Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32342d3234203d3e20323636333735.roa
File:                     3137302e38302e35342e302f32342d3234203d3e20323636333735.roa (raw, json)
Hash identifier:          L46mRN3jsaJl/LaZOonOr1ZII4Fg2AaRLsXVns7lfTA=
Subject key identifier:   D0:16:7A:D2:38:69:9B:32:86:A0:FB:E8:5F:F8:9D:CC:CC:37:13:3D
Certificate issuer:       /CN=373AA600A42BCF5792AF8D4124740F5E66B9D44A
Certificate serial:       196EDFEA2B49B1965202ED3D0833537A52DB55EB
Authority key identifier: 37:3A:A6:00:A4:2B:CF:57:92:AF:8D:41:24:74:0F:5E:66:B9:D4:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32342d3234203d3e20323636333735.roa
Signing time:             Thu 25 Sep 2025 13:20:03 +0000
ROA not before:           Thu 25 Sep 2025 13:15:03 +0000
ROA not after:            Thu 24 Sep 2026 13:20:03 +0000
asID:                     266375
IP address blocks:        170.80.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6e:df:ea:2b:49:b1:96:52:02:ed:3d:08:33:53:7a:52:db:55:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373AA600A42BCF5792AF8D4124740F5E66B9D44A
        Validity
            Not Before: Sep 25 13:15:03 2025 GMT
            Not After : Sep 24 13:20:03 2026 GMT
        Subject: CN=D0167AD238699B3286A0FBE85FF89DCCCC37133D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:ee:22:6a:ca:3f:9f:be:c6:f0:99:16:73:
                    30:7e:e0:21:53:a6:b4:22:38:2a:a1:4e:6f:b3:e3:
                    54:70:0d:f7:3b:31:d1:eb:e6:d5:ad:3b:c4:5e:d7:
                    35:85:75:3a:65:b2:e9:cd:df:77:66:d1:5c:cf:0c:
                    ba:ff:89:93:9f:3e:e8:82:5e:6d:17:c0:af:78:a9:
                    3d:62:3d:2a:87:3a:bd:03:39:93:4f:a3:35:8e:88:
                    6c:bf:74:6b:b4:c2:11:77:4e:b7:7b:41:4c:00:eb:
                    d5:e2:c3:ce:c9:db:37:01:36:9e:44:93:62:c9:c7:
                    64:47:0e:64:06:92:83:0e:c7:4e:5e:59:15:21:b0:
                    82:0d:16:e2:60:69:a2:7b:6d:4e:6f:4e:1e:15:05:
                    b7:51:f6:2c:d4:2d:ff:75:c8:5f:82:c2:44:d6:21:
                    a0:8b:fc:a0:cb:34:05:90:81:79:25:59:bd:2c:00:
                    8a:51:e4:d1:dc:c6:30:ca:34:12:6c:12:a6:a8:9c:
                    6e:d8:d7:09:0b:01:5b:62:38:4e:1f:72:f2:04:29:
                    c6:0b:22:25:3d:49:9a:a2:7f:22:05:de:6c:a4:60:
                    8a:9f:9d:c9:25:94:ab:7b:7b:35:1d:92:b7:27:0d:
                    20:bb:f9:b7:60:5c:18:4a:a4:ca:e2:4f:c2:04:a4:
                    d7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:16:7A:D2:38:69:9B:32:86:A0:FB:E8:5F:F8:9D:CC:CC:37:13:3D
            X509v3 Authority Key Identifier:
                keyid:37:3A:A6:00:A4:2B:CF:57:92:AF:8D:41:24:74:0F:5E:66:B9:D4:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32342d3234203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:cd:94:4f:e0:58:2a:ae:1c:5b:12:b3:0a:85:54:4b:61:55:
         93:1c:d8:a2:3f:f9:65:35:d6:92:f7:34:0e:af:2b:62:88:90:
         73:89:04:85:65:b0:73:a2:c7:9c:ae:73:44:2c:34:6a:7f:0d:
         f4:4c:21:1d:97:b2:8b:82:9f:8e:68:10:64:8a:ba:b6:b3:c5:
         fc:af:8f:4c:f1:c3:55:02:36:27:44:b1:37:77:89:10:0d:3e:
         d2:b5:3e:de:9d:ed:7e:31:97:16:6d:f1:a2:c0:fe:61:2d:52:
         90:e5:c9:42:c2:2a:d5:27:6c:24:9e:70:27:a7:59:8c:9a:0b:
         5d:38:86:fa:e5:71:21:85:08:a7:ac:bd:84:50:1e:e9:d6:a5:
         57:c1:f2:f8:07:0e:74:be:7e:87:12:61:d4:be:13:ea:4a:7e:
         8d:ad:12:f6:cc:22:41:19:94:a2:19:fa:62:ca:19:d8:4e:90:
         3a:78:8f:c8:2a:df:06:b9:bb:a4:e1:34:bb:67:41:93:57:14:
         48:6a:dc:76:b5:b3:b9:69:06:35:a7:00:49:86:f9:8b:76:8f:
         12:e8:6a:92:42:95:63:f1:74:93:08:43:18:fe:0e:04:47:4b:
         cc:bc:f4:99:fc:f6:88:9c:19:3e:67:0e:da:70:98:36:37:4d:
         a4:23:84:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:10:59 2025 by rpki-client