Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33352e302f32342d3234203d3e20323634393532.roa
File:                     3137302e3234372e33352e302f32342d3234203d3e20323634393532.roa (raw, json)
Hash identifier:          3Iplnvg0/dFB6VxZNdnUgiesXFh/klS9qX20s/nYtQ4=
Subject key identifier:   89:6A:37:31:33:F2:24:AA:B2:53:FC:42:36:EF:EC:7C:AD:79:44:05
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       22BCDF1016576C865C807B7C80429765849DA1C4
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33352e302f32342d3234203d3e20323634393532.roa
Signing time:             Tue 01 Apr 2025 15:26:45 +0000
ROA not before:           Tue 01 Apr 2025 15:21:45 +0000
ROA not after:            Tue 31 Mar 2026 15:26:45 +0000
asID:                     264952
IP address blocks:        170.247.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 20:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bc:df:10:16:57:6c:86:5c:80:7b:7c:80:42:97:65:84:9d:a1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Apr  1 15:21:45 2025 GMT
            Not After : Mar 31 15:26:45 2026 GMT
        Subject: CN=896A373133F224AAB253FC4236EFEC7CAD794405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:da:25:41:8b:5b:c7:70:ee:e1:a5:da:3d:
                    d6:7d:2e:c2:0c:a8:56:c6:3a:3a:8e:a8:1f:62:62:
                    78:52:7a:1a:93:99:87:b3:35:a3:08:3b:77:ab:13:
                    5d:ac:98:07:de:82:67:f6:2e:e9:f2:d2:86:63:ce:
                    86:cd:86:f5:1c:68:73:52:f8:57:b0:09:4b:e4:9b:
                    ca:b5:b3:5a:cf:5c:87:13:67:b3:3e:4e:2d:ad:07:
                    9a:f3:97:4c:25:3c:81:66:e0:5d:49:d6:0d:d3:58:
                    4c:f9:9c:8b:2c:c4:cc:2f:af:68:86:dd:3d:9e:dc:
                    f0:99:b5:00:d2:07:ca:75:ec:87:77:b7:c0:37:a8:
                    f7:c6:a3:2d:bc:d5:a6:1e:00:ce:ed:73:c4:e6:b3:
                    4e:4d:a5:94:19:20:79:75:da:36:eb:70:61:5b:2f:
                    7e:d4:0b:8e:14:02:51:97:24:4e:75:80:a5:45:67:
                    df:b4:2f:a6:58:65:fe:9a:e9:35:a4:1c:05:40:47:
                    9e:d2:9f:a9:0c:12:e9:9f:59:c5:42:23:33:ad:04:
                    c7:e4:ce:92:d8:7b:7e:67:3f:c9:a5:89:7a:fd:6e:
                    13:df:f2:4c:b4:cb:05:33:c5:a9:b9:3b:49:ee:29:
                    61:3d:5b:a5:9c:2f:4a:4e:80:01:41:37:bb:5d:31:
                    30:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6A:37:31:33:F2:24:AA:B2:53:FC:42:36:EF:EC:7C:AD:79:44:05
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33352e302f32342d3234203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:17:c1:62:45:84:52:01:78:70:74:44:67:35:5c:e4:fc:67:
         0e:8b:d7:82:1a:89:e1:f4:4d:63:ca:a9:2b:10:c5:ed:45:fe:
         52:87:e4:59:bd:5a:f4:4f:d3:99:91:b2:ff:02:25:03:bb:04:
         1f:79:8f:ad:a8:76:6e:e9:df:1d:ec:41:e4:4e:b3:33:3c:18:
         64:cf:e3:94:e1:6d:7a:68:4c:cd:c8:5a:6d:d5:69:4d:02:4f:
         94:70:a8:a2:6e:08:34:1c:cb:ce:f0:41:a8:ba:da:b0:b9:0b:
         b5:40:99:4d:4f:4f:16:8c:5f:c1:8a:ec:39:0e:56:39:e4:4d:
         9f:85:ec:70:92:b5:2f:c6:17:7a:a8:33:9d:89:c8:57:97:08:
         19:f6:2b:b3:ef:af:33:a9:d3:59:4b:13:e3:35:f4:ad:89:38:
         43:64:37:3c:4b:97:16:26:ef:e8:36:ee:a4:3e:c1:84:81:23:
         d8:7b:86:14:ef:72:c3:be:80:9d:10:5a:c4:a6:1e:62:c2:39:
         52:0c:d8:a6:03:fa:9c:5b:0b:66:c3:d7:42:3b:ed:57:4d:1b:
         54:d1:e2:7b:5c:f0:86:0f:2c:b4:10:8c:98:a1:62:3e:9f:51:
         8f:19:e4:af:8a:06:28:8f:97:f8:b0:24:70:f6:31:39:87:3b:
         18:13:aa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 13:10:03 2025 by rpki-client