Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/3136342e3136332e32382e302f32322d3234203d3e20323635393337.roa
File:                     3136342e3136332e32382e302f32322d3234203d3e20323635393337.roa (raw, json)
Hash identifier:          GDvmRn+mmCDhFHzbJ++oloV57ax2pppGXQ5R03wdjEU=
Subject key identifier:   2F:4B:56:0B:1A:F6:7B:A7:8F:CE:88:D3:4B:DE:87:1F:46:42:61:F2
Certificate issuer:       /CN=7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326
Certificate serial:       5874D024741A666B88AD52AEAC074A0EF167A1A3
Authority key identifier: 7E:06:F0:AD:6C:3D:CC:EE:31:9A:92:B1:30:6C:4C:4D:DD:99:23:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/3136342e3136332e32382e302f32322d3234203d3e20323635393337.roa
Signing time:             Thu 13 Mar 2025 12:15:23 +0000
ROA not before:           Thu 13 Mar 2025 12:10:23 +0000
ROA not after:            Thu 12 Mar 2026 12:15:23 +0000
asID:                     265937
IP address blocks:        164.163.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.crl
                          rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 18:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:74:d0:24:74:1a:66:6b:88:ad:52:ae:ac:07:4a:0e:f1:67:a1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326
        Validity
            Not Before: Mar 13 12:10:23 2025 GMT
            Not After : Mar 12 12:15:23 2026 GMT
        Subject: CN=2F4B560B1AF67BA78FCE88D34BDE871F464261F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:81:df:e0:c5:ca:3b:e8:a0:c0:5a:5d:53:
                    e2:09:d3:06:41:9a:94:a4:52:ea:d9:4b:0f:5e:97:
                    1a:ce:c6:bc:64:59:24:c6:68:a3:06:ce:39:4a:9b:
                    52:87:7c:6d:9f:d2:66:4b:de:ed:85:1d:ec:f7:38:
                    8c:39:97:56:4e:f4:0f:31:e4:4c:fd:9b:b8:66:23:
                    29:1b:e0:b4:4e:b3:1a:fc:d2:05:46:01:86:ed:9c:
                    eb:3a:d9:d6:b8:8a:a0:6c:65:e2:3e:ab:89:f1:9d:
                    fb:6e:33:62:39:89:3c:08:16:50:d2:67:21:bf:f5:
                    fd:c0:91:de:95:86:b4:a1:ef:3f:12:33:59:ce:85:
                    e0:46:6f:43:49:3b:4b:06:1a:31:88:d9:68:84:cd:
                    9d:0e:00:36:f9:dc:98:90:5b:cd:3d:43:ba:b1:a3:
                    51:7b:91:e8:90:4d:82:f8:6d:93:6e:1a:4a:2b:01:
                    61:31:69:e6:95:d4:cc:43:79:bb:97:b8:82:6d:14:
                    3d:78:99:63:90:1a:ea:d6:68:50:19:71:2a:e1:25:
                    1d:6a:d3:ee:96:44:ea:6b:f7:78:69:86:1f:4d:08:
                    2e:d2:97:a8:6c:6a:e5:82:cf:ea:c6:ce:85:dc:da:
                    75:8e:2f:c6:71:c6:28:1d:0f:bd:63:62:8b:eb:28:
                    6d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4B:56:0B:1A:F6:7B:A7:8F:CE:88:D3:4B:DE:87:1F:46:42:61:F2
            X509v3 Authority Key Identifier:
                keyid:7E:06:F0:AD:6C:3D:CC:EE:31:9A:92:B1:30:6C:4C:4D:DD:99:23:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/3136342e3136332e32382e302f32322d3234203d3e20323635393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:cf:48:26:e0:21:26:ba:e4:81:d1:20:11:41:8b:c0:94:07:
         d2:87:1d:b0:c2:bc:c4:06:98:b5:b3:31:f0:73:b6:7b:9a:08:
         8b:66:1f:14:5f:61:a7:ae:c4:23:ee:e4:56:9f:0f:11:6d:c4:
         af:b0:16:ba:6d:40:08:6e:2d:79:9d:eb:25:66:e5:71:3f:b4:
         6f:12:e9:07:7c:a2:a2:36:1f:51:b1:c2:c6:04:19:7e:7e:21:
         55:e0:dc:9c:53:26:4a:76:e1:41:7c:83:4d:24:d3:12:f6:4e:
         0f:f2:3b:76:02:41:23:ba:76:19:01:38:aa:c3:71:af:e5:4d:
         33:05:d3:eb:a9:6c:e6:13:91:42:8e:ec:37:db:ed:3c:b0:cd:
         27:29:25:6e:82:3e:4d:51:d9:45:b9:81:89:85:c2:cd:8a:7c:
         4b:91:14:de:c8:46:fe:d8:b9:f8:fb:e7:93:44:9e:ec:6f:21:
         8c:04:91:d3:37:65:c1:fe:36:20:5e:a3:1e:f7:24:bb:c2:81:
         79:37:e2:01:b6:32:98:b6:e9:19:ba:d8:56:76:0b:a6:af:59:
         be:bb:ea:7d:e3:ac:57:36:1e:07:b5:34:3e:d3:99:e9:7b:07:
         31:84:92:94:04:71:4c:44:ee:9f:1e:ad:58:2b:ad:cd:19:7d:
         bd:40:9b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:47:18 2025 by rpki-client