Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39392e302f32342d3234203d3e203532373231.roa
File:                     3137302e3234362e39392e302f32342d3234203d3e203532373231.roa (raw, json)
Hash identifier:          5RmNNCvxwvlm7t71HgS0yvnVidn86MLXQLIigvmCqkw=
Subject key identifier:   42:69:90:FF:A7:DD:A2:84:8E:8E:3C:11:BA:05:E6:15:3E:DB:AC:5C
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       7880C7FCBBE8C6270387C7E9DE3C926A3A61F238
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39392e302f32342d3234203d3e203532373231.roa
Signing time:             Fri 25 Apr 2025 14:50:37 +0000
ROA not before:           Fri 25 Apr 2025 14:45:37 +0000
ROA not after:            Fri 24 Apr 2026 14:50:37 +0000
asID:                     52721
IP address blocks:        170.246.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 12:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:80:c7:fc:bb:e8:c6:27:03:87:c7:e9:de:3c:92:6a:3a:61:f2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:37 2025 GMT
            Not After : Apr 24 14:50:37 2026 GMT
        Subject: CN=426990FFA7DDA2848E8E3C11BA05E6153EDBAC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:90:33:92:de:51:1e:d1:66:6a:57:7d:69:
                    4d:9f:60:b2:f5:f0:a4:15:fd:ed:ff:3e:89:be:7f:
                    a5:33:73:56:34:d0:00:17:a6:18:e1:91:94:28:aa:
                    1f:d5:19:ba:73:01:c3:ae:51:48:70:52:d6:f1:58:
                    b1:4c:a9:97:91:88:fb:6c:0a:a9:9b:cd:2b:b4:e4:
                    bc:1e:a2:30:5d:be:f0:03:e8:6d:4c:b3:f4:19:e0:
                    45:e5:58:a6:f0:92:cc:41:53:66:74:9a:98:e1:c4:
                    4a:c3:aa:06:b2:32:af:89:b7:79:97:c2:e6:d8:19:
                    f1:e1:3c:df:c9:a5:36:0b:73:0a:b0:ad:ca:60:bf:
                    c5:ab:3c:b4:58:73:5e:cb:d2:ff:64:91:07:2e:85:
                    01:65:a1:34:bf:b7:9a:d2:a2:29:a9:00:9d:2e:67:
                    61:18:bb:b5:d8:9f:19:06:45:90:45:1d:e4:b5:84:
                    fe:a9:3b:4e:50:b2:ca:8b:a3:bb:0c:03:a7:88:fa:
                    10:e0:7b:3b:76:41:a9:0d:02:e2:cf:40:88:64:50:
                    ed:ac:75:0a:f8:a1:e6:e2:e3:dc:a3:a0:b8:c1:da:
                    d2:fb:d4:0a:fb:32:21:2d:b6:65:1a:f5:17:8f:8a:
                    17:1e:df:4d:b8:48:db:6b:9d:19:d3:02:d6:05:77:
                    e2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:69:90:FF:A7:DD:A2:84:8E:8E:3C:11:BA:05:E6:15:3E:DB:AC:5C
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39392e302f32342d3234203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:72:fd:29:1e:ca:78:14:29:52:66:d4:b7:3c:dc:a3:11:f2:
         f3:f9:94:01:4a:b7:bb:d1:bf:d2:f2:eb:8a:36:a6:00:1b:1b:
         74:b6:99:8e:28:0c:4f:41:8b:ab:a5:fc:c2:a6:1f:d2:24:75:
         c4:8f:82:2e:a6:41:d2:13:33:d2:82:83:d2:12:27:96:01:b8:
         d7:23:73:d2:44:c4:0a:2f:4b:4a:5d:94:36:00:1d:d5:1c:68:
         71:28:43:1b:5e:72:ce:45:9c:cb:51:f5:aa:f2:08:18:ed:8a:
         f4:cf:c0:69:6c:3b:fc:8f:1a:e7:60:62:d9:58:12:36:87:31:
         c0:90:25:4c:58:03:71:09:64:38:01:e8:89:43:0e:2f:d9:10:
         ad:2c:8d:49:fe:31:7e:0c:35:45:79:b7:5b:45:7e:9f:f7:0b:
         35:63:9a:3b:0c:0f:28:1e:36:b1:23:05:1d:4c:43:3f:8b:c7:
         e7:94:ee:8e:b6:3c:d8:11:aa:92:7a:06:8d:5e:f2:d1:07:7e:
         48:12:1c:5c:73:5f:39:60:fd:c4:44:c8:c2:13:d8:36:62:5b:
         de:1a:45:dd:18:60:b2:73:69:5d:b6:fa:30:2a:ce:ce:d2:27:
         91:a1:64:2d:8b:b6:8c:d9:77:4d:e1:30:30:da:ef:9d:27:1b:
         dc:cf:45:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:20:17 2025 by rpki-client