Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38322e302f32332d3233203d3e20323636333432.roa
File:                     3137302e3233392e38322e302f32332d3233203d3e20323636333432.roa (raw, json)
Hash identifier:          2ZlDdZo3KZHyaWOPJvlYwNX9V/cHAvodvflkzJbjYWw=
Subject key identifier:   E4:84:0F:F6:B4:D2:FB:C1:0E:0D:5C:9D:2F:0C:13:DA:31:5D:E9:CC
Certificate issuer:       /CN=F6088D67AA9EAECE20D46E4D20E46A3447420A58
Certificate serial:       4B3A558C02801DBF09D899E30E90B5FB9C8B3014
Authority key identifier: F6:08:8D:67:AA:9E:AE:CE:20:D4:6E:4D:20:E4:6A:34:47:42:0A:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38322e302f32332d3233203d3e20323636333432.roa
Signing time:             Wed 21 May 2025 19:42:26 +0000
ROA not before:           Wed 21 May 2025 19:37:26 +0000
ROA not after:            Wed 20 May 2026 19:42:26 +0000
asID:                     266342
IP address blocks:        170.239.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.crl
                          rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 09:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3a:55:8c:02:80:1d:bf:09:d8:99:e3:0e:90:b5:fb:9c:8b:30:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6088D67AA9EAECE20D46E4D20E46A3447420A58
        Validity
            Not Before: May 21 19:37:26 2025 GMT
            Not After : May 20 19:42:26 2026 GMT
        Subject: CN=E4840FF6B4D2FBC10E0D5C9D2F0C13DA315DE9CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:6c:bd:fd:47:66:67:a5:cd:41:e8:e6:4b:
                    4e:e5:6d:f6:83:d5:f9:7d:b9:5d:3c:c4:97:00:15:
                    29:77:8f:af:0e:41:84:8d:25:23:da:d3:4a:a4:70:
                    e6:d3:bd:7d:c2:1a:39:82:53:12:66:08:79:a3:5e:
                    c6:32:68:2a:77:e1:81:8a:f1:80:03:4f:c4:2c:6d:
                    78:2b:43:85:ad:d2:c0:5a:72:4e:00:9f:6d:94:57:
                    f4:c5:1f:31:2b:f0:ef:a1:48:21:6c:c3:88:bb:da:
                    c1:33:09:55:79:b6:4d:d7:f5:ba:8f:a9:b5:af:ff:
                    c3:58:c9:cf:9f:de:e3:49:3b:07:ef:da:25:ff:b6:
                    20:14:c6:ec:8e:80:69:3c:a8:6c:83:42:54:b9:f8:
                    0d:05:c7:54:43:ca:e4:34:bb:1d:3c:52:91:c9:b7:
                    d2:51:a8:0b:c3:4e:12:9c:28:f5:e8:e9:46:6e:65:
                    05:db:eb:33:5a:5e:e2:05:5a:15:63:27:29:c0:76:
                    91:3f:ac:d7:03:5e:a4:c2:67:b7:f5:29:cf:f6:65:
                    38:a9:27:55:e9:e6:19:74:2e:dd:4c:c5:3e:e9:39:
                    19:ea:bf:fe:bf:6c:e8:bb:8b:f7:dd:69:49:e5:77:
                    8d:27:8a:bb:3b:ba:2c:4b:70:b5:25:36:eb:44:4c:
                    94:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:84:0F:F6:B4:D2:FB:C1:0E:0D:5C:9D:2F:0C:13:DA:31:5D:E9:CC
            X509v3 Authority Key Identifier:
                keyid:F6:08:8D:67:AA:9E:AE:CE:20:D4:6E:4D:20:E4:6A:34:47:42:0A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/F6088D67AA9EAECE20D46E4D20E46A3447420A58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6088D67AA9EAECE20D46E4D20E46A3447420A58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/3137302e3233392e38322e302f32332d3233203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:fd:7f:03:9c:47:1a:84:00:c0:37:4e:c6:c5:02:0e:32:e7:
         e5:79:92:1e:58:e6:24:da:0c:00:84:50:ef:b1:3c:f1:2f:20:
         ab:90:c5:3e:25:74:37:9d:8f:1e:fb:58:73:ef:da:24:8d:9f:
         b1:22:80:08:dd:2e:63:29:5b:7d:91:84:cb:0a:e1:ba:ea:91:
         dc:f9:79:47:30:1b:c4:f4:47:2c:d1:30:44:70:c6:82:4d:fc:
         cf:0a:6a:fb:d8:f1:63:c3:74:44:ec:ee:d8:46:74:00:74:d6:
         13:7e:49:26:98:b5:28:07:1c:5d:db:f7:43:08:6e:06:30:f3:
         d2:a0:c3:9e:9a:c1:a6:ed:39:d7:ee:11:87:16:36:d7:fd:59:
         0c:d2:fe:00:ed:84:42:16:12:80:9e:df:c2:1d:5a:af:fd:e3:
         d2:0f:46:9b:f2:b0:e7:d1:51:ae:44:37:45:f6:0b:50:8e:f7:
         d3:c8:09:13:7c:24:e0:2a:7e:0a:24:0f:a0:a1:a9:c2:32:dd:
         c1:5c:4c:a5:7f:05:f4:58:b9:82:79:2a:8a:82:23:be:c1:a9:
         1b:ff:71:19:f7:7d:86:02:71:35:8d:81:19:ed:51:66:47:c4:
         47:68:ca:b5:24:3c:54:85:77:1c:dd:bb:c0:d0:34:02:3d:72:
         ce:0e:44:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:55:45 2025 by rpki-client