Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136302e302f32322d3234203d3e20323634313132.roa
File:                     3137302e38332e3136302e302f32322d3234203d3e20323634313132.roa (raw, json)
Hash identifier:          kjRXgE0/0tSktAP46xSsYXcpBUoV/kAEz7+o0rfOYak=
Subject key identifier:   BD:DB:54:20:89:B7:3F:B6:8C:30:04:E5:81:0A:FF:21:B4:EE:21:5B
Certificate issuer:       /CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3
Certificate serial:       18EC951AE22B57BED6F905B9CC6A98DFF1B904C6
Authority key identifier: A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136302e302f32322d3234203d3e20323634313132.roa
Signing time:             Wed 09 Jul 2025 15:52:48 +0000
ROA not before:           Wed 09 Jul 2025 15:47:48 +0000
ROA not after:            Wed 08 Jul 2026 15:52:48 +0000
asID:                     264112
IP address blocks:        170.83.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl
                          rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 18:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ec:95:1a:e2:2b:57:be:d6:f9:05:b9:cc:6a:98:df:f1:b9:04:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3
        Validity
            Not Before: Jul  9 15:47:48 2025 GMT
            Not After : Jul  8 15:52:48 2026 GMT
        Subject: CN=BDDB542089B73FB68C3004E5810AFF21B4EE215B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:e0:31:b8:f4:f6:d2:02:e7:56:3f:26:b8:
                    c0:61:16:4a:85:20:33:ba:51:dd:37:f9:f7:e7:0a:
                    e8:ec:ea:47:48:2e:0a:65:0f:01:54:4c:0e:3a:9b:
                    65:59:20:99:b2:cc:e8:98:63:89:c9:e0:4b:ca:7b:
                    b0:5c:34:89:ce:d8:ba:aa:ee:ca:d9:fe:5b:20:e6:
                    54:ee:da:62:2e:c4:a0:1f:29:2f:33:cf:72:f0:ad:
                    6e:59:fc:42:89:60:d4:66:b0:19:29:6b:d3:8e:c9:
                    bc:2b:b6:d5:d7:fd:b6:d1:0d:d3:ab:b1:25:91:08:
                    4c:d5:09:53:5b:bd:f8:3f:a6:5e:11:db:61:67:7e:
                    d2:1e:68:38:5b:72:0d:5a:5b:98:b0:bb:e6:5d:ba:
                    44:55:be:19:d1:e4:93:94:be:d4:fd:8e:a5:33:65:
                    b6:b5:ff:30:65:b3:81:70:e4:c0:8f:c6:6d:2f:13:
                    4f:21:63:cf:4d:d6:5d:8d:31:60:f8:5b:d9:d5:39:
                    ab:ad:51:18:b6:eb:47:2d:90:d2:ba:8d:68:ac:81:
                    9e:96:77:e3:7c:0e:83:ee:93:d7:a5:6f:d3:cf:e0:
                    6b:d9:87:09:35:26:08:db:76:6a:7a:2a:c1:da:b7:
                    ec:5d:a3:fa:50:04:ab:0e:77:b6:de:5e:01:11:85:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DB:54:20:89:B7:3F:B6:8C:30:04:E5:81:0A:FF:21:B4:EE:21:5B
            X509v3 Authority Key Identifier:
                keyid:A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/3137302e38332e3136302e302f32322d3234203d3e20323634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:d7:bd:23:d6:28:68:e7:7b:4c:1e:28:ec:f8:73:61:2c:9c:
         be:15:33:a2:0d:cf:6d:7c:19:2a:1e:cf:44:e4:a6:92:00:53:
         1a:bb:9f:6e:0e:5b:82:d7:ea:20:b3:92:45:b5:d4:db:48:c5:
         b1:d6:41:08:3f:a5:be:5a:8a:68:72:eb:16:96:6e:10:7f:20:
         b5:ba:0d:02:7c:28:dd:0b:5f:d5:4d:fd:09:02:1b:66:28:74:
         56:08:8c:eb:59:a1:69:56:39:50:a6:c4:ee:ff:d5:ea:30:e9:
         b8:a2:21:cd:41:ca:38:3d:48:bb:1f:c5:6f:0f:61:39:7a:98:
         ce:2a:67:b1:73:84:75:b7:12:67:89:0b:b7:e9:e4:68:40:a6:
         d8:a4:7a:a0:1e:f3:a9:ca:88:df:0b:a4:b7:2e:17:ed:7b:6d:
         08:d4:51:db:6f:47:75:5f:35:22:27:bd:73:6d:9c:6e:79:3b:
         50:f6:d1:85:7c:e0:94:4e:84:0b:fc:9e:70:bf:78:76:8e:a2:
         2f:86:9c:57:76:b8:58:24:c2:cc:ca:52:91:b3:12:fd:d4:4e:
         45:f3:22:dd:d5:3d:a5:07:99:e8:3b:6c:98:e0:69:f4:81:d1:
         28:f3:40:fd:ad:d4:70:df:ed:04:4a:2d:55:dc:be:d4:43:0f:
         d3:12:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 19:15:23 2025 by rpki-client