Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38322e302f32332d3233203d3e20323636333432.roa
File:                     3137302e3233392e38322e302f32332d3233203d3e20323636333432.roa (raw, json)
Hash identifier:          UlwvuDqo0h6/dAoqJW3xcqrd3NRfXl1JpDoHjPnczOM=
Subject key identifier:   57:D2:4C:C4:EF:35:CA:9B:2F:EF:CE:FC:AB:EA:98:0E:52:18:8C:36
Certificate issuer:       /CN=6301FDFBED14D7F3201221EA08B655E661A278D0
Certificate serial:       5924843122301AE0929F66749C8A8CA037D11B8C
Authority key identifier: 63:01:FD:FB:ED:14:D7:F3:20:12:21:EA:08:B6:55:E6:61:A2:78:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6301FDFBED14D7F3201221EA08B655E661A278D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38322e302f32332d3233203d3e20323636333432.roa
Signing time:             Thu 26 Jun 2025 21:12:41 +0000
ROA not before:           Thu 26 Jun 2025 21:07:41 +0000
ROA not after:            Thu 25 Jun 2026 21:12:41 +0000
asID:                     266342
IP address blocks:        170.239.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/6301FDFBED14D7F3201221EA08B655E661A278D0.crl
                          rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/6301FDFBED14D7F3201221EA08B655E661A278D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6301FDFBED14D7F3201221EA08B655E661A278D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 06:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:24:84:31:22:30:1a:e0:92:9f:66:74:9c:8a:8c:a0:37:d1:1b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6301FDFBED14D7F3201221EA08B655E661A278D0
        Validity
            Not Before: Jun 26 21:07:41 2025 GMT
            Not After : Jun 25 21:12:41 2026 GMT
        Subject: CN=57D24CC4EF35CA9B2FEFCEFCABEA980E52188C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:af:05:93:e7:1a:57:95:d4:46:2a:cf:26:
                    ed:16:d8:0d:86:74:26:20:23:b0:0e:b1:89:25:e9:
                    ca:58:99:be:9a:32:ec:6e:0a:2e:87:71:35:31:88:
                    c4:fb:ac:e3:a7:c7:2d:6c:40:b9:57:a3:84:53:20:
                    00:1d:4f:ea:d4:c4:04:ca:39:d4:e3:22:ac:7a:64:
                    8d:fd:e7:66:0c:35:ec:84:2a:55:0c:03:3c:86:a5:
                    fa:cd:e6:52:34:b7:5c:22:2e:a9:0b:54:54:e5:25:
                    70:33:34:9f:f4:90:f3:e8:2a:8b:80:d3:64:ea:47:
                    32:fa:9f:54:78:72:9d:87:d8:fd:77:23:0c:81:5a:
                    5c:43:0a:5d:86:c5:ca:e9:42:2e:4f:d4:2f:c9:6c:
                    cc:95:79:6f:e1:b9:f5:3f:3c:34:ad:b5:77:d9:97:
                    ad:9d:28:f3:8d:84:1a:0a:d0:8b:27:76:cd:92:2c:
                    b7:97:35:27:d8:c3:2f:fc:07:73:0a:66:b8:8e:c0:
                    0a:9b:bf:c2:f5:dc:f7:f2:36:0d:21:df:12:a2:54:
                    fb:1f:2b:e8:75:ee:81:f7:46:e4:19:14:0d:cc:54:
                    43:14:0a:df:af:fa:d3:df:a1:5b:81:ca:f1:65:6d:
                    f9:05:fd:ad:c3:43:ea:c8:a1:2f:c1:e6:ba:43:24:
                    68:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D2:4C:C4:EF:35:CA:9B:2F:EF:CE:FC:AB:EA:98:0E:52:18:8C:36
            X509v3 Authority Key Identifier:
                keyid:63:01:FD:FB:ED:14:D7:F3:20:12:21:EA:08:B6:55:E6:61:A2:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/6301FDFBED14D7F3201221EA08B655E661A278D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6301FDFBED14D7F3201221EA08B655E661A278D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38322e302f32332d3233203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:60:5c:26:18:00:1b:b7:e3:c0:47:63:d0:b2:8b:2d:63:e0:
         df:80:47:8d:26:47:ab:f5:3a:5a:1f:b8:bc:0e:7c:ea:12:73:
         a4:8f:0b:5b:28:32:b4:06:ae:f9:14:11:76:44:2c:0d:07:71:
         66:7c:6f:f8:2c:14:02:1b:b4:6d:65:16:81:c2:01:b2:ff:1d:
         45:77:39:d1:1c:7c:7d:ed:53:97:a2:06:f8:7c:c1:71:f1:a0:
         9d:17:8a:5d:4a:7d:6e:0d:0e:4a:07:e3:a7:e4:e1:8c:2b:b5:
         83:70:32:74:1b:32:3a:5b:10:47:bb:17:54:6f:ea:94:f7:0f:
         aa:f9:d0:58:8c:dd:14:b5:04:52:b1:f4:d9:7b:4e:65:a3:66:
         9a:e7:90:af:57:2f:7a:c5:d3:92:bf:eb:dc:eb:5d:82:24:5e:
         59:8e:ce:a8:11:70:ce:97:68:f4:ea:90:6c:6e:cb:f0:dd:ca:
         15:5b:21:55:0d:f0:62:c7:1d:14:aa:a5:79:69:55:ca:a8:f1:
         84:0b:bc:55:40:d0:61:e1:f9:ea:16:15:0c:61:26:b9:1f:dc:
         4b:7c:1f:b5:6e:15:66:75:58:a9:d8:16:08:64:10:c0:eb:bc:
         69:c0:3e:79:74:a6:b7:b0:9e:fe:79:27:96:9f:31:39:82:5d:
         fa:17:78:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:30:06 2025 by rpki-client