Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32332d3233203d3e20323636333735.roa
File:                     3137302e38302e35342e302f32332d3233203d3e20323636333735.roa (raw, json)
Hash identifier:          rYvvyVMWiyBPVTPesYJszn0yUpXOL32wGhPhhOfsSGs=
Subject key identifier:   FB:88:FF:87:1F:8D:E1:E6:D9:EF:F6:CB:B6:C0:6F:FC:44:84:4D:92
Certificate issuer:       /CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
Certificate serial:       479C51E93FDF13E7D71A62F060F7AB47A5B8CF04
Authority key identifier: 4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32332d3233203d3e20323636333735.roa
Signing time:             Wed 30 Apr 2025 18:53:40 +0000
ROA not before:           Wed 30 Apr 2025 18:48:40 +0000
ROA not after:            Wed 29 Apr 2026 18:53:40 +0000
asID:                     266375
IP address blocks:        170.80.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 17:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9c:51:e9:3f:df:13:e7:d7:1a:62:f0:60:f7:ab:47:a5:b8:cf:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
        Validity
            Not Before: Apr 30 18:48:40 2025 GMT
            Not After : Apr 29 18:53:40 2026 GMT
        Subject: CN=FB88FF871F8DE1E6D9EFF6CBB6C06FFC44844D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:16:89:71:4a:61:a3:5b:de:fb:f0:50:24:
                    b1:07:2f:3f:91:bb:0d:11:0c:ff:e8:55:40:4e:5e:
                    37:24:0d:e8:fb:0e:95:e3:10:33:ab:61:9e:77:3d:
                    ea:2b:62:77:d6:7e:17:a1:98:eb:aa:71:20:d7:19:
                    42:d5:b3:84:a5:27:26:a9:87:5b:28:3a:20:fa:6a:
                    16:5b:55:46:a3:00:c5:fb:ec:88:52:3b:63:09:35:
                    87:59:ac:df:58:35:47:5d:67:43:3b:7c:09:78:c5:
                    1a:ad:84:fc:dd:06:d3:c9:ea:f3:b9:cf:77:67:36:
                    42:4b:a5:60:a8:5d:97:cf:ca:48:5b:0d:59:be:a8:
                    2a:89:b3:ec:8f:00:d1:e4:e6:87:55:36:6d:f1:a6:
                    02:81:a0:58:6d:3c:14:b1:b8:db:18:46:51:d1:3d:
                    e3:57:b0:60:0e:5c:ca:1d:60:b0:a5:bc:34:3a:2a:
                    17:14:a2:a6:0c:b5:d3:c3:b7:2c:6b:5d:39:62:7c:
                    53:61:8f:98:ef:ce:af:d4:4b:11:f0:98:bf:f1:7a:
                    6c:95:ab:f3:2d:7e:f1:e7:9f:9d:04:d5:6d:3b:12:
                    21:eb:22:03:c3:dd:b9:36:f0:27:ae:a7:1a:6e:5e:
                    b1:bb:d5:da:c5:09:29:f7:36:cc:8b:9d:db:7c:7b:
                    30:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:88:FF:87:1F:8D:E1:E6:D9:EF:F6:CB:B6:C0:6F:FC:44:84:4D:92
            X509v3 Authority Key Identifier:
                keyid:4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32332d3233203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:de:99:65:6a:d3:fa:d2:43:ef:39:0f:fa:0d:52:e3:57:1c:
         00:ee:a8:58:f5:66:1f:9a:5d:33:be:dd:06:6b:38:2a:a6:6c:
         c1:86:6a:94:70:50:34:f2:d4:e7:a6:27:9b:f4:34:98:48:03:
         0b:0d:e8:78:ae:2a:2a:d2:54:ea:d5:94:e4:39:1c:f4:f0:fd:
         c4:99:fa:7d:50:1e:85:61:9e:e0:d9:d2:29:75:99:46:ca:e4:
         56:38:09:46:c0:de:94:14:2a:dd:ea:f9:54:b2:7e:a0:3e:7d:
         88:0b:f0:ff:7d:4f:9c:62:0e:fc:df:f2:ff:38:a6:0e:d8:60:
         d5:e9:d6:25:7a:1c:ea:a6:33:06:3b:ae:25:e4:19:b9:b5:e9:
         af:d6:d2:43:12:50:66:32:ec:72:9c:6c:62:a5:16:6a:8b:e3:
         dd:72:fc:fb:70:0f:31:56:3b:d1:c2:05:0c:0d:cc:0f:a7:43:
         b5:4a:f5:35:5d:f1:22:70:07:a5:2d:63:a4:db:81:70:f5:1b:
         51:8a:83:b7:1b:6b:0b:f3:6c:ce:30:8d:57:6e:90:cf:74:4b:
         40:78:c5:7a:99:f2:3e:bf:9e:29:14:08:2b:18:01:2e:2d:5a:
         ca:8e:a8:6a:35:24:ef:86:da:e6:31:72:e2:49:c4:32:2a:25:
         5d:dd:1b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:14:01 2025 by rpki-client