Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3234203d3e20323636343731.roa
File:                     3137302e38332e34382e302f32322d3234203d3e20323636343731.roa (raw, json)
Hash identifier:          khHZKNXN+auG7wVmp51OThOWpx7d9qvprWj36dEuY+k=
Subject key identifier:   0E:73:17:E3:4E:94:30:B6:A8:78:A0:DE:49:4F:03:0C:CA:AA:C1:1C
Certificate issuer:       /CN=093EBDACB5D919E6065F30F8B08271982354B7E0
Certificate serial:       26FE77A36718711D2F81FEE0D2061E846E84731A
Authority key identifier: 09:3E:BD:AC:B5:D9:19:E6:06:5F:30:F8:B0:82:71:98:23:54:B7:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/093EBDACB5D919E6065F30F8B08271982354B7E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3234203d3e20323636343731.roa
Signing time:             Fri 09 May 2025 18:58:29 +0000
ROA not before:           Fri 09 May 2025 18:53:29 +0000
ROA not after:            Fri 08 May 2026 18:58:29 +0000
asID:                     266471
IP address blocks:        170.83.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/093EBDACB5D919E6065F30F8B08271982354B7E0.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/093EBDACB5D919E6065F30F8B08271982354B7E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/093EBDACB5D919E6065F30F8B08271982354B7E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 04:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fe:77:a3:67:18:71:1d:2f:81:fe:e0:d2:06:1e:84:6e:84:73:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093EBDACB5D919E6065F30F8B08271982354B7E0
        Validity
            Not Before: May  9 18:53:29 2025 GMT
            Not After : May  8 18:58:29 2026 GMT
        Subject: CN=0E7317E34E9430B6A878A0DE494F030CCAAAC11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:58:23:a2:19:75:f3:90:d8:9f:3c:75:1a:
                    eb:dc:58:f3:c1:a3:bd:72:92:2e:33:9c:3a:d6:ff:
                    07:7c:40:2a:fd:5d:16:a8:af:22:0b:0e:29:a3:f5:
                    fd:09:3e:43:e9:d2:31:35:e9:65:e9:14:ac:0c:78:
                    dd:51:dd:09:06:d4:db:5d:23:fb:98:5a:a3:f8:ae:
                    f1:7a:e5:f2:e2:60:ec:f9:01:ff:64:ad:af:a0:6f:
                    3b:d1:6c:35:ba:32:e0:c2:83:ef:b9:67:67:e8:30:
                    52:43:9b:ad:db:49:2a:26:6a:fc:be:8d:82:29:7e:
                    d6:5f:2f:ac:de:5d:35:b5:b0:8d:0c:30:f8:8b:c2:
                    9f:5e:6d:82:f7:02:ed:5b:2a:c5:ff:93:27:49:3d:
                    63:fa:97:61:e4:3b:e7:1e:76:bf:45:82:d9:bc:37:
                    4c:73:22:d7:34:cd:7c:70:ba:45:28:74:75:e7:f5:
                    40:b2:b7:8a:ea:e5:e6:c4:ce:be:ed:38:3a:57:af:
                    29:c6:28:72:15:13:57:32:82:d8:b9:08:b1:d8:41:
                    45:71:2e:b2:ef:13:bf:b1:88:bd:1b:c0:61:64:71:
                    3e:9f:cb:5a:34:cc:a7:e3:8c:5c:c2:15:95:54:d2:
                    b1:c6:45:64:23:fa:a7:94:8e:a5:5b:93:3e:ed:fb:
                    0f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:73:17:E3:4E:94:30:B6:A8:78:A0:DE:49:4F:03:0C:CA:AA:C1:1C
            X509v3 Authority Key Identifier:
                keyid:09:3E:BD:AC:B5:D9:19:E6:06:5F:30:F8:B0:82:71:98:23:54:B7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/093EBDACB5D919E6065F30F8B08271982354B7E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/093EBDACB5D919E6065F30F8B08271982354B7E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3234203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:94:6b:25:55:49:43:c4:70:9b:3a:3c:ac:c6:b6:80:a4:9a:
         16:f5:db:e2:94:8f:18:78:16:ae:1e:d1:8f:81:4a:5b:fd:ef:
         14:55:61:f4:ff:b7:ff:61:53:a3:12:b0:3f:21:05:af:e3:e6:
         fc:69:bd:4d:8e:cf:4f:e2:d3:1e:b6:4c:b4:31:b8:a6:16:e3:
         0e:42:bb:78:5c:59:95:2e:c9:63:61:83:eb:25:7a:1d:0f:41:
         24:3a:be:0a:88:43:f1:35:ea:0a:5e:d9:03:65:dc:fd:66:b5:
         87:de:2c:a3:0e:93:dd:31:c7:a8:21:40:59:9a:22:85:f5:1b:
         31:92:c9:1a:68:3d:e5:79:10:a8:2a:99:d0:ab:2b:35:23:6d:
         5d:4e:88:e3:0b:b9:f1:81:d0:bc:3d:cc:0f:c0:bc:fe:63:37:
         fb:31:41:d5:b4:35:e9:32:7f:34:0e:24:dd:07:6c:07:25:7f:
         bc:9e:50:c5:72:b6:d5:3c:19:63:ef:47:8f:da:93:e9:32:b7:
         da:bb:1c:1b:51:8c:4d:83:8a:ab:d1:b7:c8:fb:ee:b0:f3:67:
         f8:e0:2d:17:a6:a1:df:9f:70:d4:5a:cc:c7:06:8e:2b:94:d6:
         9c:c5:dc:3b:6c:55:2d:f8:e2:e7:3f:a1:72:0a:80:b9:84:df:
         ad:b5:b8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:21:53 2025 by rpki-client