Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32342d3234203d3e20323636333735.roa
File:                     3137302e38302e35342e302f32342d3234203d3e20323636333735.roa (raw, json)
Hash identifier:          /KYxlye8tW8YKeT+VBz5niaBY3KRCxakr+HzJCXCKQU=
Subject key identifier:   09:05:5B:C9:3D:D5:FF:4C:26:51:AE:7E:1A:2D:CF:9B:EA:F8:93:A5
Certificate issuer:       /CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
Certificate serial:       4A304DA73170D74143EC43B11289F91B4495B4E4
Authority key identifier: 4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32342d3234203d3e20323636333735.roa
Signing time:             Wed 30 Apr 2025 18:53:40 +0000
ROA not before:           Wed 30 Apr 2025 18:48:40 +0000
ROA not after:            Wed 29 Apr 2026 18:53:40 +0000
asID:                     266375
IP address blocks:        170.80.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 06:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:30:4d:a7:31:70:d7:41:43:ec:43:b1:12:89:f9:1b:44:95:b4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
        Validity
            Not Before: Apr 30 18:48:40 2025 GMT
            Not After : Apr 29 18:53:40 2026 GMT
        Subject: CN=09055BC93DD5FF4C2651AE7E1A2DCF9BEAF893A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:4d:2d:2f:46:60:ed:15:6e:a5:a5:f8:56:
                    42:93:c1:a4:3a:c1:62:9b:1d:3c:3c:ea:17:2c:b7:
                    b3:22:dd:74:c5:a7:7e:3c:1d:0a:2e:68:cd:e9:14:
                    6d:d0:df:5d:f9:2e:ef:f7:3c:e9:02:89:3f:dc:a5:
                    b1:10:02:a1:97:13:ed:e6:4f:2c:61:44:47:7c:0a:
                    9d:f4:83:5c:43:69:c9:8e:ea:94:db:bf:80:41:7c:
                    4f:84:62:33:ce:e9:24:44:e1:e9:5d:eb:93:52:d8:
                    2e:ba:ce:09:f5:cd:c2:f9:bd:e2:0e:4c:dc:51:70:
                    84:9a:8f:8d:e8:28:30:d4:62:f1:91:e8:5d:5b:49:
                    9c:27:8b:2e:fd:96:2e:7b:9e:e6:84:1f:42:4f:90:
                    ba:ac:54:bb:b3:f9:e7:08:a5:26:22:d4:e6:f8:86:
                    ea:71:9e:71:fd:f1:2d:9a:d1:28:50:ff:ce:1e:2b:
                    f3:d8:9c:24:42:54:b7:b7:2c:7b:e9:c4:95:6e:6c:
                    b7:ba:c6:b2:16:d3:c3:6a:be:2d:95:67:0f:5b:ea:
                    ae:c5:e5:09:24:f9:4c:ec:5a:97:5f:c8:92:24:02:
                    99:6e:52:d4:82:80:d9:67:e3:1c:a8:1f:7d:fa:50:
                    20:bc:a5:d0:ca:02:8d:ce:38:91:84:93:62:f6:ba:
                    0f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:05:5B:C9:3D:D5:FF:4C:26:51:AE:7E:1A:2D:CF:9B:EA:F8:93:A5
            X509v3 Authority Key Identifier:
                keyid:4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35342e302f32342d3234203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:f4:92:0c:d1:80:ca:4c:ff:66:ae:c5:e6:1a:46:ea:1f:7e:
         99:a4:b1:68:d0:b5:bf:2b:ea:b7:20:4b:17:ac:e3:52:3e:e6:
         7b:88:b3:f1:41:b3:46:69:b7:73:90:d4:bc:e1:a6:4f:a7:08:
         9f:94:97:34:ad:5d:fd:fb:af:d7:90:92:c8:e0:cd:ab:d1:4d:
         4f:7b:72:0b:a9:3e:90:a3:07:d1:1c:1c:21:1d:ee:16:63:42:
         2e:4b:f0:16:e2:54:5f:12:f8:25:bf:c7:8e:42:89:0f:5b:06:
         fa:08:1b:a5:75:ef:3b:aa:7c:7c:f2:91:75:ee:ec:3c:03:28:
         3f:1a:3c:08:b2:94:fc:83:33:98:59:2b:41:b5:8f:75:e9:28:
         23:d8:34:58:f2:2f:94:f8:67:bc:11:a6:9f:0a:78:2b:46:2a:
         85:7c:13:1f:dd:17:42:d9:85:2a:e1:62:76:5c:f8:5b:11:31:
         e0:a7:57:fb:81:c6:cc:6a:f6:6d:a7:57:b9:bd:69:6c:b9:18:
         2e:bd:9a:48:13:46:a3:bb:60:da:7a:29:7b:24:be:34:70:bf:
         9c:1a:69:55:5d:91:62:b1:64:0a:6d:db:05:74:b8:14:74:02:
         81:af:94:6e:23:79:a7:44:a0:a3:5c:de:40:42:52:d6:6c:27:
         3c:4f:85:16
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSjBNpzFw10FD7EOxEon5G0SVtOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENFNDgzM0JGN0M2QjAyNjhCRjRDM0YxRTIwQzBEQjRF
NDg5N0M3NTAeFw0yNTA0MzAxODQ4NDBaFw0yNjA0MjkxODUzNDBaMDMxMTAvBgNV
BAMTKDA5MDU1QkM5M0RENUZGNEMyNjUxQUU3RTFBMkRDRjlCRUFGODkzQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC99E0tL0Zg7RVupaX4VkKTwaQ6
wWKbHTw86hcst7Mi3XTFp348HQouaM3pFG3Q3135Lu/3POkCiT/cpbEQAqGXE+3m
TyxhREd8Cp30g1xDacmO6pTbv4BBfE+EYjPO6SRE4eld65NS2C66zgn1zcL5veIO
TNxRcISaj43oKDDUYvGR6F1bSZwniy79li57nuaEH0JPkLqsVLuz+ecIpSYi1Ob4
hupxnnH98S2a0ShQ/84eK/PYnCRCVLe3LHvpxJVubLe6xrIW08Nqvi2VZw9b6q7F
5Qkk+UzsWpdfyJIkApluUtSCgNln4xyoH336UCC8pdDKAo3OOJGEk2L2ug/5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCQVbyT3V/0wmUa5+Gi3Pm+r4k6UwHwYDVR0j
BBgwFoAUTOSDO/fGsCaL9MPx4gwNtOSJfHUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjU4Vm9yMmVTUTFmMThZR2FxaGltTmRqeVlvSG5RS3lLdjhXanluNjhG
NzYvMC80Q0U0ODMzQkY3QzZCMDI2OEJGNEMzRjFFMjBDMERCNEU0ODk3Qzc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRTQ4MzNCRjdDNkIwMjY4
QkY0QzNGMUUyMEMwREI0RTQ4OTdDNzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y1OFZvcjJlU1ExZjE4WUdhcWhpbU5kanlZb0huUUt5S3Y4V2p5bjY4Rjc2LzAv
MzEzNzMwMmUzODMwMmUzNTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzMzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlA2MA0GCSqGSIb3DQEBCwUAA4IBAQAW9JIM0YDK
TP9mrsXmGkbqH36ZpLFo0LW/K+q3IEsXrONSPuZ7iLPxQbNGabdzkNS84aZPpwif
lJc0rV39+6/XkJLI4M2r0U1Pe3ILqT6QowfRHBwhHe4WY0IuS/AW4lRfEvglv8eO
QokPWwb6CBulde87qnx88pF17uw8Ayg/GjwIspT8gzOYWStBtY916Sgj2DRY8i+U
+Ge8EaafCngrRiqFfBMf3RdC2YUq4WJ2XPhbETHgp1f7gcbMavZtp1e5vWlsuRgu
vZpIE0aju2Daeil7JL40cL+cGmlVXZFisWQKbdsFdLgUdAKBr5RuI3mnRKCjXN5A
QlLWbCc8T4UW
-----END CERTIFICATE-----
Generated at Sat May 10 13:27:15 2025 by rpki-client