Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/3137302e38342e3134342e302f32322d3332203d3e20323634393937.roa
File:                     3137302e38342e3134342e302f32322d3332203d3e20323634393937.roa (raw, json)
Hash identifier:          y729mYAEQve9sWlEa+CXbGGNESEhycmynXnlB/f7jVw=
Subject key identifier:   E7:23:4D:19:32:A8:EA:B7:4F:B2:32:56:D9:E0:AC:70:16:A7:5D:AF
Certificate issuer:       /CN=8E0A2B99A5844E13FD379C4ABBD74B4AE5161A83
Certificate serial:       70E66C9CEB6579D725C48881D598E98EC4D30852
Authority key identifier: 8E:0A:2B:99:A5:84:4E:13:FD:37:9C:4A:BB:D7:4B:4A:E5:16:1A:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E0A2B99A5844E13FD379C4ABBD74B4AE5161A83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/3137302e38342e3134342e302f32322d3332203d3e20323634393937.roa
Signing time:             Wed 30 Apr 2025 14:52:07 +0000
ROA not before:           Wed 30 Apr 2025 14:47:07 +0000
ROA not after:            Wed 29 Apr 2026 14:52:07 +0000
asID:                     264997
IP address blocks:        170.84.144.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/8E0A2B99A5844E13FD379C4ABBD74B4AE5161A83.crl
                          rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/8E0A2B99A5844E13FD379C4ABBD74B4AE5161A83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E0A2B99A5844E13FD379C4ABBD74B4AE5161A83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 20:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e6:6c:9c:eb:65:79:d7:25:c4:88:81:d5:98:e9:8e:c4:d3:08:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E0A2B99A5844E13FD379C4ABBD74B4AE5161A83
        Validity
            Not Before: Apr 30 14:47:07 2025 GMT
            Not After : Apr 29 14:52:07 2026 GMT
        Subject: CN=E7234D1932A8EAB74FB23256D9E0AC7016A75DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:25:b3:4f:e4:9c:80:a1:1b:b2:a2:8b:e9:
                    dd:d3:3f:07:c4:c1:58:ed:1b:3b:1b:3e:80:1e:a6:
                    ee:0b:18:2b:0e:25:38:90:07:f4:cd:81:f7:d9:32:
                    47:cf:f4:d4:77:49:30:dc:dc:fd:80:c9:e6:28:af:
                    a2:de:6e:97:5f:46:4f:00:84:4a:5e:4a:5f:24:26:
                    1a:5a:21:cd:db:9d:db:a2:2c:a0:30:27:10:4d:fa:
                    1a:8f:6e:ff:0b:44:8e:04:ba:9d:4a:e9:61:73:e4:
                    f0:31:06:1d:3d:27:90:53:d8:32:6c:03:76:32:6e:
                    45:02:fe:a6:dc:73:02:94:23:26:75:2d:d1:4b:5a:
                    04:11:bc:28:4d:ac:2f:0b:9b:fd:cf:c1:e4:f7:10:
                    b8:7a:29:c5:23:94:f8:22:90:f4:80:b3:0a:99:17:
                    fd:16:24:32:c7:d1:ae:78:58:80:e2:91:b6:01:9b:
                    ca:a0:60:9a:20:7f:13:50:68:66:16:d0:26:ff:e8:
                    16:fe:5d:79:08:13:01:ca:46:81:50:d7:48:b8:42:
                    b7:40:c5:65:5b:12:0a:e4:2b:c9:12:1b:c0:96:2e:
                    f5:9f:69:07:8a:f6:10:a5:f0:df:15:5f:27:4b:b5:
                    74:79:cd:85:14:3a:3a:fe:ca:9b:46:d0:4a:c0:71:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:23:4D:19:32:A8:EA:B7:4F:B2:32:56:D9:E0:AC:70:16:A7:5D:AF
            X509v3 Authority Key Identifier:
                keyid:8E:0A:2B:99:A5:84:4E:13:FD:37:9C:4A:BB:D7:4B:4A:E5:16:1A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/8E0A2B99A5844E13FD379C4ABBD74B4AE5161A83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E0A2B99A5844E13FD379C4ABBD74B4AE5161A83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/3137302e38342e3134342e302f32322d3332203d3e20323634393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:2d:71:28:8e:fe:68:af:5c:14:2a:7c:f9:e1:bb:9e:76:f9:
         bf:e7:a0:13:d2:b0:ec:6b:eb:77:a7:d8:f3:fc:dd:26:38:78:
         ae:f9:c9:93:c5:27:89:3b:5d:0c:34:d3:dc:2b:87:4f:a1:9e:
         77:4f:86:d5:d9:2e:76:c5:7b:a8:d5:45:01:35:04:13:c7:30:
         5f:79:03:eb:fb:55:a2:a8:01:13:7d:c7:a3:bb:23:bc:8c:4d:
         b6:8f:6d:7d:00:69:11:de:44:e1:9c:d1:a8:3d:d3:e4:ec:4f:
         9c:cc:32:45:01:6d:f2:fa:dc:05:41:bc:7c:82:8e:15:3e:f9:
         2e:7a:5d:97:83:85:43:25:91:ee:1a:f5:ee:a5:22:f7:9b:d7:
         55:ec:94:19:01:ce:78:99:2e:3b:d7:65:bd:4a:05:65:bf:b2:
         12:58:35:80:6a:be:86:1f:16:e5:17:fb:ab:a8:2e:0e:50:7c:
         82:14:81:48:c4:15:ab:02:7c:fe:69:4a:61:bd:42:8d:fa:ac:
         a5:95:7c:7c:b1:4f:45:5e:ce:73:f2:79:30:ef:cd:53:5f:6f:
         02:df:67:69:9c:2a:e3:fb:f7:61:e0:82:fb:2a:73:01:e0:07:
         51:61:fc:ee:e4:74:3e:f9:8d:b8:d4:a4:13:c2:d3:b7:9d:47:
         15:86:85:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:08:39 2025 by rpki-client