Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137332e302f32342d3234203d3e20323733343637.roa
File:                     3137302e3234352e3137332e302f32342d3234203d3e20323733343637.roa (raw, json)
Hash identifier:          RxSiy5PP/2mz2IeEyIP8hDj5W1O9XGNAWuEJXAGrUYk=
Subject key identifier:   E6:1F:DD:0A:06:38:B1:35:66:43:29:62:75:40:AA:C9:48:34:63:44
Certificate issuer:       /CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
Certificate serial:       3A4375CD84730C3B078F734449251F27E2E1965E
Authority key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137332e302f32342d3234203d3e20323733343637.roa
Signing time:             Fri 25 Apr 2025 14:05:00 +0000
ROA not before:           Fri 25 Apr 2025 14:00:00 +0000
ROA not after:            Fri 24 Apr 2026 14:05:00 +0000
asID:                     273467
IP address blocks:        170.245.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl
                          rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 08:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:43:75:cd:84:73:0c:3b:07:8f:73:44:49:25:1f:27:e2:e1:96:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
        Validity
            Not Before: Apr 25 14:00:00 2025 GMT
            Not After : Apr 24 14:05:00 2026 GMT
        Subject: CN=E61FDD0A0638B135664329627540AAC948346344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:3b:d8:2a:f3:94:08:97:42:51:71:f0:cf:
                    36:28:84:74:cc:9d:11:08:ba:98:d0:69:db:34:3f:
                    3b:1c:cf:de:db:2e:f3:a8:6f:e7:93:e5:a3:96:d1:
                    9b:24:17:48:c9:96:ae:1d:a0:f5:aa:40:e4:36:85:
                    f4:84:bf:43:ed:be:c7:21:72:b9:50:61:f5:07:49:
                    4b:3d:b5:02:87:59:43:93:48:e8:21:31:27:97:93:
                    b4:cd:70:db:f1:5c:3f:20:66:65:99:2f:a0:e9:b3:
                    04:19:9e:47:bb:e5:eb:5d:e2:57:7a:ee:2f:51:71:
                    f3:88:2c:ae:c7:e1:ca:dd:f3:a9:12:8c:8e:b4:d0:
                    0d:9a:41:5c:b4:39:a5:d2:ce:c0:d7:76:5d:64:96:
                    3f:9a:0d:84:b7:7b:05:f9:69:63:86:16:5b:c4:93:
                    85:59:24:80:52:eb:4f:c4:af:32:7c:d4:3f:58:47:
                    df:a6:33:f0:a6:2a:85:c1:8f:b5:55:21:26:ea:62:
                    10:52:68:52:b0:f8:b9:27:f2:46:a0:ed:92:b6:39:
                    3c:59:b5:f9:5b:d3:50:03:72:5c:42:ba:67:71:46:
                    f4:1b:27:36:9a:6d:8a:5b:b4:4c:92:75:0a:17:e9:
                    f6:43:ad:ad:90:23:ef:88:74:18:7f:ab:39:1d:87:
                    e5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1F:DD:0A:06:38:B1:35:66:43:29:62:75:40:AA:C9:48:34:63:44
            X509v3 Authority Key Identifier:
                keyid:E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137332e302f32342d3234203d3e20323733343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:db:3e:66:30:f4:f7:9a:ac:94:41:84:99:f8:9c:9d:9a:3b:
         57:ac:a7:a8:2e:91:fe:25:35:79:27:85:c3:50:25:e0:1e:5d:
         9a:8d:0d:1a:21:85:bb:61:4d:a0:ff:95:31:68:31:24:fc:bc:
         1f:68:d0:a3:6b:b9:6d:bf:65:d0:b2:1d:a2:04:aa:10:e4:bd:
         1e:c4:25:58:09:98:ad:96:e5:68:07:25:0c:03:c6:62:26:7c:
         5c:cd:85:a9:62:fe:dc:62:04:30:3b:d9:ab:3c:8d:2f:63:dd:
         02:51:ec:29:be:2a:90:ef:aa:d0:89:19:87:34:6d:70:4d:12:
         fc:84:83:03:f7:e7:2f:6f:f3:a9:67:a9:50:6b:8e:d2:52:da:
         24:93:2d:03:c7:b8:1a:ec:b6:65:e5:5d:3d:6d:5d:65:9a:96:
         1d:1c:f7:d4:c3:81:21:a8:91:b6:2e:c7:b4:ce:01:66:f9:93:
         92:4e:81:68:00:07:38:c6:02:96:46:3b:f0:cd:b4:44:b7:a3:
         1a:e3:9f:46:8a:a8:1c:76:a4:d2:ce:9f:df:aa:0f:3a:f1:7f:
         e9:0a:e4:e2:9c:87:d6:24:c7:01:d5:03:c0:a3:cc:f2:87:c1:
         55:2c:ff:a8:df:98:b1:d2:5c:20:a9:8e:59:7b:ac:69:aa:96:
         8c:57:42:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:05:23 2025 by rpki-client