Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/3137302e3234372e3234302e302f32322d3234203d3e20323633393439.roa
File:                     3137302e3234372e3234302e302f32322d3234203d3e20323633393439.roa (raw, json)
Hash identifier:          82ryy/IHvTAXm8MtsrYyhO4JsxlKAYeM2P5lM6T+IXE=
Subject key identifier:   13:2E:4A:DC:87:56:AA:05:0C:3B:14:3D:C3:6E:5A:EA:86:98:3F:20
Certificate issuer:       /CN=91D0AECE4CA4B520D30283A943EC3430DE576329
Certificate serial:       28E139FFC094F0947F51BD70B2E03F2D490C569E
Authority key identifier: 91:D0:AE:CE:4C:A4:B5:20:D3:02:83:A9:43:EC:34:30:DE:57:63:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0AECE4CA4B520D30283A943EC3430DE576329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/3137302e3234372e3234302e302f32322d3234203d3e20323633393439.roa
Signing time:             Tue 10 Jun 2025 20:55:51 +0000
ROA not before:           Tue 10 Jun 2025 20:50:51 +0000
ROA not after:            Tue 09 Jun 2026 20:55:51 +0000
asID:                     263949
IP address blocks:        170.247.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.crl
                          rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0AECE4CA4B520D30283A943EC3430DE576329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 13:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e1:39:ff:c0:94:f0:94:7f:51:bd:70:b2:e0:3f:2d:49:0c:56:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D0AECE4CA4B520D30283A943EC3430DE576329
        Validity
            Not Before: Jun 10 20:50:51 2025 GMT
            Not After : Jun  9 20:55:51 2026 GMT
        Subject: CN=132E4ADC8756AA050C3B143DC36E5AEA86983F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4a:a2:c2:7d:95:af:ae:14:ed:95:28:bd:77:
                    54:02:30:26:11:4c:5f:a4:8b:1b:d5:b0:92:17:cc:
                    3e:39:c0:02:70:7c:d1:57:27:73:fc:1a:35:0c:65:
                    a8:5a:aa:a2:f6:38:5d:35:b6:41:d7:fc:87:cd:85:
                    ad:d8:48:34:7a:88:29:72:81:0b:b1:8a:30:dd:3d:
                    03:e0:0f:8d:40:a2:99:f3:06:33:59:78:2a:25:f2:
                    96:fe:c1:c2:ca:b0:a6:10:02:23:86:99:71:9a:74:
                    d7:9e:6a:b2:32:d4:d6:71:cc:aa:c6:01:b0:61:86:
                    94:d9:09:4a:51:8b:94:db:3d:fd:20:7d:18:a9:54:
                    eb:df:dc:8d:2c:ca:ae:8e:94:4d:08:ba:29:5f:5f:
                    ef:d6:62:b0:7f:34:99:2f:68:47:52:c3:c9:8b:93:
                    7e:27:4e:05:fe:96:ec:ca:7e:8a:6b:c7:cb:4b:56:
                    dd:ff:58:a8:74:7d:f1:48:d5:0f:a6:6d:9b:d8:05:
                    1d:0f:31:dd:09:f7:12:15:7c:ca:c3:9b:7e:b0:6a:
                    b5:5c:a9:05:75:9a:69:51:74:a6:a5:de:49:5a:83:
                    ab:53:79:71:b7:7a:f7:50:69:23:6a:d2:57:ee:85:
                    19:bc:5c:7a:98:ea:76:c7:4f:5c:24:43:83:c1:be:
                    fd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2E:4A:DC:87:56:AA:05:0C:3B:14:3D:C3:6E:5A:EA:86:98:3F:20
            X509v3 Authority Key Identifier:
                keyid:91:D0:AE:CE:4C:A4:B5:20:D3:02:83:A9:43:EC:34:30:DE:57:63:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/91D0AECE4CA4B520D30283A943EC3430DE576329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0AECE4CA4B520D30283A943EC3430DE576329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Dbz34SJ5YwsD7PCyzUfd1ifoZjSsqWWh46XZUXvpYFS/0/3137302e3234372e3234302e302f32322d3234203d3e20323633393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:3c:df:a7:19:de:db:6f:a3:32:00:c8:b5:df:5c:4d:19:c2:
         71:28:0e:f7:1d:09:92:66:2c:9c:f3:f3:da:90:b8:63:86:27:
         bb:fb:40:48:c9:de:3a:38:a1:3c:80:94:c4:7c:56:1b:4b:10:
         ac:c4:d3:75:e1:48:81:e0:fb:93:11:6d:fa:4d:7b:bc:e7:f2:
         8a:58:89:95:5b:a2:79:b3:94:59:c1:3e:3e:15:82:ce:10:02:
         61:51:74:b2:ac:f3:19:b3:95:8b:c2:66:82:ee:a0:2b:47:5a:
         fc:6b:a4:58:e7:95:c9:e0:c7:2e:4a:9b:b3:73:7a:16:b0:18:
         ec:20:95:b7:80:74:b4:f5:19:d5:3e:ab:f5:c8:09:17:4e:89:
         76:6c:cb:f3:97:12:a2:d6:1f:f3:dc:de:ff:e2:e4:17:d2:a6:
         4c:44:d6:7d:72:c1:e9:ce:b9:5a:a8:cb:95:6f:b7:ad:5b:18:
         e0:46:22:dc:b9:b1:69:84:16:88:8f:ea:39:ab:45:f9:90:80:
         5a:2a:7b:88:78:60:b8:21:a0:18:8b:c7:7d:9a:6c:2c:2d:21:
         f2:ab:95:92:e1:a5:7c:e0:40:f2:4c:7c:7b:75:26:6a:14:5f:
         86:d7:f3:d3:ff:7d:21:32:27:07:c8:61:cc:9b:ec:49:4a:09:
         f8:e9:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:15:02 2025 by rpki-client