                    08:d0:1f:2a:d4:68:56:9d:53:40:d3:71:d3:45:14:
                    b5:4f:73:30:f9:8d:8a:62:34:8e:8c:34:54:d4:eb:
                    f3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9F:C9:F3:52:DF:1B:55:03:8C:65:E8:5E:5B:DB:4A:8E:FC:96:F5
            X509v3 Authority Key Identifier:
                keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/3137302e38342e37322e302f32322d3332203d3e20323633393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:3e:ab:a0:e0:b8:22:47:d7:f8:bc:7f:25:15:7a:80:cb:ae:
         26:dd:7d:f8:f9:ea:c2:a3:86:77:57:d8:21:a6:6b:9f:fb:4b:
         be:51:a4:82:92:e7:79:3f:d2:c0:94:a5:b3:73:e1:42:a0:e4:
         30:77:a5:4a:2b:fb:8b:61:d9:cb:e6:3f:d2:60:01:16:f2:c9:
         90:cc:dc:87:bb:de:8a:83:c3:9b:df:94:76:9c:24:ee:18:b8:
         87:22:6b:26:97:e5:bc:b7:7e:05:05:f3:f3:7f:6b:0c:fe:0c:
         16:aa:7e:fc:09:8e:ef:db:66:be:33:a4:d5:02:50:6f:9d:66:
         e2:4c:72:fc:73:8d:a1:60:4f:f9:3c:11:d4:3f:83:d4:ea:0b:
         41:1b:cc:02:5f:a9:78:8a:15:2c:88:23:9a:9d:8f:f8:7a:f9:
         f9:bf:9e:bc:28:11:71:36:55:ba:a6:10:da:bd:7d:2d:3f:45:
         e4:e9:c6:fb:16:5d:91:e8:8b:2a:62:66:5a:16:d9:57:d9:86:
         1b:18:72:2a:e9:39:38:4c:23:1b:68:17:39:69:90:7b:54:df:
         43:db:d4:1d:35:52:f2:fd:69:52:bb:6a:ba:67:58:63:c3:b2:
         4a:f6:4b:b1:74:4f:8f:7c:a3:73:a2:ce:a2:77:cc:7f:77:e9:
         8a:49:67:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:13:49 2025 by rpki-client