Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37332e302f32342d3234203d3e20323634343936.roa
File:                     3137302e3233382e37332e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          dTqzJXU6op3OfN3JbeCj7/LelyomsZwoQTF/i5T4kpE=
Subject key identifier:   DD:F9:AD:77:B3:C0:32:8A:5A:6D:67:DE:8F:65:70:F7:B0:CF:4F:9C
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       61DAB8F4C777804A8506198D05D8A8F000DA0FBE
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37332e302f32342d3234203d3e20323634343936.roa
Signing time:             Wed 26 Feb 2025 14:47:23 +0000
ROA not before:           Wed 26 Feb 2025 14:42:23 +0000
ROA not after:            Wed 25 Feb 2026 14:47:23 +0000
asID:                     264496
IP address blocks:        170.238.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:da:b8:f4:c7:77:80:4a:85:06:19:8d:05:d8:a8:f0:00:da:0f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Feb 26 14:42:23 2025 GMT
            Not After : Feb 25 14:47:23 2026 GMT
        Subject: CN=DDF9AD77B3C0328A5A6D67DE8F6570F7B0CF4F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:92:54:41:cd:c5:33:85:3f:b9:e1:31:10:52:
                    e0:77:ea:1d:a2:af:48:4c:77:bc:5b:ad:e1:8a:96:
                    8f:40:06:c7:43:9c:57:35:13:20:fa:85:6e:7a:2d:
                    11:0c:22:d2:f7:eb:66:a7:52:12:61:5c:a5:f2:2c:
                    3d:b6:c3:a6:e0:85:e0:4e:fd:49:04:86:00:d3:b9:
                    67:3d:59:5a:6b:d5:5f:eb:3c:ac:d1:b5:a8:b5:2c:
                    53:73:bb:20:c2:01:e9:ba:cd:7f:1a:0f:99:47:dd:
                    be:c7:ad:16:aa:41:c0:38:29:50:2f:75:73:fc:a4:
                    c1:03:54:dd:83:df:36:18:c9:fa:76:c7:2e:5a:8e:
                    88:a2:5d:67:76:dc:48:c9:7c:52:dd:e3:71:34:5f:
                    45:c0:b1:af:2c:cb:44:72:7a:e5:ea:c8:c4:eb:8a:
                    d9:95:18:de:dd:59:3f:e4:f8:ff:49:3c:a8:66:a1:
                    a8:42:e0:05:94:b8:c0:a1:b7:81:ff:5c:4f:d2:76:
                    4d:da:7e:34:8a:b6:a7:e3:ab:7b:b8:01:42:23:23:
                    f1:7f:9b:a0:c0:7b:a8:4e:1f:4a:4b:e9:fc:dc:f8:
                    99:35:24:77:60:73:0a:06:4a:7a:5e:b1:1d:0d:29:
                    02:a8:71:06:0b:6e:53:01:36:c0:a8:34:d6:20:58:
                    99:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F9:AD:77:B3:C0:32:8A:5A:6D:67:DE:8F:65:70:F7:B0:CF:4F:9C
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137302e3233382e37332e302f32342d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:fa:f1:77:18:82:68:b7:71:4e:1b:1e:72:df:88:18:09:aa:
         41:49:3c:0e:4b:9f:8e:52:b0:7d:e5:f1:05:c6:5a:32:e7:b5:
         f2:89:8a:4c:f5:42:00:d8:83:65:fe:06:d6:1f:e9:81:34:12:
         3a:92:f3:8d:0e:2a:2a:b5:ee:96:a5:af:d3:06:83:6a:83:d1:
         47:96:74:c9:1d:0d:70:6f:e2:1a:2a:03:6e:e3:f5:2f:1c:75:
         4b:c4:86:74:40:1e:be:b5:b5:9e:61:4c:1b:f9:1a:9f:07:f4:
         e4:f3:b8:f8:c7:25:b2:40:1b:a8:a5:01:61:dd:83:24:ba:d3:
         35:75:f3:26:19:4d:ce:af:41:38:bc:52:0a:d4:22:28:ab:46:
         da:94:30:07:2b:f3:45:e8:0e:57:46:d8:77:9c:d5:d1:02:cd:
         9b:e4:63:ac:e9:d2:cb:3a:3e:40:97:34:82:85:dd:10:5e:0f:
         ae:e9:1d:4c:3a:90:ad:b6:ed:c9:de:f7:72:8f:ef:4d:15:9a:
         93:2c:bb:7b:1d:4d:00:e9:cb:a1:2b:23:fd:a6:ed:da:f9:55:
         9d:44:87:73:e6:a6:e4:08:5d:a3:b8:9a:95:32:33:78:7b:3d:
         be:9a:b8:a8:44:87:1c:3d:17:c3:74:d2:72:ca:56:e8:82:36:
         0d:50:5c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:25 2025 by rpki-client