Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32322d3232203d3e20323636303232.roa
File:                     3137302e3234352e3132342e302f32322d3232203d3e20323636303232.roa (raw, json)
Hash identifier:          c5glFMByvpnMIegNy5aaYzjOSeI+qm5ABaH+4pnoaIg=
Subject key identifier:   F6:CF:60:8E:D4:2C:9F:92:63:F1:B6:CE:6B:3B:C5:DC:D8:AC:70:30
Certificate issuer:       /CN=0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0
Certificate serial:       4ABE33C64D79AB0BFFB1FCB1F7498CEED26DDFBB
Authority key identifier: 0C:9E:7A:58:1F:B3:4E:75:3F:90:B9:3C:9E:30:03:ED:6F:E1:D0:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32322d3232203d3e20323636303232.roa
Signing time:             Tue 06 May 2025 12:57:15 +0000
ROA not before:           Tue 06 May 2025 12:52:15 +0000
ROA not after:            Tue 05 May 2026 12:57:15 +0000
asID:                     266022
IP address blocks:        170.245.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.crl
                          rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 19:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:be:33:c6:4d:79:ab:0b:ff:b1:fc:b1:f7:49:8c:ee:d2:6d:df:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0
        Validity
            Not Before: May  6 12:52:15 2025 GMT
            Not After : May  5 12:57:15 2026 GMT
        Subject: CN=F6CF608ED42C9F9263F1B6CE6B3BC5DCD8AC7030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:78:fb:f9:71:34:8d:9a:91:87:7f:57:c1:
                    cd:7d:a9:80:1a:82:b5:03:db:84:60:47:ef:9c:93:
                    6b:d5:42:af:c7:98:d3:6a:51:b1:41:11:23:1f:75:
                    2a:d1:6d:30:54:c5:b3:73:db:32:52:5a:0a:5b:70:
                    a5:1c:ba:a4:71:01:12:4e:1d:b2:57:9b:32:5f:55:
                    42:2e:53:71:65:4d:b6:5d:dc:e5:59:5f:e9:bb:18:
                    e6:b7:38:68:cb:13:5b:96:fb:02:95:97:e1:92:ff:
                    a6:58:74:c5:41:58:00:c4:05:09:18:e8:83:b5:a6:
                    7e:4a:c6:47:be:63:89:31:75:f7:b8:75:61:8a:ee:
                    66:07:af:3a:cb:46:a3:89:2c:2b:66:bc:99:5a:c3:
                    bc:dc:32:51:ce:b4:63:52:0d:f3:34:73:4d:ba:9c:
                    ee:23:ec:9f:c2:79:a5:eb:f1:58:6d:a0:db:2f:46:
                    fb:17:72:a7:e9:25:d3:9e:36:84:9a:f3:fa:20:6d:
                    4e:32:d9:37:4b:eb:6a:61:71:fa:b5:77:40:7f:b6:
                    34:66:78:23:d1:06:76:44:ec:02:ca:a0:39:28:9e:
                    e9:d3:c9:de:f7:57:3b:ad:c2:32:08:18:81:ba:87:
                    fa:94:8b:23:13:22:8b:c8:e7:8c:7b:d4:74:26:9e:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CF:60:8E:D4:2C:9F:92:63:F1:B6:CE:6B:3B:C5:DC:D8:AC:70:30
            X509v3 Authority Key Identifier:
                keyid:0C:9E:7A:58:1F:B3:4E:75:3F:90:B9:3C:9E:30:03:ED:6F:E1:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32322d3232203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:e2:be:3f:20:59:7d:cb:66:be:a7:34:e5:4c:6a:da:b1:26:
         86:0c:cd:1b:7b:97:08:c2:e5:15:38:ed:d3:de:e9:7e:65:f1:
         34:99:4d:ed:21:dc:55:ba:19:b5:86:b5:46:4d:15:37:6f:df:
         a6:ec:94:59:d2:a9:4c:db:01:15:86:9d:23:8c:52:17:2e:2a:
         f3:69:be:95:6e:3f:cc:d0:d7:c5:76:d5:f5:99:5a:d3:1b:98:
         fa:26:15:8e:e9:63:d8:09:da:79:a6:c2:7e:8b:b6:c0:c1:df:
         ae:eb:15:d8:28:b1:ce:d9:b3:be:b2:13:21:e6:76:12:be:d5:
         14:19:47:d4:33:98:95:93:fe:14:5c:ca:27:22:4c:08:e6:5d:
         5b:3c:8f:58:68:6e:4a:10:43:36:4b:4c:20:ca:96:8b:e0:fb:
         06:be:f2:9b:c0:d5:47:7f:f6:ec:8b:23:a4:3b:3f:20:f3:ca:
         34:e4:6c:0c:77:52:c2:a3:7f:1e:4a:89:91:ac:60:47:10:0c:
         c4:f5:6c:24:c9:45:04:ee:8f:e6:7a:45:5d:7b:19:a4:4f:a2:
         90:5a:4d:f9:42:89:af:d4:93:e7:b8:f2:bc:53:a4:8b:3a:69:
         4f:05:85:21:a4:6c:3b:da:cd:d6:8e:8a:ec:3d:67:b1:54:64:
         a8:eb:e9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:15:04 2025 by rpki-client