Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32332d3233203d3e20323636333432.roa
File:                     3137302e3233392e38302e302f32332d3233203d3e20323636333432.roa (raw, json)
Hash identifier:          uuQKmCwIZ3tzPMdBy2oXtflrHHlMfZrJf3zhK/Lg9j4=
Subject key identifier:   30:14:3E:B8:3B:73:26:29:48:AA:39:91:39:CE:C8:57:13:3C:5C:C1
Certificate issuer:       /CN=6301FDFBED14D7F3201221EA08B655E661A278D0
Certificate serial:       4B382746519F955F0D992BE6E2B75ECF82F6255D
Authority key identifier: 63:01:FD:FB:ED:14:D7:F3:20:12:21:EA:08:B6:55:E6:61:A2:78:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6301FDFBED14D7F3201221EA08B655E661A278D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32332d3233203d3e20323636333432.roa
Signing time:             Thu 26 Jun 2025 21:12:41 +0000
ROA not before:           Thu 26 Jun 2025 21:07:41 +0000
ROA not after:            Thu 25 Jun 2026 21:12:41 +0000
asID:                     266342
IP address blocks:        170.239.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/6301FDFBED14D7F3201221EA08B655E661A278D0.crl
                          rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/6301FDFBED14D7F3201221EA08B655E661A278D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6301FDFBED14D7F3201221EA08B655E661A278D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 06:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:38:27:46:51:9f:95:5f:0d:99:2b:e6:e2:b7:5e:cf:82:f6:25:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6301FDFBED14D7F3201221EA08B655E661A278D0
        Validity
            Not Before: Jun 26 21:07:41 2025 GMT
            Not After : Jun 25 21:12:41 2026 GMT
        Subject: CN=30143EB83B73262948AA399139CEC857133C5CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a9:f5:73:fa:ef:da:dc:fb:d5:09:96:78:fa:
                    12:41:61:40:ef:4f:a6:c0:26:98:d2:43:22:4c:1c:
                    ed:ea:ac:5c:4c:a7:24:a7:77:b1:9b:d6:c7:1e:44:
                    a1:fd:0c:2e:3a:95:2b:79:5d:90:cb:25:eb:86:74:
                    b9:31:55:e5:ef:10:b5:7a:20:ba:0d:0f:8a:ab:4f:
                    42:a0:60:c7:5a:80:4f:ed:d4:0e:bd:43:e0:10:72:
                    9b:bc:be:66:40:dd:c9:91:91:d7:32:0a:01:8b:ae:
                    99:36:7d:8c:85:9a:d8:6a:09:89:70:0f:17:09:26:
                    0b:49:eb:9d:a6:46:ab:cc:32:5a:60:8f:c1:8c:7d:
                    ca:75:6b:6c:a5:eb:8a:15:21:af:21:e1:ee:8f:71:
                    13:9f:c6:a2:6a:5e:dd:10:98:e7:0f:bf:d4:3a:01:
                    26:87:8b:32:a7:6e:da:33:93:7a:de:ef:08:9a:48:
                    6d:6c:3f:3c:37:d3:ee:a4:d4:15:91:c2:83:cc:af:
                    cc:b4:90:39:18:2e:9b:88:43:1b:05:15:21:63:d0:
                    8d:28:ba:fe:80:57:b8:3a:f9:da:d7:8f:92:b6:28:
                    ba:5c:d9:fa:32:c3:e8:45:60:28:ff:92:19:71:a0:
                    de:fc:3b:b3:45:89:6e:07:7d:75:d0:38:82:44:3f:
                    86:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:14:3E:B8:3B:73:26:29:48:AA:39:91:39:CE:C8:57:13:3C:5C:C1
            X509v3 Authority Key Identifier:
                keyid:63:01:FD:FB:ED:14:D7:F3:20:12:21:EA:08:B6:55:E6:61:A2:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/6301FDFBED14D7F3201221EA08B655E661A278D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6301FDFBED14D7F3201221EA08B655E661A278D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38302e302f32332d3233203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:0d:2c:47:a4:5c:33:56:d6:b5:7d:0e:5d:e4:8a:58:3e:c2:
         e4:c6:bb:c6:c7:8f:31:40:25:aa:b0:6a:0c:a2:1e:98:bd:6c:
         a5:cd:7b:14:8c:2f:85:de:4d:80:b3:2e:d0:25:fa:7a:e0:e4:
         f4:a1:35:8e:15:18:fa:3e:9e:34:d8:89:f3:15:df:4d:ae:3d:
         f1:13:ae:3d:6b:a2:8a:43:d1:10:a3:9d:61:eb:67:a6:dc:4d:
         3d:03:fc:59:73:8c:d5:9b:6e:fc:75:b7:dc:54:c9:f4:eb:1d:
         56:f8:5c:e1:8e:d1:13:83:ae:8f:5c:7f:bc:a2:72:e3:09:36:
         31:dc:a7:85:95:6c:34:f2:12:35:2e:a1:a4:83:55:82:44:84:
         97:b5:83:d0:08:45:76:9e:3a:41:1c:76:33:24:d2:d6:50:74:
         0e:e8:ee:58:07:c5:c3:3c:ac:b4:8b:e0:be:20:b2:15:fc:af:
         f2:80:69:a2:1b:43:86:78:2b:10:b2:09:d0:51:f9:39:f5:0f:
         43:85:da:d6:79:86:7f:2f:b5:b7:1b:63:f2:44:63:8d:fc:10:
         f0:93:47:47:46:71:f5:f6:a7:c4:9e:f6:3c:69:d1:9e:8b:41:
         a2:d3:91:61:ac:e3:73:8f:51:d6:b8:c0:f4:8a:e9:d1:9a:1a:
         ee:2f:7c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:22:44 2025 by rpki-client