Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233362e302f32332d3233203d3e20323731373031.roa
File:                     3137302e37392e3233362e302f32332d3233203d3e20323731373031.roa (raw, json)
Hash identifier:          2hu2tvSWcoaQbFCNdSloCa8uDRsltDRVQUg974AOHnM=
Subject key identifier:   66:6A:A7:6A:A5:90:69:C3:A2:F9:63:68:18:04:C9:64:0C:40:35:A4
Certificate issuer:       /CN=05563772FA5F7F02E46B10D42952096452B02F7E
Certificate serial:       54E3810901A10B570709114A06B6C52A4600AC5F
Authority key identifier: 05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233362e302f32332d3233203d3e20323731373031.roa
Signing time:             Tue 13 May 2025 14:00:23 +0000
ROA not before:           Tue 13 May 2025 13:55:23 +0000
ROA not after:            Tue 12 May 2026 14:00:23 +0000
asID:                     271701
IP address blocks:        170.79.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl
                          rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 17:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e3:81:09:01:a1:0b:57:07:09:11:4a:06:b6:c5:2a:46:00:ac:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05563772FA5F7F02E46B10D42952096452B02F7E
        Validity
            Not Before: May 13 13:55:23 2025 GMT
            Not After : May 12 14:00:23 2026 GMT
        Subject: CN=666AA76AA59069C3A2F963681804C9640C4035A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:15:11:80:b3:5a:d4:9d:1c:6a:76:82:d9:
                    3c:73:c5:9d:1a:c0:ae:cd:84:70:8f:6d:7c:7a:26:
                    69:28:66:dd:5b:72:73:fe:ca:8a:b8:14:bb:ef:cd:
                    bf:75:79:c5:6a:5c:c9:df:24:8c:28:57:63:9c:de:
                    bb:c3:aa:ca:d1:02:95:b3:38:c0:8b:94:15:7c:6d:
                    94:b1:f5:47:3a:f0:ee:51:78:45:c3:5d:44:b3:dc:
                    de:a3:26:24:c8:fc:48:e9:89:ac:08:7d:4b:fa:45:
                    13:05:d7:01:1c:fa:08:71:36:81:47:a1:64:d0:15:
                    79:55:88:2f:d5:e8:32:d5:5b:48:c1:d6:52:6c:65:
                    58:28:92:c6:fe:cd:32:dd:ec:13:ba:0e:f5:56:f8:
                    bc:ca:97:c7:54:73:20:93:5d:ab:5e:e7:78:d3:a6:
                    65:b1:b6:06:88:bd:6b:88:93:ee:99:04:f9:2e:ef:
                    f9:72:fa:10:1e:26:84:63:1c:15:af:fe:10:d3:c0:
                    02:71:a1:4b:5c:ff:95:3c:6f:11:08:29:9d:65:38:
                    82:63:37:da:f8:f8:bc:cd:28:35:0a:80:af:87:d9:
                    43:d3:43:ea:2e:3f:98:0d:98:bc:a3:f6:83:09:d1:
                    0d:f7:6f:9f:a2:9a:97:d6:fd:85:0a:78:11:ca:46:
                    41:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6A:A7:6A:A5:90:69:C3:A2:F9:63:68:18:04:C9:64:0C:40:35:A4
            X509v3 Authority Key Identifier:
                keyid:05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/3137302e37392e3233362e302f32332d3233203d3e20323731373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:f9:14:c6:30:4a:bc:e3:89:7c:66:89:9d:2c:42:8f:e0:4d:
         db:b9:60:86:bd:73:38:13:8b:04:f4:bc:ff:4d:e0:7f:4d:e3:
         e5:89:41:c9:81:0a:88:ba:b4:c5:15:10:4c:94:3b:5b:12:02:
         0a:a8:37:42:12:45:4a:f0:15:5c:6a:10:e8:b3:cc:8d:84:fb:
         24:78:c7:b4:98:31:1a:6e:2e:3a:ad:6d:50:55:c5:bb:ed:2f:
         d2:8d:a8:b9:28:94:f1:c2:c7:be:68:45:b4:8f:7c:3b:90:a6:
         f7:5f:c2:0c:13:14:5d:19:80:2b:e6:0e:41:d2:8f:66:3e:d3:
         82:ed:c1:3f:f2:2b:94:fd:76:ea:a1:bf:6f:4c:82:e0:e4:a4:
         60:13:69:58:de:25:4d:69:49:87:d2:0c:c3:cb:38:89:24:b7:
         b8:b8:37:7a:64:b8:f3:6d:c0:de:30:53:83:34:8e:c1:94:f2:
         fa:76:87:80:a6:65:95:e7:14:2e:9a:6a:af:4f:f4:07:03:c9:
         69:69:93:ce:b5:5a:10:4f:ac:31:82:a6:19:64:e0:3b:a1:4b:
         52:3e:96:ac:00:ac:76:45:bc:9a:cd:d6:44:fb:72:a2:68:47:
         9e:76:92:83:dd:84:10:8c:ee:74:5d:1c:ac:76:26:02:6b:c2:
         0e:01:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:15:23 2025 by rpki-client