Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3137302e302e3133332e302f32342d3234203d3e20323634393832.roa
File:                     3137302e302e3133332e302f32342d3234203d3e20323634393832.roa (raw, json)
Hash identifier:          7Ynz5/bNZ8Mi1uhapFYV6uKHlWCP5WQl9F8/wCwblNc=
Subject key identifier:   B3:2D:CA:05:7E:3B:E4:A1:1C:1A:DA:BA:7D:98:E8:46:9F:16:5D:54
Certificate issuer:       /CN=3DE623ACA735E7C30285AC172A3418724D5F1A7B
Certificate serial:       5AB8C4699E6F63B869426BE9D5DFC9E191D0F4BF
Authority key identifier: 3D:E6:23:AC:A7:35:E7:C3:02:85:AC:17:2A:34:18:72:4D:5F:1A:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE623ACA735E7C30285AC172A3418724D5F1A7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3137302e302e3133332e302f32342d3234203d3e20323634393832.roa
Signing time:             Mon 16 Jun 2025 19:06:33 +0000
ROA not before:           Mon 16 Jun 2025 19:01:33 +0000
ROA not after:            Mon 15 Jun 2026 19:06:33 +0000
asID:                     264982
IP address blocks:        170.0.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.crl
                          rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE623ACA735E7C30285AC172A3418724D5F1A7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 21:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b8:c4:69:9e:6f:63:b8:69:42:6b:e9:d5:df:c9:e1:91:d0:f4:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DE623ACA735E7C30285AC172A3418724D5F1A7B
        Validity
            Not Before: Jun 16 19:01:33 2025 GMT
            Not After : Jun 15 19:06:33 2026 GMT
        Subject: CN=B32DCA057E3BE4A11C1ADABA7D98E8469F165D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:06:95:39:02:5d:0a:34:0e:42:b3:e3:f7:
                    c7:76:49:e8:c0:c3:2c:c3:3f:ee:27:a8:f5:d7:79:
                    a8:c5:54:30:7b:67:d8:75:35:ea:6b:8b:b4:e0:f1:
                    68:3c:1e:22:af:64:74:e9:90:4c:13:cb:cb:e5:b5:
                    9c:a4:70:55:b7:56:65:95:49:c3:02:ad:13:cc:21:
                    ae:54:ea:48:ae:7e:26:e1:c9:d5:15:df:34:2e:00:
                    b8:2f:84:d1:78:5b:a4:e2:88:44:60:1a:af:46:07:
                    ba:59:c9:8b:5f:1c:2d:9b:f7:96:43:22:d5:8b:fe:
                    4f:23:e5:51:1d:16:3d:d9:9b:e3:5c:56:8f:78:76:
                    8d:f2:b4:58:4d:37:0d:2a:34:e4:1c:5e:15:c7:41:
                    29:4e:41:f8:82:8c:42:11:a2:01:ae:0c:01:98:e4:
                    b0:58:79:ce:a0:69:62:11:ef:e2:3e:c2:d8:7a:b8:
                    91:18:b0:67:1f:8e:41:c6:4c:e8:fd:d0:6b:83:34:
                    b3:db:da:7b:72:6f:f7:24:a2:60:9f:7e:63:e7:a0:
                    20:dd:5b:26:11:e3:7d:17:b3:cb:94:81:12:34:7d:
                    34:58:87:3c:da:9e:16:07:f3:43:ac:9d:d1:bd:b9:
                    4f:48:f0:4f:c6:b8:0b:5d:10:b9:39:34:82:d7:a7:
                    fc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2D:CA:05:7E:3B:E4:A1:1C:1A:DA:BA:7D:98:E8:46:9F:16:5D:54
            X509v3 Authority Key Identifier:
                keyid:3D:E6:23:AC:A7:35:E7:C3:02:85:AC:17:2A:34:18:72:4D:5F:1A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE623ACA735E7C30285AC172A3418724D5F1A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3137302e302e3133332e302f32342d3234203d3e20323634393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:3b:52:d3:67:11:05:92:ef:8d:c2:d4:6e:fe:3f:06:bc:84:
         dd:3f:7e:55:7e:43:d1:b6:3a:a7:95:17:63:97:15:10:74:dc:
         ce:fc:de:17:64:6f:e6:61:c6:52:38:df:96:84:13:f5:c0:f4:
         cf:fb:ed:76:7e:28:75:7e:e6:5b:b2:e9:8f:87:37:ca:4b:93:
         ec:96:22:1f:14:84:4d:b1:01:67:7d:ad:c8:5b:26:94:b2:a2:
         20:84:92:9a:e8:3f:4a:05:72:d9:dd:f2:9a:1d:68:ab:5f:e8:
         13:b8:b1:f1:50:64:d7:40:b4:1e:f3:97:93:89:02:d1:08:03:
         ae:20:e0:55:80:2c:5a:5c:b3:7e:fd:b1:c8:68:d4:9b:4b:c1:
         ee:aa:69:5c:f6:d7:fa:a0:76:6e:2d:6c:c3:c5:cd:bd:77:29:
         6f:0c:51:ed:cd:b2:02:7f:a7:f1:07:66:38:57:2d:60:9a:21:
         d7:a0:23:39:3f:0a:5a:9d:48:97:fc:12:05:fb:bf:f6:94:48:
         54:dd:ba:9b:05:00:7c:c1:38:b3:80:1b:e2:d7:04:8e:ca:8e:
         27:36:d4:cf:25:7b:26:36:77:b0:f3:fe:06:7a:fb:1a:26:b2:
         70:db:52:e2:2a:e6:5a:ad:7e:7c:2f:df:c4:7c:5f:33:8c:c1:
         67:d5:37:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 04:33:05 2025 by rpki-client