Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39382e302f32342d3234203d3e203532373231.roa
File:                     3137302e3234362e39382e302f32342d3234203d3e203532373231.roa (raw, json)
Hash identifier:          uoHenZ7hoQB525JXYwT+DxEm5gN9y2FtT17sX+CB5FI=
Subject key identifier:   07:00:7D:EE:39:94:1B:A0:7F:00:62:0F:2D:7A:74:D1:2F:D8:F6:04
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       1EE6953D1642D99CAAEE33B6301CE3D04BE41C6C
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39382e302f32342d3234203d3e203532373231.roa
Signing time:             Fri 25 Apr 2025 14:50:39 +0000
ROA not before:           Fri 25 Apr 2025 14:45:39 +0000
ROA not after:            Fri 24 Apr 2026 14:50:39 +0000
asID:                     52721
IP address blocks:        170.246.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 04:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e6:95:3d:16:42:d9:9c:aa:ee:33:b6:30:1c:e3:d0:4b:e4:1c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:39 2025 GMT
            Not After : Apr 24 14:50:39 2026 GMT
        Subject: CN=07007DEE39941BA07F00620F2D7A74D12FD8F604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:85:27:9d:fc:2d:36:62:5e:ea:48:33:a4:
                    e7:d9:4e:36:10:48:39:1a:ce:73:50:6e:b6:15:d6:
                    2f:07:d8:ec:e0:fc:07:98:59:93:64:bb:96:cf:0f:
                    e7:45:e2:c9:04:cc:76:1d:b3:61:d2:77:3e:53:ea:
                    8b:23:b1:d2:e8:ca:81:b7:59:55:6c:ce:90:3d:85:
                    f1:9c:10:3f:e9:99:9f:4b:59:cb:1c:c1:58:25:fc:
                    1a:e0:a3:b3:de:df:bf:ee:ca:35:10:82:64:99:03:
                    7d:f1:4a:83:b5:76:ea:dc:2c:98:de:78:b6:69:eb:
                    4f:13:74:80:71:51:1d:d6:78:6f:d6:46:a5:82:d7:
                    1b:ea:ff:63:fc:52:f2:79:71:a0:5b:83:ae:93:c1:
                    b0:e9:5e:31:0d:43:d9:21:1e:0a:bc:79:a3:5c:80:
                    02:63:84:ec:39:b0:0b:8f:ef:e2:5a:bb:73:89:6e:
                    23:6e:33:39:1d:ac:b7:34:99:fc:62:73:41:fc:95:
                    26:95:38:0c:0a:0d:37:ef:b2:8d:01:b8:4e:99:88:
                    ce:67:88:58:2b:67:d9:41:f7:07:3f:50:4c:1c:c6:
                    64:2d:43:86:40:24:cf:e5:3a:fb:57:b3:ef:de:ec:
                    3a:e1:6f:c0:d5:1b:9d:0d:c6:ef:40:0f:5a:f8:01:
                    47:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:00:7D:EE:39:94:1B:A0:7F:00:62:0F:2D:7A:74:D1:2F:D8:F6:04
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39382e302f32342d3234203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:fc:84:96:82:6f:53:06:12:fe:a3:c1:3a:48:a9:4f:51:f2:
         7b:c7:c1:bf:e5:62:20:7f:f4:0b:9f:09:bc:a4:b1:1e:a2:d0:
         ff:09:ec:31:23:cf:b1:04:32:b0:18:6e:a4:c4:cf:00:e3:c0:
         f1:be:e3:90:52:fb:f0:d0:74:18:6f:3a:aa:1b:de:87:1a:20:
         54:cf:66:a0:c5:e3:f0:b5:3d:0c:60:2f:b7:e3:48:2f:12:65:
         74:f9:fd:07:d5:a0:e2:5e:ea:be:c3:1b:e4:61:9e:84:f0:de:
         91:5e:15:ac:5d:4c:57:73:d8:a9:53:d8:0d:d3:a4:34:c8:77:
         5c:f0:62:cd:8b:88:0b:d3:08:3f:8a:d5:12:35:40:09:1c:30:
         a9:96:28:32:15:1c:14:34:81:f0:39:a5:15:61:a0:17:8c:8f:
         38:d3:a9:4b:d3:9a:8b:ea:04:d2:2a:c5:e3:e3:8f:d0:01:30:
         cb:14:38:48:89:75:da:b9:01:6f:52:08:b2:03:f0:45:2f:14:
         b4:9e:fc:9f:9e:dd:b1:36:21:6e:9a:c9:8f:0e:ad:45:bf:d5:
         39:b8:e2:cf:55:92:99:91:62:12:52:b5:9d:71:65:a5:29:13:
         22:23:c2:6b:6b:fa:01:9c:6c:43:f4:c6:73:0b:0a:19:8b:fc:
         89:1c:ec:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:28:34 2025 by rpki-client