Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3137302e3233382e33362e302f32322d3332203d3e20323635343437.roa
File:                     3137302e3233382e33362e302f32322d3332203d3e20323635343437.roa (raw, json)
Hash identifier:          v8hThrHMqVr8LOeZegn4+SUmKAbfPJZPyDYnbG/JuUU=
Subject key identifier:   C5:72:84:3E:DF:20:23:95:95:97:DD:81:C7:2F:6E:FC:AC:E7:55:32
Certificate issuer:       /CN=37898D289E6CB57451BCE99712B6273334A80F13
Certificate serial:       09B6C6A434F100FFE0EA291678185BB3C74468D6
Authority key identifier: 37:89:8D:28:9E:6C:B5:74:51:BC:E9:97:12:B6:27:33:34:A8:0F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37898D289E6CB57451BCE99712B6273334A80F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3137302e3233382e33362e302f32322d3332203d3e20323635343437.roa
Signing time:             Wed 30 Apr 2025 20:09:04 +0000
ROA not before:           Wed 30 Apr 2025 20:04:04 +0000
ROA not after:            Wed 29 Apr 2026 20:09:04 +0000
asID:                     265447
IP address blocks:        170.238.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/37898D289E6CB57451BCE99712B6273334A80F13.crl
                          rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/37898D289E6CB57451BCE99712B6273334A80F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37898D289E6CB57451BCE99712B6273334A80F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 22:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b6:c6:a4:34:f1:00:ff:e0:ea:29:16:78:18:5b:b3:c7:44:68:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37898D289E6CB57451BCE99712B6273334A80F13
        Validity
            Not Before: Apr 30 20:04:04 2025 GMT
            Not After : Apr 29 20:09:04 2026 GMT
        Subject: CN=C572843EDF2023959597DD81C72F6EFCACE75532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:20:ef:55:2d:d6:14:89:f3:a8:21:78:2f:
                    b2:7d:b4:5d:e5:8b:03:6a:22:01:54:e1:a1:22:12:
                    8d:a1:b0:ba:6c:b9:7e:20:6f:5c:72:ce:9a:9c:ed:
                    f9:54:3d:d3:89:19:a9:2f:02:18:ef:de:46:2b:f9:
                    eb:62:9f:53:e5:53:8c:fa:78:1a:cb:33:ee:cb:90:
                    eb:ac:75:02:44:81:0d:ab:de:9e:c0:2c:9b:13:a3:
                    a0:bc:05:f2:63:5b:5b:54:8b:a3:72:b6:76:43:78:
                    44:d8:00:cd:a3:53:ba:a3:c1:4d:2e:81:8c:72:12:
                    31:28:3d:6d:24:3e:6c:e4:1f:0e:1c:a7:ce:e8:b3:
                    16:eb:57:b6:b6:0b:dc:9e:c1:81:d2:77:77:8f:d4:
                    ce:fa:9d:24:f7:5e:cc:67:b5:91:75:ef:7f:1c:4f:
                    00:1d:64:ee:77:dc:59:ff:b1:21:18:f7:29:ff:e5:
                    cd:15:77:2e:70:57:19:37:a8:b8:ff:db:05:57:96:
                    66:5e:d0:2d:58:06:27:af:e3:92:bf:2e:bc:f1:54:
                    cd:11:f6:5a:41:ae:b5:30:63:67:5e:f3:f4:dc:28:
                    a0:90:34:b9:4f:ce:ba:14:72:d9:d8:22:97:ea:c4:
                    a0:a6:95:60:c6:a1:ec:b4:52:78:29:f3:f2:f9:6e:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:72:84:3E:DF:20:23:95:95:97:DD:81:C7:2F:6E:FC:AC:E7:55:32
            X509v3 Authority Key Identifier:
                keyid:37:89:8D:28:9E:6C:B5:74:51:BC:E9:97:12:B6:27:33:34:A8:0F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/37898D289E6CB57451BCE99712B6273334A80F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37898D289E6CB57451BCE99712B6273334A80F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3137302e3233382e33362e302f32322d3332203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:fa:6e:55:dc:e8:bc:11:0b:e6:22:74:67:51:e3:a7:d1:92:
         92:35:68:1c:db:52:b1:88:fd:19:b8:8b:7d:3b:35:0a:bc:fd:
         a0:e1:cf:30:cd:67:ef:4c:32:d2:5d:71:19:0d:70:28:93:91:
         a8:c4:c8:f4:22:b5:56:46:b3:7f:c9:c8:9e:66:26:48:bf:20:
         22:1d:b1:b5:6b:a4:55:af:91:6b:66:77:a6:d8:38:52:b1:4f:
         a7:4e:46:07:c7:a5:26:94:ab:56:ae:2a:55:2f:19:dd:48:6d:
         04:18:a5:be:5a:f1:bd:70:02:40:ea:c2:a3:a4:eb:9b:31:0d:
         04:a2:9e:88:9c:2a:24:66:f1:2e:71:d9:23:b8:99:23:94:7b:
         00:87:bb:85:b6:58:5e:bd:3e:ec:f1:91:46:ed:70:c0:21:e0:
         d3:57:05:c0:1f:3a:3a:4f:86:f8:2e:ad:81:ad:72:4a:7e:13:
         68:c4:dc:ce:67:e8:01:f4:42:27:07:9f:38:0d:4a:42:aa:44:
         59:47:63:b9:df:fb:f0:d1:c7:db:07:2e:e1:6e:42:e8:1e:26:
         88:f8:b6:d1:8a:ca:30:50:4a:1f:fd:3b:92:ab:a5:70:9c:d8:
         29:97:d3:b8:cc:d7:16:3d:3e:3a:e5:8e:77:95:2b:9c:47:d5:
         e2:38:a9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:22:36 2025 by rpki-client