Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32322d3232203d3e20323636333735.roa
File:                     3137302e38302e35322e302f32322d3232203d3e20323636333735.roa (raw, json)
Hash identifier:          Wfk4Mq/KKNDzuvCVvsVOXLBLavQWwW2VKK42vaZV7gE=
Subject key identifier:   DC:38:FD:B4:D2:DB:D9:5C:1D:76:7E:C9:3D:FE:4D:3C:50:37:A9:D9
Certificate issuer:       /CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
Certificate serial:       0BC63A00E6F891C2868E6EBECE3EF816D5FA786D
Authority key identifier: 4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32322d3232203d3e20323636333735.roa
Signing time:             Wed 30 Apr 2025 18:53:39 +0000
ROA not before:           Wed 30 Apr 2025 18:48:39 +0000
ROA not after:            Wed 29 Apr 2026 18:53:39 +0000
asID:                     266375
IP address blocks:        170.80.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 17:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c6:3a:00:e6:f8:91:c2:86:8e:6e:be:ce:3e:f8:16:d5:fa:78:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
        Validity
            Not Before: Apr 30 18:48:39 2025 GMT
            Not After : Apr 29 18:53:39 2026 GMT
        Subject: CN=DC38FDB4D2DBD95C1D767EC93DFE4D3C5037A9D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:a0:95:c5:3f:c3:9e:82:da:7c:7a:63:4e:
                    11:83:39:6c:68:44:89:15:9a:b2:1a:88:b2:cc:f0:
                    41:99:e0:f9:42:50:24:86:13:39:c8:5d:8a:bc:75:
                    02:22:c0:e0:04:5f:03:74:78:62:db:66:91:ba:44:
                    32:77:91:19:b2:e0:97:ca:48:ac:01:48:0a:a6:74:
                    2e:c6:1f:06:08:8e:97:bf:7d:1e:74:f1:f9:26:f4:
                    54:dc:07:e5:42:70:46:ff:82:1e:46:42:c5:57:b5:
                    8b:16:39:f5:88:12:4d:a9:5d:ee:0f:27:ec:5e:9b:
                    33:d9:95:85:c9:11:05:35:39:af:d1:a1:77:38:4e:
                    3f:5a:40:ec:cc:cd:ac:77:6c:24:d3:86:2a:e1:58:
                    ea:6c:f0:af:42:de:84:d7:3c:4b:0e:12:b7:d5:97:
                    a3:2b:dd:5d:c6:bf:40:1a:45:40:d6:71:12:e4:02:
                    73:c2:fa:45:09:e6:bd:ee:a6:f8:f4:3b:30:fd:7f:
                    b0:0c:a9:4a:a8:9e:b5:98:71:79:2c:8f:77:c2:02:
                    31:a4:5d:87:b3:53:5f:fd:fd:31:4d:98:03:db:16:
                    a3:fe:7c:fe:1a:22:7d:49:04:cd:34:8c:a8:83:9b:
                    f3:89:75:6e:69:de:06:d9:c9:28:0c:d6:22:bc:94:
                    5b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:38:FD:B4:D2:DB:D9:5C:1D:76:7E:C9:3D:FE:4D:3C:50:37:A9:D9
            X509v3 Authority Key Identifier:
                keyid:4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32322d3232203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:25:20:26:e3:73:68:95:67:03:79:e3:3f:83:2d:30:0e:fb:
         d2:d4:bb:bd:5e:4c:bb:86:22:f8:6d:2f:30:17:e1:4c:77:ec:
         fc:60:27:bd:cf:46:7b:e0:be:03:53:4b:32:43:88:59:c5:19:
         3b:c1:18:0a:47:93:c8:e7:fa:8e:0b:50:90:42:b6:91:47:d7:
         7e:57:5d:58:37:fa:db:71:4a:94:02:d4:e3:7d:93:1f:a8:91:
         0e:9d:00:f5:97:4a:bc:7a:cf:cb:e1:53:bf:7b:b1:d4:99:9b:
         c5:34:17:79:c9:87:62:35:ca:5d:63:4d:ee:63:3f:71:74:58:
         93:67:57:30:28:27:90:fc:c6:95:bb:c7:34:7a:85:fe:2f:3c:
         c7:d7:56:bf:04:8b:e3:60:6a:61:8c:30:da:a7:bf:34:03:ca:
         9d:22:78:8a:af:5e:c6:0a:c3:1f:32:4a:a2:da:c5:0f:e2:39:
         45:3b:03:35:30:0e:88:1e:8d:5f:ac:2e:9b:e7:16:ad:cb:46:
         56:35:19:04:8d:a6:f1:93:ea:d3:06:78:fb:ce:05:66:ea:13:
         ce:1b:b0:79:b4:be:b2:38:14:f0:10:c7:29:99:5b:cf:a2:b1:
         ee:bb:9c:af:72:f6:a5:9b:c5:29:a3:99:92:4f:d1:51:e0:51:
         fc:55:f6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:52:18 2025 by rpki-client