Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e35302e302f32342d3234203d3e20323636343731.roa
File:                     3137302e38332e35302e302f32342d3234203d3e20323636343731.roa (raw, json)
Hash identifier:          NmChzsn+0Ou4+8QYsLgO8JjKrJbb3pSR71y1O0N0mgo=
Subject key identifier:   D3:20:5B:7C:BD:94:5C:67:37:2F:CC:39:F6:0E:B0:D3:30:4A:7D:F1
Certificate issuer:       /CN=CFD5C7E08BC9DC514991104660FD48DE47CD53BF
Certificate serial:       7FD90696E3F0D42DB611A166A5C686B928D04DD2
Authority key identifier: CF:D5:C7:E0:8B:C9:DC:51:49:91:10:46:60:FD:48:DE:47:CD:53:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e35302e302f32342d3234203d3e20323636343731.roa
Signing time:             Sat 21 Jun 2025 13:19:51 +0000
ROA not before:           Sat 21 Jun 2025 13:14:51 +0000
ROA not after:            Sat 20 Jun 2026 13:19:51 +0000
asID:                     266471
IP address blocks:        170.83.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 10:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d9:06:96:e3:f0:d4:2d:b6:11:a1:66:a5:c6:86:b9:28:d0:4d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFD5C7E08BC9DC514991104660FD48DE47CD53BF
        Validity
            Not Before: Jun 21 13:14:51 2025 GMT
            Not After : Jun 20 13:19:51 2026 GMT
        Subject: CN=D3205B7CBD945C67372FCC39F60EB0D3304A7DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:89:d9:ae:7e:a2:e4:6c:95:16:5e:6c:e3:
                    97:e4:7c:c9:d8:73:b8:2e:a8:6b:0b:22:6f:da:25:
                    94:63:3f:5d:ef:5b:04:e2:52:3f:d3:e4:d9:3e:b2:
                    31:f2:33:17:4d:d3:5f:0a:a8:92:1c:a0:4a:2e:15:
                    fa:c2:7f:49:d1:60:04:f5:d8:9b:de:25:69:4c:91:
                    5e:c3:66:69:3d:90:26:53:87:fc:20:85:4f:89:25:
                    ad:70:f2:70:c6:64:ce:95:2a:ac:8f:80:f7:15:7e:
                    1a:19:65:a1:34:9c:1e:be:db:7f:c6:fa:0d:0c:15:
                    cb:d4:a8:3c:77:f1:25:a3:ed:d7:0e:98:6c:9e:6c:
                    48:66:fb:3c:c5:a9:a2:ac:5a:19:e9:1f:de:0d:88:
                    98:c9:71:42:a1:1a:34:dc:08:07:cd:2f:97:d7:8c:
                    46:e4:32:e5:f6:ad:73:c7:f5:00:6d:4f:23:34:d7:
                    5e:a6:20:a6:67:99:16:06:e0:c8:95:2f:11:c8:f1:
                    c5:53:77:9a:3b:43:2c:18:36:ea:45:6d:57:e9:d3:
                    a1:e7:c1:be:56:d2:fa:67:5c:b5:4e:a7:5b:ab:8f:
                    74:71:c0:55:53:24:61:8b:e4:da:6f:f7:60:3b:67:
                    ef:b9:6b:e9:f3:3c:e5:92:45:31:2f:dd:0c:9d:2d:
                    a6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:20:5B:7C:BD:94:5C:67:37:2F:CC:39:F6:0E:B0:D3:30:4A:7D:F1
            X509v3 Authority Key Identifier:
                keyid:CF:D5:C7:E0:8B:C9:DC:51:49:91:10:46:60:FD:48:DE:47:CD:53:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e35302e302f32342d3234203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:10:10:28:cb:cb:19:10:e8:8b:5e:89:e7:28:a2:b2:d6:89:
         bf:a3:e0:75:eb:a2:cc:02:2b:0c:8a:a0:8e:33:2e:12:83:43:
         ca:59:a2:9a:26:13:1b:38:17:e8:4a:80:7d:63:b8:cd:f9:2a:
         c8:7e:22:c6:08:88:f8:30:02:c9:4e:b6:d5:0e:03:99:ac:d7:
         45:e0:60:cd:3f:40:3a:43:4b:39:2c:1a:19:99:2e:fa:ae:60:
         db:52:bd:32:be:2f:4b:e3:06:39:fc:1a:80:9c:6f:f7:e2:32:
         c2:9c:02:7e:3f:2c:c0:40:f4:69:f1:24:a7:8a:62:9a:ed:a1:
         30:69:c0:9b:ef:bc:17:e4:4c:97:e8:3a:84:5b:9e:bc:54:cf:
         e4:2c:a5:6e:a0:6c:d3:60:8d:0f:fd:64:9b:88:20:8e:75:ce:
         bb:ff:a4:dc:bd:82:ed:26:e9:05:8e:e0:e4:54:e2:b4:70:16:
         dc:d0:56:aa:c4:18:51:ea:97:fa:61:b0:02:f4:2e:21:b9:a3:
         e8:5c:1a:b9:32:71:7a:6e:6c:cb:03:f6:7c:87:d1:78:e0:26:
         b5:87:19:24:12:68:13:73:bb:a8:3a:52:d1:a0:75:ff:02:7c:
         07:c5:6d:3a:77:62:33:5a:8b:49:d8:62:21:a5:80:0e:ae:8e:
         13:16:33:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:57:54 2025 by rpki-client