Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa
File:                     3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa (raw, json)
Hash identifier:          YF8aSn8ZrakqqHsGkJ+aJMpg3UM2WIjA8ryfsST1/NQ=
Subject key identifier:   10:BE:2F:C7:9B:82:5A:20:E7:94:3C:07:25:45:70:C6:15:3A:BF:0E
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       3D10D976627BFC07A84C3DAB1D9C868CFF57781D
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     266505
IP address blocks:        170.244.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 02:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:10:d9:76:62:7b:fc:07:a8:4c:3d:ab:1d:9c:86:8c:ff:57:78:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=10BE2FC79B825A20E7943C07254570C6153ABF0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:6b:d9:24:9a:04:78:66:7b:58:5b:bc:03:
                    a1:8d:cc:aa:fa:25:36:f1:df:3b:7b:bb:c7:3b:89:
                    4b:f1:5b:eb:55:33:30:9d:29:fb:2b:94:ca:cd:9b:
                    a2:e1:ea:0c:77:d8:86:70:d4:cc:d6:0c:ff:d2:36:
                    52:3c:b5:63:9b:e8:c0:1f:a2:fd:9b:a6:95:a3:78:
                    34:1f:36:c9:72:34:87:32:75:a5:94:ac:4b:a5:df:
                    80:7f:4b:a4:98:6b:bc:ab:d1:29:dc:aa:88:45:f5:
                    6b:63:8c:f2:df:14:0e:03:77:58:25:de:72:c5:e4:
                    68:6a:6b:2a:2c:0d:43:ea:23:b3:c3:86:68:bd:31:
                    15:cc:be:f0:8d:52:17:c7:78:6b:43:da:a1:8b:c1:
                    df:dc:db:b1:d9:cc:2f:c1:94:4a:cf:6c:d3:bd:e8:
                    b5:8c:1b:e6:b9:7e:8a:c5:2d:25:f0:b1:20:f8:a3:
                    80:c7:b5:08:1a:be:24:13:3c:8f:81:4c:7a:69:b1:
                    f2:fa:78:d0:03:2e:94:7d:f6:40:28:be:bd:d0:d9:
                    b5:73:01:dd:ef:ce:15:88:ca:cb:07:a0:43:b5:56:
                    28:9c:68:8d:c9:2d:5a:34:e0:00:7f:bc:b0:e8:50:
                    09:74:ae:6a:27:fd:ee:ce:43:80:56:56:04:e5:b6:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BE:2F:C7:9B:82:5A:20:E7:94:3C:07:25:45:70:C6:15:3A:BF:0E
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:c6:97:77:78:ef:4c:3b:11:dc:ca:58:3e:d5:ee:c1:aa:a4:
         5d:34:21:44:ed:c5:04:9b:31:01:3c:fa:2b:40:d3:d8:d1:03:
         48:20:39:c4:84:84:9c:03:36:1a:fe:00:6b:d7:b6:6d:0c:82:
         5a:d3:c3:0c:be:84:ab:97:15:5b:20:09:0b:59:6c:b4:24:26:
         5f:48:5b:8e:b5:12:9e:68:9d:c8:62:eb:b0:e3:1c:89:3e:81:
         88:6e:49:44:3f:05:98:90:a0:6f:a7:72:97:a9:72:40:58:fd:
         9a:44:8d:22:d1:8b:24:4d:21:12:4e:2f:f2:79:16:88:10:41:
         3f:79:a0:bb:6d:23:70:64:92:f4:f7:22:85:f7:2f:9f:e7:4b:
         46:cb:2d:5f:9f:4f:a2:90:fc:6f:82:67:e4:38:79:44:b2:4c:
         1b:dc:08:c2:a3:aa:76:6f:ff:7a:af:40:f0:ab:12:a5:02:e5:
         21:ca:e1:a1:8d:5b:29:89:97:41:82:bd:8d:3f:61:b3:78:93:
         fc:04:cd:05:10:c1:b8:5f:f1:1e:4d:4b:f1:42:95:80:17:da:
         e4:cd:be:d3:77:e7:6f:1c:43:10:ff:29:8e:1f:db:ba:b6:88:
         09:99:53:a6:58:9b:67:d6:c8:1d:5d:27:b2:5c:92:14:2a:40:
         51:df:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:41:58 2025 by rpki-client