Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3131322e302f32322d3234203d3e203238323230.roa
File:                     3137302e3135302e3131322e302f32322d3234203d3e203238323230.roa (raw, json)
Hash identifier:          T+8qc/rzBPe+Hje9YLB+FKUgs9PJi3Egscv6Uj4DmXE=
Subject key identifier:   2D:42:32:CF:49:02:20:43:2F:26:08:81:19:35:3B:1E:16:2C:FF:70
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       4D314923A03348C8471C7DFBF7BD402A304564A0
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3131322e302f32322d3234203d3e203238323230.roa
Signing time:             Fri 09 May 2025 12:57:20 +0000
ROA not before:           Fri 09 May 2025 12:52:20 +0000
ROA not after:            Fri 08 May 2026 12:57:20 +0000
asID:                     28220
IP address blocks:        170.150.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 01:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:31:49:23:a0:33:48:c8:47:1c:7d:fb:f7:bd:40:2a:30:45:64:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: May  9 12:52:20 2025 GMT
            Not After : May  8 12:57:20 2026 GMT
        Subject: CN=2D4232CF490220432F26088119353B1E162CFF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:bb:4b:d5:e7:17:d9:fb:7f:bd:56:74:c1:
                    b8:0f:03:fe:ad:a5:35:0d:8d:a4:ad:58:0a:32:09:
                    e5:53:72:25:be:40:f9:3c:0d:a4:b1:aa:ed:2d:b1:
                    d7:3e:26:37:0b:c7:ea:40:bc:a5:6f:2a:5c:ec:b3:
                    6f:ea:ee:9f:4e:ca:1a:33:22:8b:e8:4f:81:6d:e2:
                    ad:48:7f:cd:d6:4d:76:83:7c:c4:b0:00:8c:1d:c8:
                    7e:d0:3f:d0:05:2f:25:17:2e:6e:10:9f:e5:42:60:
                    bc:88:39:9b:54:14:14:ba:be:e6:bf:3e:61:8f:03:
                    79:75:33:1c:45:0d:6b:9d:8d:90:2e:94:ec:8d:08:
                    94:30:7f:9c:a6:cb:64:5f:0a:4e:82:71:90:ea:86:
                    b1:48:88:c2:41:ec:29:65:c4:dc:b0:f1:aa:70:32:
                    54:b2:6e:2e:27:7b:f4:1c:4d:26:94:85:30:ff:d3:
                    80:d6:4c:a7:40:b6:1e:ac:2a:d7:8c:9c:d7:30:ee:
                    1b:23:99:82:6c:2e:0e:48:24:a1:77:bd:65:0b:24:
                    9a:6d:80:ac:e7:8d:ed:d4:80:ca:53:9a:9a:3c:1e:
                    43:a1:1b:db:04:f4:ff:45:a5:42:e6:24:35:4b:55:
                    c6:18:d4:eb:15:f7:67:77:fe:48:e8:15:74:c5:8f:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:42:32:CF:49:02:20:43:2F:26:08:81:19:35:3B:1E:16:2C:FF:70
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3131322e302f32322d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:77:5f:58:58:45:a3:44:b2:cf:93:59:f0:76:0e:81:f0:90:
         d9:fe:84:b4:ba:56:b5:df:45:60:80:75:f9:b6:93:fc:e9:d2:
         ac:0b:c9:ae:f7:2e:ed:ed:7d:62:82:45:ac:02:1e:c4:d7:c7:
         65:c8:97:c9:74:a6:35:5f:9c:af:04:d7:8c:c1:97:e7:94:de:
         8e:18:f6:cd:05:2d:63:20:f9:11:a9:82:96:91:ea:6a:84:de:
         27:f3:b8:c8:50:bf:0d:7b:d0:c2:16:e6:60:51:59:1b:4c:51:
         ce:61:bc:c2:f6:81:bb:90:60:c9:ac:f2:b1:5e:fe:a3:d1:63:
         5a:db:25:f1:0a:50:9a:3a:25:e2:db:86:bf:1b:f8:8a:e8:11:
         1e:ad:74:4d:9b:f5:55:b1:f6:97:68:8b:7b:55:94:0a:81:08:
         93:79:1e:2d:b5:cd:62:96:9e:85:e3:87:87:2e:41:f3:28:35:
         ae:2d:68:91:b9:40:e6:d7:2b:11:37:a7:f6:20:1b:75:80:f3:
         49:da:89:47:74:12:8f:d4:58:c3:7b:6e:ab:fb:73:30:ea:17:
         b5:36:29:e4:2a:cd:3d:b3:5f:cd:03:0c:8b:00:b6:0f:c3:a2:
         8b:8c:41:64:d5:de:c5:70:e1:c6:bf:07:ae:d6:51:fb:87:55:
         1e:e6:a0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:03:53 2025 by rpki-client