Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32342d3234203d3e20323636333735.roa
File:                     3137302e38302e35322e302f32342d3234203d3e20323636333735.roa (raw, json)
Hash identifier:          w56MK0+Ut5PSBRvcqSoDi+BmVwMpFYsrBKcJnvCEvng=
Subject key identifier:   09:E9:12:B5:E7:07:5F:F4:9C:63:07:09:72:85:BD:4A:85:E9:D8:88
Certificate issuer:       /CN=373AA600A42BCF5792AF8D4124740F5E66B9D44A
Certificate serial:       3DF94DCE9804FD68B02641F079F9A916E058F620
Authority key identifier: 37:3A:A6:00:A4:2B:CF:57:92:AF:8D:41:24:74:0F:5E:66:B9:D4:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32342d3234203d3e20323636333735.roa
Signing time:             Thu 25 Sep 2025 13:20:04 +0000
ROA not before:           Thu 25 Sep 2025 13:15:04 +0000
ROA not after:            Thu 24 Sep 2026 13:20:04 +0000
asID:                     266375
IP address blocks:        170.80.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f9:4d:ce:98:04:fd:68:b0:26:41:f0:79:f9:a9:16:e0:58:f6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373AA600A42BCF5792AF8D4124740F5E66B9D44A
        Validity
            Not Before: Sep 25 13:15:04 2025 GMT
            Not After : Sep 24 13:20:04 2026 GMT
        Subject: CN=09E912B5E7075FF49C6307097285BD4A85E9D888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:98:74:39:28:6f:e3:66:dd:2e:ad:00:9e:
                    4b:b2:d7:6b:82:e8:fd:b9:4f:ce:d2:ed:25:7a:aa:
                    96:e2:88:3e:b1:29:15:f1:d1:d7:80:40:a5:70:b6:
                    81:ff:90:a3:64:cb:3d:4f:e2:59:6d:3e:0a:fa:20:
                    bd:c6:21:f4:ae:05:75:f3:5a:dd:f9:b1:8e:46:e0:
                    4e:1b:c9:ff:6c:51:00:ad:8f:7d:c4:61:12:c5:6b:
                    6c:00:f9:24:80:9e:21:4c:6a:ad:f4:53:bb:77:8d:
                    a5:59:ba:3e:29:7a:d5:c6:95:13:30:8c:a3:75:3a:
                    5c:f3:45:2f:30:3e:66:23:f1:ce:31:43:0a:97:41:
                    49:d2:d7:05:3c:f2:13:14:ba:21:e5:02:24:a6:01:
                    e2:a2:0e:39:57:b7:67:3a:3b:c0:3f:7d:e3:2e:45:
                    94:51:66:66:69:2f:f9:98:de:70:93:ef:de:9b:5c:
                    5e:07:64:b3:ac:5f:4c:fb:65:dd:58:4c:96:7b:ad:
                    cc:06:99:80:bb:fb:1a:b7:4d:d0:9b:42:08:97:83:
                    65:1f:3e:82:4e:35:a9:54:23:b4:19:ed:a0:23:88:
                    e7:6d:22:cd:69:53:7f:3d:56:04:88:fd:fb:56:91:
                    0a:e5:fe:62:f5:33:2e:a1:0a:f9:bd:44:06:53:0a:
                    68:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E9:12:B5:E7:07:5F:F4:9C:63:07:09:72:85:BD:4A:85:E9:D8:88
            X509v3 Authority Key Identifier:
                keyid:37:3A:A6:00:A4:2B:CF:57:92:AF:8D:41:24:74:0F:5E:66:B9:D4:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32342d3234203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:1f:1b:3e:6f:65:a4:4f:4f:9c:f6:d6:f3:83:73:de:94:88:
         c9:c2:de:a8:cf:d7:5e:54:1f:5f:38:d2:1b:2b:63:9e:f0:05:
         e0:79:cb:eb:43:fd:e2:67:50:ee:a8:55:70:90:a7:30:0e:cd:
         bd:27:33:8d:f6:92:23:0b:52:67:b5:7a:0c:be:66:bf:ca:13:
         18:fe:a3:2d:7a:d3:64:e4:4b:3a:e6:9a:1c:8b:59:17:4b:e3:
         c6:25:66:af:08:ea:24:0d:59:4e:7c:4e:84:d5:b2:a4:bb:d7:
         75:17:b6:05:a6:bd:c9:c0:7f:c7:fb:b2:7a:16:1b:09:64:d3:
         da:b2:bb:a2:27:1c:52:fb:bb:06:29:ee:6e:fb:b3:44:86:ac:
         a6:3f:e6:e7:53:ec:1c:5e:aa:29:06:5d:58:72:d0:64:e7:21:
         0d:c9:50:77:e5:fa:5a:53:fa:70:31:10:a6:a6:e2:a8:0c:38:
         1e:af:72:1b:0b:00:e1:65:de:8b:85:8a:52:51:d8:f1:41:ad:
         f1:bc:c5:24:39:c5:13:1a:4a:1b:3e:98:7e:b8:8f:98:3a:68:
         65:9d:f9:11:d9:a7:83:f2:a0:8a:ec:99:ac:17:93:5e:3c:7e:
         00:26:a9:bd:85:42:75:ff:d2:3f:64:ae:fc:94:e3:0c:c0:58:
         8f:0f:bb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:05:56 2025 by rpki-client