Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa
File:                     3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa (raw, json)
Hash identifier:          YPjqMC53pPLv42dL6Pw9qLt/uKQ2XnkLPjSql2GVReY=
Subject key identifier:   6F:7E:48:75:21:A8:EB:C5:AD:CF:4E:4A:D2:DB:E0:07:AC:2A:78:F2
Certificate issuer:       /CN=0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0
Certificate serial:       3DF35404F977079DE6EB2D6EBBC399A42BAEEF02
Authority key identifier: 0C:9E:7A:58:1F:B3:4E:75:3F:90:B9:3C:9E:30:03:ED:6F:E1:D0:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa
Signing time:             Tue 06 May 2025 12:57:16 +0000
ROA not before:           Tue 06 May 2025 12:52:16 +0000
ROA not after:            Tue 05 May 2026 12:57:16 +0000
asID:                     266022
IP address blocks:        170.245.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.crl
                          rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 13:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f3:54:04:f9:77:07:9d:e6:eb:2d:6e:bb:c3:99:a4:2b:ae:ef:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0
        Validity
            Not Before: May  6 12:52:16 2025 GMT
            Not After : May  5 12:57:16 2026 GMT
        Subject: CN=6F7E487521A8EBC5ADCF4E4AD2DBE007AC2A78F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b9:ac:86:d0:ba:0a:d7:b1:6c:d9:5e:c4:51:
                    84:14:4f:c9:11:e5:0b:36:ea:eb:0e:3b:a2:5d:46:
                    08:c1:21:af:80:9a:de:41:44:aa:34:65:17:98:0a:
                    0e:b6:a5:96:aa:07:2c:f5:be:be:a2:db:eb:50:bd:
                    a6:83:02:7e:ab:01:43:a1:bd:3f:10:63:49:94:5c:
                    7a:ac:11:ff:3b:89:dd:45:77:03:69:3d:35:b3:6e:
                    45:e0:4f:0e:e6:8c:e6:66:97:13:9c:d2:4e:50:d4:
                    24:ce:18:c5:84:b5:f5:a5:e5:ae:82:91:cb:a7:0a:
                    5d:df:60:8e:e5:73:7d:97:67:d2:f2:7f:6e:40:2b:
                    ed:6a:9d:ec:59:bc:ed:1f:34:17:70:f5:c4:35:e1:
                    52:b3:ef:cc:95:7e:36:6c:4c:9d:9a:7f:05:a2:2d:
                    4b:38:fb:62:33:4f:6b:f3:28:a5:9b:14:ff:cd:46:
                    7b:28:c3:27:86:fd:df:6c:b9:f1:41:ed:bf:de:6f:
                    db:88:ad:49:14:9d:7a:60:5f:19:ce:82:0c:48:9f:
                    3a:58:a3:40:bd:d4:1b:2f:e3:ad:23:42:57:02:d1:
                    d3:9a:e8:50:f3:91:84:1d:26:4c:16:83:5a:c8:42:
                    8b:76:24:10:26:8f:84:65:66:b1:75:07:94:3e:82:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7E:48:75:21:A8:EB:C5:AD:CF:4E:4A:D2:DB:E0:07:AC:2A:78:F2
            X509v3 Authority Key Identifier:
                keyid:0C:9E:7A:58:1F:B3:4E:75:3F:90:B9:3C:9E:30:03:ED:6F:E1:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:be:ec:9f:01:67:54:11:2a:62:28:d6:e5:f8:56:08:c7:65:
         29:ca:ba:98:65:7d:e0:7b:38:62:d4:ae:f1:49:af:f1:8e:f7:
         ea:82:c5:c5:78:bb:6d:99:54:94:36:ff:fa:a6:4e:7b:c4:6e:
         52:2e:c2:47:00:94:7f:f0:f3:3a:c1:ba:6a:0b:65:23:d4:82:
         f1:c9:2f:9c:52:bc:fa:fc:e9:25:ce:09:d9:12:80:1e:05:cd:
         91:94:75:ef:84:d5:8c:42:af:0f:41:36:16:1e:93:41:35:df:
         a4:9b:ad:e1:f0:df:f1:03:d8:ec:2e:f1:ef:1c:ce:a2:d4:25:
         85:32:37:9a:b3:15:78:cf:95:b0:ce:2b:11:33:ee:87:95:39:
         27:7f:7c:c2:2a:cf:93:bc:63:2c:08:f7:ae:84:3c:29:dc:7b:
         4c:2f:01:eb:12:b7:ea:c8:19:ec:74:cb:31:ec:a3:1c:bb:60:
         d5:ef:5c:eb:32:1d:af:45:b3:19:85:51:b2:90:88:b6:13:5c:
         d0:64:f7:60:2c:d1:01:ee:e6:51:99:75:13:5a:f2:fc:66:db:
         05:43:3e:be:2e:c5:02:54:18:c8:35:fa:80:df:29:b3:7f:43:
         d8:5d:44:43:f9:e7:ea:21:1f:4f:89:71:a3:5b:86:e5:76:5a:
         97:07:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:57:44 2025 by rpki-client