Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/3137302e38312e3233362e302f32322d3234203d3e20323636343239.roa
File:                     3137302e38312e3233362e302f32322d3234203d3e20323636343239.roa (raw, json)
Hash identifier:          MnWk9nCGYx8nPCDJDCTXdoFkLgV43Qk2BwKpsYNPlCk=
Subject key identifier:   78:01:C0:D3:9F:DA:07:12:0E:6C:A7:5E:5D:1A:CE:EB:99:52:28:06
Certificate issuer:       /CN=3BECCB426CB39F321A76CB1E8BCB5DEFD8012A3B
Certificate serial:       5FB86E471615580CFC651BAF46538F13B8D922EC
Authority key identifier: 3B:EC:CB:42:6C:B3:9F:32:1A:76:CB:1E:8B:CB:5D:EF:D8:01:2A:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BECCB426CB39F321A76CB1E8BCB5DEFD8012A3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/3137302e38312e3233362e302f32322d3234203d3e20323636343239.roa
Signing time:             Thu 12 Jun 2025 20:03:21 +0000
ROA not before:           Thu 12 Jun 2025 19:58:21 +0000
ROA not after:            Thu 11 Jun 2026 20:03:21 +0000
asID:                     266429
IP address blocks:        170.81.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/3BECCB426CB39F321A76CB1E8BCB5DEFD8012A3B.crl
                          rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/3BECCB426CB39F321A76CB1E8BCB5DEFD8012A3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BECCB426CB39F321A76CB1E8BCB5DEFD8012A3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 21:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b8:6e:47:16:15:58:0c:fc:65:1b:af:46:53:8f:13:b8:d9:22:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BECCB426CB39F321A76CB1E8BCB5DEFD8012A3B
        Validity
            Not Before: Jun 12 19:58:21 2025 GMT
            Not After : Jun 11 20:03:21 2026 GMT
        Subject: CN=7801C0D39FDA07120E6CA75E5D1ACEEB99522806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:d3:76:ae:1d:44:75:46:e9:8d:e5:9b:63:
                    b8:b7:64:50:32:28:7c:5f:b3:d0:d1:1b:a1:d5:5f:
                    24:bf:c5:1f:03:61:92:36:80:85:d0:27:c5:42:0c:
                    a9:00:b8:9b:19:d6:02:91:79:58:2a:fe:60:2f:cf:
                    52:81:82:23:d5:d3:bf:dd:04:4e:48:a3:e9:cb:c2:
                    2c:f9:28:4b:f9:29:4e:de:4a:f7:53:a9:41:00:99:
                    9a:87:e4:af:e2:28:78:b1:df:de:e3:a9:1b:d2:41:
                    56:e7:a8:34:68:42:61:57:a1:aa:91:7f:36:ba:5e:
                    93:21:05:61:5e:99:78:42:52:4b:7d:30:73:26:75:
                    8b:98:3f:8b:a5:c5:95:e5:4a:ce:8f:80:52:4c:e7:
                    ff:a7:22:a0:6f:82:a3:d7:4b:79:23:ed:08:57:d6:
                    42:89:72:ab:e0:a5:5c:54:ab:6e:34:e2:a1:24:57:
                    5d:24:e4:99:af:da:e5:08:e5:98:c7:e7:03:72:6e:
                    0c:3a:3a:64:5e:f7:d3:89:d4:09:11:c5:d7:52:9b:
                    69:95:43:1a:21:42:c3:fe:6a:34:11:aa:9d:94:e0:
                    47:9e:0c:36:e1:62:84:5e:34:b1:71:14:9a:23:7a:
                    46:e4:a6:53:6d:2b:6e:4f:da:3f:fd:dd:17:9b:e3:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:01:C0:D3:9F:DA:07:12:0E:6C:A7:5E:5D:1A:CE:EB:99:52:28:06
            X509v3 Authority Key Identifier:
                keyid:3B:EC:CB:42:6C:B3:9F:32:1A:76:CB:1E:8B:CB:5D:EF:D8:01:2A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/3BECCB426CB39F321A76CB1E8BCB5DEFD8012A3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BECCB426CB39F321A76CB1E8BCB5DEFD8012A3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/3137302e38312e3233362e302f32322d3234203d3e20323636343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:39:06:cc:52:03:96:ee:68:79:0e:e0:50:d3:aa:16:51:ed:
         ed:ca:c3:f6:94:a1:78:be:40:75:c9:7c:d9:1a:5b:b6:4e:fe:
         5b:7c:e2:0e:d0:53:79:6f:a5:64:d8:ce:c5:a2:2e:3a:8c:74:
         e6:f3:1f:45:d9:f3:87:87:96:02:40:62:89:f1:87:c0:f9:7a:
         c3:b7:3c:da:2b:d2:f1:1a:04:44:3e:8a:28:2f:a0:e7:24:1b:
         3e:15:6a:67:25:91:a2:ba:a4:56:d0:f7:c7:42:c9:c3:f8:44:
         7c:8b:9c:47:51:a9:8c:09:c8:2f:db:99:50:70:e8:87:04:d0:
         3c:81:71:e1:1f:4d:d6:66:77:a6:72:27:16:cc:54:71:42:2a:
         79:dc:25:71:4c:18:ca:a3:ff:68:b5:65:81:a5:5b:cc:2e:5b:
         0d:c9:eb:b5:a6:cd:b7:3f:56:47:9c:e6:f5:52:51:de:7d:22:
         da:cc:74:04:e4:5b:f4:35:57:0f:76:25:b6:64:bf:fa:b4:9f:
         1b:89:09:a9:55:15:97:1a:58:53:f4:8a:ac:d5:de:46:9f:ba:
         5c:eb:6e:03:30:0b:9d:a6:e3:88:9a:54:45:e8:a6:98:bf:57:
         33:73:4a:96:80:dd:f4:2f:8c:2c:ad:c9:40:f0:08:ac:5b:b5:
         ba:ad:e0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:03:26 2025 by rpki-client