Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3137302e302e3135322e302f32322d3234203d3e20323634303133.roa
File:                     3137302e302e3135322e302f32322d3234203d3e20323634303133.roa (raw, json)
Hash identifier:          C/q/7Qdb7Uos8WOUdFqYTO6oQXL0drDEMvBL7RQwfHQ=
Subject key identifier:   F0:1E:E7:CE:C6:85:80:C1:2C:72:2B:85:64:15:77:11:8D:E9:98:90
Certificate issuer:       /CN=B4427441B48FB34853A49345A310681C00837092
Certificate serial:       4B7FED48119EECDA76FE5B88D4DC26266D2425EB
Authority key identifier: B4:42:74:41:B4:8F:B3:48:53:A4:93:45:A3:10:68:1C:00:83:70:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4427441B48FB34853A49345A310681C00837092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3137302e302e3135322e302f32322d3234203d3e20323634303133.roa
Signing time:             Thu 29 May 2025 13:42:43 +0000
ROA not before:           Thu 29 May 2025 13:37:43 +0000
ROA not after:            Thu 28 May 2026 13:42:43 +0000
asID:                     264013
IP address blocks:        170.0.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/B4427441B48FB34853A49345A310681C00837092.crl
                          rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/B4427441B48FB34853A49345A310681C00837092.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4427441B48FB34853A49345A310681C00837092.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 03:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7f:ed:48:11:9e:ec:da:76:fe:5b:88:d4:dc:26:26:6d:24:25:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4427441B48FB34853A49345A310681C00837092
        Validity
            Not Before: May 29 13:37:43 2025 GMT
            Not After : May 28 13:42:43 2026 GMT
        Subject: CN=F01EE7CEC68580C12C722B85641577118DE99890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:1f:e9:8a:6f:b6:60:39:68:1d:3e:c7:a5:
                    f5:1b:88:cb:81:d1:0d:97:ab:7e:31:d0:81:76:22:
                    27:ae:a1:5c:66:00:08:a1:c3:51:c5:1a:1a:31:df:
                    41:6a:74:ac:43:52:92:21:71:ac:26:c0:9d:48:68:
                    5d:6c:14:39:27:8b:9f:43:eb:f8:11:bd:5a:5a:ed:
                    3f:5b:bf:80:f9:c8:db:8f:de:a8:ba:2a:16:43:eb:
                    0a:f3:77:74:46:ec:ec:88:e1:6f:84:a6:68:ed:aa:
                    07:ab:2a:e7:cb:d4:e3:6e:71:78:13:3a:70:de:ee:
                    cc:2b:0f:bc:6f:d9:31:8f:7e:a3:4b:84:8b:54:a5:
                    26:40:4a:44:66:d8:8c:f7:db:42:f7:fb:fc:cb:1c:
                    4e:ff:9e:5d:fb:46:71:d3:8d:7a:4c:e0:e3:2f:79:
                    3d:c8:75:0e:56:95:a4:de:47:3d:bd:d7:cd:85:5d:
                    13:2e:cf:f3:34:00:19:71:e1:33:6d:4a:b8:6c:30:
                    72:38:e1:97:8b:69:66:c0:95:15:6a:4c:01:aa:77:
                    77:b6:cf:41:90:0b:ce:ae:b7:89:84:4a:5f:9a:da:
                    dd:a6:ac:2c:b4:9c:ba:bf:3f:3e:42:d7:01:a1:4b:
                    46:80:ff:69:81:c5:6c:8e:6f:90:d2:ff:e0:6e:15:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1E:E7:CE:C6:85:80:C1:2C:72:2B:85:64:15:77:11:8D:E9:98:90
            X509v3 Authority Key Identifier:
                keyid:B4:42:74:41:B4:8F:B3:48:53:A4:93:45:A3:10:68:1C:00:83:70:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/B4427441B48FB34853A49345A310681C00837092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4427441B48FB34853A49345A310681C00837092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3137302e302e3135322e302f32322d3234203d3e20323634303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:a2:61:34:e2:6d:b5:69:7c:ee:8c:9e:4e:82:5b:6a:d8:45:
         0d:a6:07:a5:6f:cd:ff:3a:6b:75:0e:08:f0:21:2d:5e:3c:18:
         22:4b:f2:91:f8:bf:be:2a:85:5f:bf:99:21:bc:7d:a0:2f:1b:
         f7:e0:85:b4:12:40:a0:f4:22:60:f3:29:6c:ca:91:d6:b2:6f:
         a5:45:ae:a8:e7:8b:c8:e0:d2:59:0a:76:2a:b3:91:1d:49:a8:
         69:5c:f1:79:59:e9:89:1e:c5:cb:fd:13:4a:c8:f2:1c:c9:c6:
         45:24:65:7a:79:0a:71:94:43:2a:5a:50:9a:18:8c:74:6a:01:
         55:98:d5:6e:b0:38:1b:15:50:46:6a:08:54:bb:c9:0d:ce:e1:
         38:25:b0:6e:59:01:12:d1:07:78:21:2d:18:21:61:f6:f4:40:
         ec:36:2f:8a:fc:73:65:e4:a1:4b:97:ee:7e:3f:0f:a4:16:df:
         69:55:f6:9b:20:0a:d1:4e:de:e1:2c:88:94:13:c6:4d:db:46:
         55:f3:78:64:63:47:a0:d0:44:af:60:aa:ca:7c:a2:1a:bc:fb:
         71:19:fc:c5:5a:32:4e:70:a6:28:1a:bc:df:d5:6a:98:9c:fc:
         11:54:4f:9f:6c:8b:6b:65:1c:59:d3:22:6c:06:dc:ac:a9:90:
         75:e8:97:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:17:24 2025 by rpki-client