Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132362e302f32342d3234203d3e20323636303232.roa
File:                     3137302e3234352e3132362e302f32342d3234203d3e20323636303232.roa (raw, json)
Hash identifier:          J3vPBe+lnQ/iFaCVqN2x7MdAQVBEj+rvWmJtEF9kUE0=
Subject key identifier:   7C:C7:EF:7B:71:AA:4F:D0:C2:84:77:66:B5:86:67:E9:32:11:DE:6C
Certificate issuer:       /CN=0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0
Certificate serial:       4AE55C6B2FAAD1870ABA197EF7360D718A738246
Authority key identifier: 0C:9E:7A:58:1F:B3:4E:75:3F:90:B9:3C:9E:30:03:ED:6F:E1:D0:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132362e302f32342d3234203d3e20323636303232.roa
Signing time:             Tue 06 May 2025 12:57:16 +0000
ROA not before:           Tue 06 May 2025 12:52:16 +0000
ROA not after:            Tue 05 May 2026 12:57:16 +0000
asID:                     266022
IP address blocks:        170.245.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.crl
                          rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 13:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e5:5c:6b:2f:aa:d1:87:0a:ba:19:7e:f7:36:0d:71:8a:73:82:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0
        Validity
            Not Before: May  6 12:52:16 2025 GMT
            Not After : May  5 12:57:16 2026 GMT
        Subject: CN=7CC7EF7B71AA4FD0C2847766B58667E93211DE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:ca:b8:a7:b5:50:45:9e:82:ca:70:1f:f6:
                    c1:c5:8c:ce:46:90:02:b5:ff:4c:e4:b9:f0:66:b4:
                    d2:94:e3:b2:fe:ca:78:c4:d7:70:64:eb:66:00:e8:
                    18:26:d5:fe:52:10:3a:d7:54:97:20:90:81:bc:32:
                    27:61:82:0e:c6:05:80:b3:c0:f6:1d:33:8d:8f:16:
                    04:53:cd:c0:53:be:fd:b3:f3:ad:04:56:12:c3:c4:
                    fc:eb:3c:3d:ff:80:fe:23:90:9f:60:c2:6c:bf:c0:
                    11:c4:b2:ba:88:91:ee:c7:d3:73:bf:0b:ae:aa:88:
                    ff:2a:ff:68:7d:ea:16:6d:6d:87:ad:3c:a7:9c:62:
                    2c:2e:62:f1:1d:83:64:d3:b6:e5:f4:92:1e:3f:a1:
                    8b:d7:cc:a0:60:e7:7e:34:19:53:fa:91:04:92:63:
                    90:36:f8:d4:08:07:40:5c:76:54:c0:99:05:5d:7c:
                    c2:df:fd:4f:0f:21:a2:82:56:c0:0f:d8:98:d6:7b:
                    38:76:59:c8:2c:c1:3b:5e:bf:17:bf:51:04:82:57:
                    c2:68:59:6a:23:eb:89:e6:de:02:b7:cc:4f:6c:75:
                    fb:89:5d:f4:63:2d:c5:92:67:fa:b8:51:65:70:08:
                    f7:40:c1:28:bf:4a:f6:bd:c4:43:af:f3:72:55:d1:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C7:EF:7B:71:AA:4F:D0:C2:84:77:66:B5:86:67:E9:32:11:DE:6C
            X509v3 Authority Key Identifier:
                keyid:0C:9E:7A:58:1F:B3:4E:75:3F:90:B9:3C:9E:30:03:ED:6F:E1:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132362e302f32342d3234203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:6b:a9:89:7b:39:85:19:93:7b:1f:e4:69:62:9e:ee:a0:f3:
         2b:f8:a3:e7:12:11:59:f7:51:ca:ed:88:7f:73:0b:92:d1:65:
         cb:fb:c6:2c:b2:66:7c:e0:3d:d8:6c:65:a1:73:c4:ce:f2:89:
         bb:9e:2f:79:b2:cb:68:47:2b:5c:2b:6c:e5:b2:fe:8e:a7:9d:
         25:74:13:32:23:40:ac:83:b9:e7:20:bd:ce:01:a4:59:06:63:
         ea:0f:40:dd:80:31:cb:11:77:95:b1:20:36:03:d2:75:84:44:
         14:34:ae:a3:43:5d:7b:65:95:aa:c5:01:bd:96:5e:c7:61:8d:
         a6:41:3d:29:90:88:d4:77:19:4a:59:11:f2:e0:7a:cc:78:79:
         9d:c7:01:98:df:2c:fe:4a:f9:30:73:d1:11:70:6a:ef:53:57:
         85:14:48:b9:af:18:bf:41:98:d4:bd:0a:4f:17:b2:f9:c1:4f:
         d8:61:30:e2:bd:e3:15:ae:4b:ba:a1:6a:02:12:73:59:2c:b9:
         c3:12:10:2b:e3:64:26:86:3b:fa:ce:f2:da:26:a9:80:2a:c1:
         a8:58:4a:72:6f:ad:c0:e1:fa:d3:c2:07:f7:42:c6:0f:0a:cb:
         f8:2c:bb:4e:89:f6:aa:2e:1b:08:48:60:1d:02:5b:1b:d1:62:
         86:e6:1b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:57:19 2025 by rpki-client