Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/3137302e3233332e342e302f32322d3332203d3e203532363330.roa
File:                     3137302e3233332e342e302f32322d3332203d3e203532363330.roa (raw, json)
Hash identifier:          SYPbKEGUvju1mdfNQbo/yOf3WntF5xxZnPzoNifpys0=
Subject key identifier:   E0:10:D1:E0:AB:EF:93:C3:54:51:71:E8:B9:15:A6:ED:34:D4:70:88
Certificate issuer:       /CN=1B200E7AB6E3F7993DDE78A476E469885DFCE820
Certificate serial:       5F97DA3ACD55E9AD6B215DD3C2233409D9619C7C
Authority key identifier: 1B:20:0E:7A:B6:E3:F7:99:3D:DE:78:A4:76:E4:69:88:5D:FC:E8:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B200E7AB6E3F7993DDE78A476E469885DFCE820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/3137302e3233332e342e302f32322d3332203d3e203532363330.roa
Signing time:             Fri 20 Jun 2025 20:42:59 +0000
ROA not before:           Fri 20 Jun 2025 20:37:59 +0000
ROA not after:            Fri 19 Jun 2026 20:42:59 +0000
asID:                     52630
IP address blocks:        170.233.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/1B200E7AB6E3F7993DDE78A476E469885DFCE820.crl
                          rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/1B200E7AB6E3F7993DDE78A476E469885DFCE820.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B200E7AB6E3F7993DDE78A476E469885DFCE820.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 08:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:97:da:3a:cd:55:e9:ad:6b:21:5d:d3:c2:23:34:09:d9:61:9c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B200E7AB6E3F7993DDE78A476E469885DFCE820
        Validity
            Not Before: Jun 20 20:37:59 2025 GMT
            Not After : Jun 19 20:42:59 2026 GMT
        Subject: CN=E010D1E0ABEF93C3545171E8B915A6ED34D47088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:fa:ee:51:91:ac:a1:14:48:a3:32:0b:68:
                    f6:cb:e5:4c:e0:71:b4:37:06:e1:b6:ec:8e:17:5d:
                    d5:fe:9f:57:d2:0c:26:17:62:6b:52:80:38:95:8a:
                    03:fa:5b:d6:f2:9a:62:95:dc:ee:87:23:0d:c9:71:
                    46:4d:c4:8e:6b:9d:a0:33:e9:21:dc:a4:8e:21:8c:
                    f0:ac:2a:7b:6e:13:0d:39:a2:5a:2c:59:d1:10:af:
                    e2:9d:96:72:3f:ed:d3:a6:9b:ad:75:30:62:69:c2:
                    61:e2:ba:87:a8:ea:de:19:9a:b5:1c:be:48:02:40:
                    b5:57:1e:cf:72:b6:dd:e6:ab:1d:5b:bc:c6:e2:75:
                    da:93:46:f4:cb:bb:96:75:4f:11:bf:b6:6d:2d:94:
                    83:35:4d:fd:a8:b6:ca:9c:77:d2:a1:7c:b9:7a:a4:
                    90:bf:9d:ea:00:a0:f0:5d:83:3d:54:e0:5f:1f:7e:
                    b9:6b:fe:55:b0:2b:54:57:99:94:8d:b0:24:e3:7f:
                    e0:cb:09:a2:e6:84:dd:ee:7d:07:80:7d:b4:6b:31:
                    26:4b:20:fe:18:e1:e9:19:42:b0:53:18:de:b5:b6:
                    2a:1a:bd:12:5d:22:60:50:e7:93:a9:5e:22:76:5d:
                    b6:90:49:44:0d:97:67:4e:65:1e:88:aa:f5:c4:79:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:10:D1:E0:AB:EF:93:C3:54:51:71:E8:B9:15:A6:ED:34:D4:70:88
            X509v3 Authority Key Identifier:
                keyid:1B:20:0E:7A:B6:E3:F7:99:3D:DE:78:A4:76:E4:69:88:5D:FC:E8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/1B200E7AB6E3F7993DDE78A476E469885DFCE820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B200E7AB6E3F7993DDE78A476E469885DFCE820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EignFQrg4MKpSEoS5tHpZqM7wSWa9kYs1tLMEKU5RBPn/0/3137302e3233332e342e302f32322d3332203d3e203532363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:c5:40:48:11:be:ef:a8:cb:67:14:b1:fe:9e:53:0d:ba:1c:
         ed:74:05:42:ce:4d:d1:89:b0:02:8a:bc:b4:3c:24:bf:ea:11:
         99:d0:c3:b4:2d:7b:fa:ea:52:2b:de:87:a7:93:27:3e:9c:78:
         dc:fa:af:1f:d7:a0:7a:d7:56:f1:13:81:86:d0:41:db:bf:89:
         da:19:dc:c8:1c:84:b7:b2:34:47:f0:5a:47:35:42:fd:dd:13:
         d2:f3:96:85:d6:30:ea:ea:04:da:86:91:a8:bd:e8:33:3b:b9:
         90:b5:0f:b9:6f:09:97:15:90:c4:19:99:4e:c9:77:37:39:30:
         04:5c:7d:a4:9a:76:61:5c:b6:cf:f6:38:6d:46:d9:20:9c:ec:
         8a:f3:08:1f:1a:dd:53:5a:f1:59:41:44:19:64:c4:eb:e6:91:
         51:41:ba:e6:fb:41:38:45:4f:94:bd:82:a8:ae:20:48:4b:21:
         00:3b:d7:06:d0:da:55:42:7b:19:be:78:0e:33:c7:72:25:7b:
         b9:8b:64:f4:0b:fa:50:46:52:7f:ee:4e:40:e1:6d:cf:7a:cf:
         e3:c8:c5:fd:19:87:b0:28:61:dd:6b:1e:0d:1c:32:14:13:ff:
         07:b3:b5:b9:b8:e3:eb:72:7f:44:75:7f:bb:ab:52:c6:b0:3c:
         ca:b4:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:26:41 2025 by rpki-client