Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34342e302f32322d3232203d3e20323636333638.roa
File:                     3137302e38302e34342e302f32322d3232203d3e20323636333638.roa (raw, json)
Hash identifier:          v/6iuCMKsNkT1egYTE/Qqo+TdfV+ahzEdEocw7+I/z8=
Subject key identifier:   BB:00:0F:D4:83:0D:8B:CE:47:26:D4:57:19:51:C1:90:81:D3:CF:53
Certificate issuer:       /CN=536DE1C52594C50A13E5683BE9F9A3133E1884CE
Certificate serial:       0B72EA473767193EBB3A23AB85857817A50C352B
Authority key identifier: 53:6D:E1:C5:25:94:C5:0A:13:E5:68:3B:E9:F9:A3:13:3E:18:84:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/536DE1C52594C50A13E5683BE9F9A3133E1884CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34342e302f32322d3232203d3e20323636333638.roa
Signing time:             Sat 28 Jun 2025 19:03:38 +0000
ROA not before:           Sat 28 Jun 2025 18:58:38 +0000
ROA not after:            Sat 27 Jun 2026 19:03:38 +0000
asID:                     266368
IP address blocks:        170.80.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/536DE1C52594C50A13E5683BE9F9A3133E1884CE.crl
                          rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/536DE1C52594C50A13E5683BE9F9A3133E1884CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/536DE1C52594C50A13E5683BE9F9A3133E1884CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:72:ea:47:37:67:19:3e:bb:3a:23:ab:85:85:78:17:a5:0c:35:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=536DE1C52594C50A13E5683BE9F9A3133E1884CE
        Validity
            Not Before: Jun 28 18:58:38 2025 GMT
            Not After : Jun 27 19:03:38 2026 GMT
        Subject: CN=BB000FD4830D8BCE4726D4571951C19081D3CF53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2f:bf:e2:e3:f7:84:a0:dc:d8:88:ad:4a:dd:
                    be:74:b4:02:aa:00:bc:b1:28:83:e6:2f:24:15:1f:
                    e5:e7:a5:b5:b6:73:b0:31:69:10:9c:8d:91:49:d9:
                    4a:e6:8b:04:fb:01:c2:74:c3:19:1a:94:7c:77:68:
                    6e:0a:9c:8d:80:92:b6:5d:ef:43:4b:7d:ea:fc:52:
                    8d:23:0a:db:68:be:61:f0:26:bd:a9:90:e9:71:2a:
                    99:c9:06:21:a0:1c:80:e1:51:70:ac:50:41:69:6a:
                    b4:de:50:e2:14:d1:56:96:15:9f:7b:7c:9e:7a:2e:
                    2e:cf:52:25:14:5b:75:27:bc:1b:8b:26:79:29:47:
                    34:cc:71:77:6c:1c:35:dc:94:06:bf:0f:c7:5d:be:
                    22:50:0c:22:f7:54:18:28:2b:a8:59:0f:cf:96:90:
                    81:c8:36:a4:cd:c8:6b:ad:19:0c:a1:ea:01:ca:ed:
                    1f:b8:cb:71:5f:67:83:66:a1:ae:78:4e:b1:89:72:
                    79:5a:ce:d0:26:80:a6:e7:bc:60:bb:c9:e6:6b:62:
                    ce:4e:25:f0:20:43:28:08:2e:42:68:11:2f:a0:1e:
                    84:9a:0b:a5:c6:9e:91:00:74:99:10:63:30:4d:b3:
                    f1:48:0d:b2:be:b2:6b:5a:62:6b:2b:72:bf:7c:ea:
                    78:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:00:0F:D4:83:0D:8B:CE:47:26:D4:57:19:51:C1:90:81:D3:CF:53
            X509v3 Authority Key Identifier:
                keyid:53:6D:E1:C5:25:94:C5:0A:13:E5:68:3B:E9:F9:A3:13:3E:18:84:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/536DE1C52594C50A13E5683BE9F9A3133E1884CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/536DE1C52594C50A13E5683BE9F9A3133E1884CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/3137302e38302e34342e302f32322d3232203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:4c:16:79:b5:1d:3e:ce:0b:0d:63:71:65:d7:34:a9:c6:49:
         cf:b3:98:0d:47:e0:76:68:c4:6c:99:e4:0e:23:79:65:53:45:
         91:5b:31:28:80:ae:af:5b:c7:c5:1c:17:af:28:ba:18:63:45:
         c3:ac:f5:22:1a:74:3c:36:d1:a1:e3:29:8b:93:be:fe:9d:79:
         e5:4b:96:78:a6:be:15:d6:8c:7a:71:47:ee:fd:69:16:0a:8f:
         f8:73:f3:d4:ee:04:79:5e:ae:b7:7d:f5:5a:cf:48:ab:56:3a:
         3d:36:69:d1:1d:2c:70:b0:cb:ae:a7:01:1f:31:22:52:3c:a9:
         86:b9:ab:68:0e:3a:f5:fe:66:71:f4:9c:2c:cb:2d:da:04:95:
         96:6d:dd:cf:45:1e:32:d7:37:d4:4d:05:d2:bf:1f:14:39:e9:
         2b:db:fc:87:16:58:13:1e:15:0b:b5:8c:3d:a8:2c:45:6c:58:
         d3:d8:d7:2d:d5:9d:a6:7a:28:12:cd:29:d0:7c:69:08:be:f3:
         ad:e5:93:62:3d:2a:17:6a:f5:74:9a:92:d9:bb:ec:a8:c0:fd:
         48:ff:b6:ba:24:f8:d2:f8:37:b1:12:9b:2c:83:e3:a0:05:d6:
         f0:f7:e8:81:92:22:3c:74:c1:02:b7:52:b9:09:78:9c:fa:a9:
         b7:f1:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:53:13 2025 by rpki-client