Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32342d3234203d3e20323636333735.roa
File:                     3137302e38302e35322e302f32342d3234203d3e20323636333735.roa (raw, json)
Hash identifier:          VrKU78W95fCU791ENvSsp9d0lja7Hov6EI2PRZQSqOA=
Subject key identifier:   1B:2A:BE:51:DA:99:BE:C7:08:4F:D2:8B:12:91:53:5A:F0:FF:CD:44
Certificate issuer:       /CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
Certificate serial:       566111F27EAA76DC90957F638678F1CB047775EE
Authority key identifier: 4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32342d3234203d3e20323636333735.roa
Signing time:             Wed 30 Apr 2025 18:53:39 +0000
ROA not before:           Wed 30 Apr 2025 18:48:39 +0000
ROA not after:            Wed 29 Apr 2026 18:53:39 +0000
asID:                     266375
IP address blocks:        170.80.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 17:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:61:11:f2:7e:aa:76:dc:90:95:7f:63:86:78:f1:cb:04:77:75:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
        Validity
            Not Before: Apr 30 18:48:39 2025 GMT
            Not After : Apr 29 18:53:39 2026 GMT
        Subject: CN=1B2ABE51DA99BEC7084FD28B1291535AF0FFCD44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:d9:b8:4a:e2:43:5b:27:5b:9b:60:c4:cc:
                    d9:3e:b8:61:9d:17:76:34:ba:69:74:e7:f0:6e:56:
                    26:d4:c1:73:b9:07:0c:a2:b3:17:f7:18:92:ee:78:
                    bc:fe:0b:12:42:1d:5c:27:a9:4d:a3:85:ef:f3:12:
                    c4:20:06:73:2d:a9:87:4d:48:5e:9e:7e:5a:3f:db:
                    de:00:77:31:5d:9f:4f:7a:8c:3b:de:47:95:c8:66:
                    2c:a9:04:8d:a6:0e:b6:9b:47:f1:0d:52:0d:4d:30:
                    37:9b:ba:7b:f9:32:a7:f8:b7:ac:d2:a7:96:0f:6d:
                    cf:09:9e:08:da:33:f1:23:a7:8e:0d:6e:7d:01:48:
                    1e:5b:68:8b:62:d8:04:08:ea:15:08:fe:f2:45:73:
                    23:8c:31:ca:61:ad:29:f0:b8:55:74:ac:62:4d:90:
                    14:86:52:d1:75:cc:c7:b9:96:c8:5a:63:1f:d2:19:
                    fe:90:fd:d9:8a:ec:44:df:9a:36:4e:21:c6:78:6b:
                    ee:3a:0b:43:f7:ce:51:05:5e:85:ea:b6:36:51:0a:
                    80:c5:54:d0:01:e9:19:9f:82:86:68:dc:0a:4a:41:
                    57:cf:7f:3a:8d:ee:49:06:63:37:90:0c:63:80:f1:
                    33:4e:36:05:d0:a6:31:f6:fe:b2:2c:86:cd:ed:61:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2A:BE:51:DA:99:BE:C7:08:4F:D2:8B:12:91:53:5A:F0:FF:CD:44
            X509v3 Authority Key Identifier:
                keyid:4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35322e302f32342d3234203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:d9:ed:29:22:c9:cb:d0:a7:7a:ba:b6:8c:cd:7b:e4:cf:ef:
         7a:a8:c2:94:9f:a2:b9:67:ce:22:4d:65:e2:2f:ab:94:a8:62:
         d1:77:32:ab:75:ea:0a:b2:1a:37:a0:c5:51:d7:ef:9b:21:c4:
         1f:3e:20:b9:7d:18:ba:91:a9:37:f7:28:8d:20:c8:bc:6c:cf:
         2f:f8:ff:2d:96:eb:fe:6e:f6:de:aa:b9:26:40:e5:5b:3a:86:
         52:32:08:dc:90:e8:43:12:89:6f:3d:02:77:e7:3f:12:db:af:
         8f:af:7c:b0:95:54:07:9a:e9:c5:7f:57:cf:26:13:c0:81:30:
         59:78:c7:fc:74:78:c9:71:75:2b:10:44:b4:f1:c4:58:24:03:
         63:83:4c:68:49:ad:0b:e0:4b:ad:7b:16:c1:b8:24:51:a1:e3:
         b3:5c:2a:0d:76:a7:20:11:40:d4:60:60:90:b7:4e:b9:19:3c:
         ad:12:f1:c4:54:70:1d:95:76:13:ba:ea:7a:ac:d6:3f:12:1f:
         a8:53:49:aa:b2:12:fb:82:90:42:3f:40:5a:9e:fe:43:c2:a1:
         33:3f:1b:11:29:0c:7b:41:bd:3b:a9:87:54:5e:58:e9:93:a2:
         4a:e7:a2:e3:a7:ba:c1:61:2a:6e:85:a0:60:c4:e3:e1:5b:f3:
         94:5d:44:eb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVmER8n6qdtyQlX9jhnjxywR3de4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENFNDgzM0JGN0M2QjAyNjhCRjRDM0YxRTIwQzBEQjRF
NDg5N0M3NTAeFw0yNTA0MzAxODQ4MzlaFw0yNjA0MjkxODUzMzlaMDMxMTAvBgNV
BAMTKDFCMkFCRTUxREE5OUJFQzcwODRGRDI4QjEyOTE1MzVBRjBGRkNENDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEm9m4SuJDWydbm2DEzNk+uGGd
F3Y0uml05/BuVibUwXO5Bwyisxf3GJLueLz+CxJCHVwnqU2jhe/zEsQgBnMtqYdN
SF6eflo/294AdzFdn096jDveR5XIZiypBI2mDrabR/ENUg1NMDebunv5Mqf4t6zS
p5YPbc8JngjaM/Ejp44Nbn0BSB5baIti2AQI6hUI/vJFcyOMMcphrSnwuFV0rGJN
kBSGUtF1zMe5lshaYx/SGf6Q/dmK7ETfmjZOIcZ4a+46C0P3zlEFXoXqtjZRCoDF
VNAB6RmfgoZo3ApKQVfPfzqN7kkGYzeQDGOA8TNONgXQpjH2/rIshs3tYaFHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGyq+UdqZvscIT9KLEpFTWvD/zUQwHwYDVR0j
BBgwFoAUTOSDO/fGsCaL9MPx4gwNtOSJfHUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjU4Vm9yMmVTUTFmMThZR2FxaGltTmRqeVlvSG5RS3lLdjhXanluNjhG
NzYvMC80Q0U0ODMzQkY3QzZCMDI2OEJGNEMzRjFFMjBDMERCNEU0ODk3Qzc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRTQ4MzNCRjdDNkIwMjY4
QkY0QzNGMUUyMEMwREI0RTQ4OTdDNzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y1OFZvcjJlU1ExZjE4WUdhcWhpbU5kanlZb0huUUt5S3Y4V2p5bjY4Rjc2LzAv
MzEzNzMwMmUzODMwMmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzMzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlA0MA0GCSqGSIb3DQEBCwUAA4IBAQAC2e0pIsnL
0Kd6uraMzXvkz+96qMKUn6K5Z84iTWXiL6uUqGLRdzKrdeoKsho3oMVR1++bIcQf
PiC5fRi6kak39yiNIMi8bM8v+P8tluv+bvbeqrkmQOVbOoZSMgjckOhDEolvPQJ3
5z8S26+Pr3ywlVQHmunFf1fPJhPAgTBZeMf8dHjJcXUrEES08cRYJANjg0xoSa0L
4EutexbBuCRRoeOzXCoNdqcgEUDUYGCQt065GTytEvHEVHAdlXYTuup6rNY/Eh+o
U0mqshL7gpBCP0Banv5DwqEzPxsRKQx7Qb07qYdUXljpk6JK56Ljp7rBYSpuhaBg
xOPhW/OUXUTr
-----END CERTIFICATE-----
Generated at Sat May 10 10:27:03 2025 by rpki-client