Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35352e302f32342d3234203d3e20323636333735.roa
File:                     3137302e38302e35352e302f32342d3234203d3e20323636333735.roa (raw, json)
Hash identifier:          iM5oOopajddbmi2Odcup7hqhgMRxd1zUVfk/r4esY58=
Subject key identifier:   22:05:3B:52:6C:55:19:5A:3F:C0:6E:71:FA:04:27:02:EE:5C:08:57
Certificate issuer:       /CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
Certificate serial:       0A78285B3B4601E861971D1652A18D3F45FCF491
Authority key identifier: 4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35352e302f32342d3234203d3e20323636333735.roa
Signing time:             Wed 30 Apr 2025 18:53:39 +0000
ROA not before:           Wed 30 Apr 2025 18:48:39 +0000
ROA not after:            Wed 29 Apr 2026 18:53:39 +0000
asID:                     266375
IP address blocks:        170.80.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 06:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:78:28:5b:3b:46:01:e8:61:97:1d:16:52:a1:8d:3f:45:fc:f4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
        Validity
            Not Before: Apr 30 18:48:39 2025 GMT
            Not After : Apr 29 18:53:39 2026 GMT
        Subject: CN=22053B526C55195A3FC06E71FA042702EE5C0857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:eb:b8:40:64:26:51:db:a0:72:67:7e:0b:e4:
                    a6:93:64:6e:9a:04:81:9b:a0:c9:1b:4f:ad:1a:54:
                    e2:b6:d3:aa:a8:20:1c:aa:59:d5:31:cc:18:f3:6b:
                    3c:51:87:70:be:d6:f6:48:a0:04:36:8a:77:a0:3b:
                    e5:93:57:5d:cd:08:3f:e8:ed:e8:d2:cb:a1:1c:fb:
                    0c:ae:6f:7c:df:0e:58:dc:30:6f:54:db:cd:3a:41:
                    7e:21:67:3d:6b:91:34:e5:40:ae:35:f8:a7:84:28:
                    26:de:e0:25:f8:62:37:84:3f:56:45:7f:eb:46:de:
                    b5:7d:17:2a:06:a4:db:dc:f8:be:c0:22:ee:07:c3:
                    92:5f:c6:2b:a5:c1:97:bc:14:25:8e:64:b5:d3:e5:
                    27:f2:70:33:54:90:8d:c7:ab:73:b1:9a:ec:74:c6:
                    39:27:43:30:9e:4f:37:2c:c5:df:e9:14:4b:5e:05:
                    62:21:40:e8:eb:84:75:5b:18:07:94:ca:94:88:dd:
                    4c:cd:0b:34:50:79:2d:a6:3d:a3:27:d2:c3:e7:2c:
                    1c:9f:a5:da:82:88:7f:9c:f5:b8:71:e9:7d:4e:b2:
                    f8:a3:29:55:de:5e:26:8b:b3:c4:e8:e7:52:25:8c:
                    e7:50:70:d5:f1:38:1f:8f:c2:95:23:1b:0c:fa:a6:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:05:3B:52:6C:55:19:5A:3F:C0:6E:71:FA:04:27:02:EE:5C:08:57
            X509v3 Authority Key Identifier:
                keyid:4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/3137302e38302e35352e302f32342d3234203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:05:b3:da:be:eb:9d:f3:6e:42:df:e4:e6:ee:c6:8a:b7:60:
         fb:cf:e0:18:b8:a0:e4:dd:40:2c:30:0d:95:41:62:47:63:95:
         62:8e:82:14:ff:9e:61:25:96:25:e8:3c:39:0b:b9:b0:55:e4:
         d6:93:e0:12:89:24:d3:1d:00:86:8c:20:a8:70:bd:6e:32:1b:
         a0:af:a7:03:d2:c9:83:7d:7d:69:0c:e0:d3:6b:68:3b:ff:e5:
         93:46:fb:eb:39:05:3b:1a:18:7a:a1:65:1f:44:08:73:ff:16:
         8d:b8:49:ec:c3:9a:44:55:c8:44:18:e2:07:61:a5:28:70:93:
         7f:bd:d4:63:fc:13:35:5d:ab:35:15:a3:8f:70:22:64:23:ec:
         e8:04:e5:5b:d5:76:29:09:14:4e:c6:b1:28:a6:3c:2e:cb:5e:
         0d:a7:6f:a0:cb:bd:77:32:34:cb:86:8a:97:89:c3:40:40:db:
         67:56:e3:a6:dd:3a:2b:53:a4:84:7d:7a:52:0a:b1:54:2b:03:
         a7:c1:d7:f1:7e:66:df:b9:61:47:fd:54:c7:6c:56:d5:46:22:
         2d:0d:67:77:f6:65:d6:51:47:b8:c0:7b:68:17:58:5a:d9:6d:
         5c:cb:a5:93:9f:44:94:44:8c:67:89:ec:59:ef:f3:f4:91:2e:
         17:1c:cd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:58:21 2025 by rpki-client