Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32332d3233203d3e20323636333735.roa
File:                     3137302e38302e35322e302f32332d3233203d3e20323636333735.roa (raw, json)
Hash identifier:          8sZjqrH0gynzHRz4sie9nIOezkjGEBIsjXY0U+zgEzU=
Subject key identifier:   CB:DE:DB:48:D7:3E:54:44:00:1B:D9:AA:AA:01:2F:A5:AC:AD:12:3B
Certificate issuer:       /CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
Certificate serial:       0AD3287168EF07C404295FF92B9FD6F91759B7DB
Authority key identifier: 4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32332d3233203d3e20323636333735.roa
Signing time:             Wed 30 Apr 2025 18:53:40 +0000
ROA not before:           Wed 30 Apr 2025 18:48:40 +0000
ROA not after:            Wed 29 Apr 2026 18:53:40 +0000
asID:                     266375
IP address blocks:        170.80.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 17:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d3:28:71:68:ef:07:c4:04:29:5f:f9:2b:9f:d6:f9:17:59:b7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
        Validity
            Not Before: Apr 30 18:48:40 2025 GMT
            Not After : Apr 29 18:53:40 2026 GMT
        Subject: CN=CBDEDB48D73E5444001BD9AAAA012FA5ACAD123B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:18:ea:88:c1:42:32:43:eb:3c:61:a3:6b:65:
                    fd:e1:98:7b:06:06:85:e0:c4:a7:26:d3:6e:fc:ce:
                    61:42:21:94:ef:3f:bb:03:a3:63:fa:db:50:6c:88:
                    bb:f9:f9:24:58:ac:25:8b:94:79:c6:11:b5:a8:1f:
                    26:85:4a:5d:0f:2b:75:46:6c:bd:b0:d0:da:42:0a:
                    7a:63:1f:50:c2:de:64:dd:ae:69:aa:4f:c0:33:87:
                    df:a7:b9:66:a2:70:af:dd:33:0f:f9:9b:30:bd:27:
                    bf:59:2a:09:29:8f:32:06:2a:e4:fe:14:1c:fc:eb:
                    2d:f4:2c:cb:c1:ca:1a:27:bd:40:7a:1a:90:89:c3:
                    d5:eb:09:70:3b:03:7d:8c:9c:ac:59:9b:0d:ab:4e:
                    16:26:ca:1e:21:84:09:c7:de:10:9f:8c:be:03:7d:
                    cb:85:86:e3:df:0e:b6:60:fd:39:f0:4b:90:8d:0a:
                    62:cd:0e:d1:70:ef:61:3d:be:3d:5a:f0:4e:02:8c:
                    96:97:6c:4c:c6:18:77:bc:4a:e2:5e:f9:97:24:3c:
                    84:a9:15:40:68:a1:c3:41:6b:8d:e4:56:45:52:42:
                    7c:65:f9:69:d5:19:0d:d5:69:04:4c:fe:8a:71:9f:
                    ee:f3:18:3b:d6:4e:7b:3d:81:b4:ba:1d:e0:7b:4d:
                    2a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DE:DB:48:D7:3E:54:44:00:1B:D9:AA:AA:01:2F:A5:AC:AD:12:3B
            X509v3 Authority Key Identifier:
                keyid:4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32332d3233203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:c3:47:a7:ee:35:1b:1e:d0:3a:9a:0c:d1:63:de:4e:8a:21:
         c6:b9:2e:85:a0:5c:62:93:ad:8e:55:bd:d6:6c:f1:90:fa:c5:
         f7:f4:1c:ab:cf:89:84:0e:1a:9a:54:58:9a:ab:0d:19:a1:04:
         2a:1d:c2:71:f8:13:63:20:c0:68:dd:73:b4:04:15:35:63:1a:
         82:3d:96:76:a9:0e:30:50:97:25:7d:5f:70:70:2c:6c:ad:f5:
         aa:20:2c:bd:ca:7a:a8:6e:fc:f3:72:3c:80:60:2f:ab:c0:71:
         33:52:f4:19:48:45:58:12:51:af:39:8a:77:09:e1:5b:7c:70:
         9c:1e:d5:ce:66:65:ef:e2:48:8b:a1:8b:58:ac:c6:4d:4e:8c:
         fd:55:58:59:d7:d8:a9:78:d3:0b:8e:89:c5:4a:ea:b2:f8:ac:
         60:2c:aa:47:3f:3a:fd:21:4a:f2:7f:30:a6:10:ba:d8:d3:27:
         83:b5:26:3e:ab:62:82:06:2e:12:e8:fd:b6:ca:34:50:20:21:
         fa:63:c1:78:a7:19:7b:0d:8a:f8:d6:99:79:b9:dc:16:f1:20:
         11:f3:05:fd:ea:b3:79:5e:fb:32:4a:ca:90:21:e2:24:c0:cd:
         a6:6a:04:39:cb:6f:a3:b1:50:65:2a:4c:a8:ae:a2:98:a6:22:
         eb:9d:c5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:48:24 2025 by rpki-client