Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137302e3235342e37362e302f32322d3332203d3e203532373833.roa
File:                     3137302e3235342e37362e302f32322d3332203d3e203532373833.roa (raw, json)
Hash identifier:          W8s8whgOmZDsi43J8G37ITFwJ20HsttSGTKGgs5x0rM=
Subject key identifier:   F9:A5:3E:62:0C:2B:D3:2B:B1:40:3D:27:63:16:21:AC:3B:CE:8A:25
Certificate issuer:       /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Certificate serial:       128269DDC47CB4240B1B3B28F04470D9D22A8865
Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137302e3235342e37362e302f32322d3332203d3e203532373833.roa
Signing time:             Mon 05 May 2025 13:59:51 +0000
ROA not before:           Mon 05 May 2025 13:54:51 +0000
ROA not after:            Mon 04 May 2026 13:59:51 +0000
asID:                     52783
IP address blocks:        170.254.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl
                          rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 01:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:82:69:dd:c4:7c:b4:24:0b:1b:3b:28:f0:44:70:d9:d2:2a:88:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
        Validity
            Not Before: May  5 13:54:51 2025 GMT
            Not After : May  4 13:59:51 2026 GMT
        Subject: CN=F9A53E620C2BD32BB1403D27631621AC3BCE8A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4a:a2:b1:c0:65:24:69:91:8b:9b:25:63:c2:
                    3e:4c:69:5f:7c:1a:dc:07:0f:a7:a9:a6:48:70:f8:
                    1c:10:bb:44:08:d0:2c:30:20:7d:40:de:14:6a:9b:
                    73:f8:9b:11:bf:2f:77:d8:27:9f:fa:81:1f:ea:f3:
                    e1:46:0b:90:a2:f0:1f:14:c5:bd:c9:1d:2b:27:b1:
                    b7:c5:5c:c9:8f:f1:17:bc:d2:fe:90:17:4f:57:d4:
                    87:55:78:7d:47:7e:63:72:49:84:73:47:28:1d:45:
                    a0:9e:6f:44:3e:cd:c7:90:87:d5:92:71:4d:a5:f8:
                    9a:c6:63:ea:1c:47:6a:0d:2e:74:10:31:7c:3e:b8:
                    3f:5c:76:9b:94:24:bf:75:f5:fb:bd:ed:58:5f:b2:
                    65:75:78:ca:55:00:87:ab:08:51:71:6b:10:20:0f:
                    db:69:97:05:54:37:51:6b:a3:d5:de:4b:a1:30:45:
                    20:c3:85:52:e7:aa:d1:a0:cb:00:57:a2:b8:c7:24:
                    50:a0:40:f4:dd:8e:55:a6:18:b1:e3:fb:ff:40:8c:
                    1d:f5:89:fa:86:3e:be:58:c1:cb:33:73:f0:09:ba:
                    5d:01:d2:4d:b1:d1:86:fb:c7:44:90:0e:4e:04:20:
                    ba:b6:0e:bf:7d:d6:e9:60:63:36:0d:8f:5e:94:af:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A5:3E:62:0C:2B:D3:2B:B1:40:3D:27:63:16:21:AC:3B:CE:8A:25
            X509v3 Authority Key Identifier:
                keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137302e3235342e37362e302f32322d3332203d3e203532373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:5c:c6:81:29:d8:0c:86:26:95:f5:58:6f:ef:24:4d:af:96:
         25:b4:09:62:b6:7b:22:98:f2:d3:ba:cb:d1:40:cc:67:37:23:
         9d:92:d1:e3:ad:0c:51:86:72:de:e1:01:10:e0:69:f6:c2:51:
         35:cb:69:e4:3a:9e:d3:c0:9e:9a:10:17:ec:62:89:30:89:c0:
         27:0f:42:cf:2b:97:61:bf:38:15:d4:ec:4d:05:61:2a:9b:60:
         2a:24:8d:3d:a5:a6:29:0e:9d:fc:5b:5a:29:ee:29:ed:0c:37:
         eb:47:16:3f:13:4b:24:77:34:b0:17:78:21:7d:d4:8d:81:e1:
         9e:66:86:1f:ef:06:fe:f4:8d:f8:3e:a0:21:08:4b:14:81:f1:
         54:19:11:49:a3:1e:4e:63:30:11:ca:47:55:01:f7:86:ee:0e:
         2c:be:d6:ed:10:00:a4:ef:a3:28:a8:53:74:dd:90:64:f9:c3:
         4c:18:21:c2:9c:50:28:a5:cc:68:e2:fe:39:3a:5f:d9:af:19:
         8f:b2:47:28:a7:12:48:b2:d6:4c:c8:ce:a9:3b:29:23:8b:57:
         c0:66:d9:7c:ac:2a:0c:a0:12:0a:58:b0:3b:4c:84:ed:36:70:
         fc:72:06:4f:7a:31:d4:49:33:ce:11:db:3c:ee:2f:7c:2a:7b:
         de:96:16:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:44:40 2025 by rpki-client