Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/3137302e3233392e342e302f32322d3332203d3e20323636333433.roa
File:                     3137302e3233392e342e302f32322d3332203d3e20323636333433.roa (raw, json)
Hash identifier:          vNZ1TzaBzQdhWTtPUHXHVwXv9PsIXmCBFU3ixxiR9cI=
Subject key identifier:   39:7C:97:53:7D:DC:70:B8:65:15:87:6A:89:23:90:07:AD:09:D6:A0
Certificate issuer:       /CN=54CD9C29D2965A102103F5E8772427BF348CBC34
Certificate serial:       323325A7B11DF3E29389C3E281BAD7989BC3BDC8
Authority key identifier: 54:CD:9C:29:D2:96:5A:10:21:03:F5:E8:77:24:27:BF:34:8C:BC:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CD9C29D2965A102103F5E8772427BF348CBC34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/3137302e3233392e342e302f32322d3332203d3e20323636333433.roa
Signing time:             Wed 04 Jun 2025 15:46:41 +0000
ROA not before:           Wed 04 Jun 2025 15:41:41 +0000
ROA not after:            Wed 03 Jun 2026 15:46:41 +0000
asID:                     266343
IP address blocks:        170.239.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/54CD9C29D2965A102103F5E8772427BF348CBC34.crl
                          rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/54CD9C29D2965A102103F5E8772427BF348CBC34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CD9C29D2965A102103F5E8772427BF348CBC34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 14:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:33:25:a7:b1:1d:f3:e2:93:89:c3:e2:81:ba:d7:98:9b:c3:bd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CD9C29D2965A102103F5E8772427BF348CBC34
        Validity
            Not Before: Jun  4 15:41:41 2025 GMT
            Not After : Jun  3 15:46:41 2026 GMT
        Subject: CN=397C97537DDC70B86515876A89239007AD09D6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9d:d3:af:b2:eb:6b:da:6c:67:a4:32:24:3b:
                    3a:c6:08:a7:8a:fe:9b:ad:dd:a2:99:88:f9:f3:58:
                    aa:f8:55:27:f5:77:27:c5:c5:6a:da:31:86:ef:20:
                    f4:c4:59:31:4f:86:bd:25:d5:05:57:ca:d1:8a:0a:
                    f4:61:23:6a:36:70:b5:fe:68:a8:a5:2f:82:53:c7:
                    c9:09:35:dd:dd:4e:85:53:8a:98:7f:5a:63:60:42:
                    05:af:c8:54:6a:41:e4:16:a6:a4:68:59:c9:d8:f3:
                    ae:f9:d8:a8:88:16:14:b4:9f:e1:29:87:de:df:1a:
                    17:a0:0b:f3:68:9d:b2:f6:52:bf:c5:aa:bb:ae:68:
                    4c:b6:28:a2:f6:a1:de:b3:7f:42:f7:12:ce:01:2f:
                    a8:b3:8c:29:77:07:b8:c5:7b:6a:56:dc:fc:bc:9a:
                    38:76:74:9f:67:ec:2b:82:19:65:df:28:77:ed:59:
                    18:af:44:e9:7b:88:60:ac:5b:f5:6e:f5:35:9e:bf:
                    40:d6:63:33:12:85:55:0d:55:27:9d:04:b7:52:e7:
                    66:9c:31:83:43:24:74:74:72:15:36:3f:07:f7:3c:
                    f5:53:ec:25:f5:3f:11:4c:c1:6d:78:b1:6b:1a:0f:
                    67:c2:9a:b1:a8:dd:80:13:5c:6f:f1:bb:d8:5e:01:
                    6c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7C:97:53:7D:DC:70:B8:65:15:87:6A:89:23:90:07:AD:09:D6:A0
            X509v3 Authority Key Identifier:
                keyid:54:CD:9C:29:D2:96:5A:10:21:03:F5:E8:77:24:27:BF:34:8C:BC:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/54CD9C29D2965A102103F5E8772427BF348CBC34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CD9C29D2965A102103F5E8772427BF348CBC34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/3137302e3233392e342e302f32322d3332203d3e20323636333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:3b:27:0b:f1:1c:50:22:01:b3:12:2b:10:49:53:ac:cd:ba:
         d3:e8:d6:33:6a:d5:a4:41:db:c2:59:8f:ac:4b:fd:41:62:10:
         eb:0a:6a:96:dc:c3:5e:b6:92:20:65:dc:41:99:44:69:75:4f:
         03:3e:8e:30:8a:1e:95:c4:82:d4:e6:24:c2:24:09:b2:b7:50:
         3e:db:06:a6:7e:12:18:c9:6d:b5:a5:80:10:46:34:07:c7:4d:
         f5:67:bf:d1:fc:e1:95:b4:16:f9:a7:b0:b4:95:e0:5a:74:52:
         63:61:6d:8e:21:77:02:45:76:f2:64:17:46:c4:a7:dc:b6:3d:
         a2:93:fc:9c:c1:d1:c9:86:b8:ec:75:ff:a5:54:e0:2b:28:82:
         49:b4:89:3a:43:64:5d:90:a3:5b:d5:7b:ff:5d:da:66:17:00:
         51:65:02:32:e4:95:46:85:58:c6:9e:52:72:c4:a0:6c:01:fd:
         55:6c:0e:17:bf:e7:74:c3:ed:19:ae:62:b7:4c:ac:27:83:37:
         0d:d3:f5:c2:27:43:ca:a9:f5:fa:62:f8:d1:e0:24:4a:75:08:
         ac:2c:84:bc:a5:c0:de:ad:4b:27:6c:9b:de:3a:12:56:67:80:
         14:32:a9:b7:c3:ab:f0:a7:de:55:49:5a:dc:41:3e:ab:a9:0f:
         d8:e5:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:27:42 2025 by rpki-client