Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32322d3232203d3e203631373937.roa
File:                     3137302e3234362e3233322e302f32322d3232203d3e203631373937.roa (raw, json)
Hash identifier:          3YOXu7dj6f9G1gVa+q09Sth6qKVsImQpniXC6QktT5Q=
Subject key identifier:   13:A5:38:DA:5D:45:83:55:7A:14:5B:80:8C:64:9C:0B:A7:08:E7:41
Certificate issuer:       /CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
Certificate serial:       09DCDF00E43946DC50173A68C911244EC21CA84A
Authority key identifier: FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32322d3232203d3e203631373937.roa
Signing time:             Fri 06 Jun 2025 11:44:42 +0000
ROA not before:           Fri 06 Jun 2025 11:39:42 +0000
ROA not after:            Fri 05 Jun 2026 11:44:42 +0000
asID:                     61797
IP address blocks:        170.246.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:dc:df:00:e4:39:46:dc:50:17:3a:68:c9:11:24:4e:c2:1c:a8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
        Validity
            Not Before: Jun  6 11:39:42 2025 GMT
            Not After : Jun  5 11:44:42 2026 GMT
        Subject: CN=13A538DA5D4583557A145B808C649C0BA708E741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:12:a0:25:e4:e2:6a:ef:f3:eb:10:d9:58:
                    de:97:0d:6d:24:0c:1f:dc:d0:f0:34:ea:d5:92:e8:
                    32:57:a1:58:f9:9e:c2:6c:5d:b7:8e:41:96:b5:9a:
                    14:41:f3:69:90:71:11:6c:c8:c5:d7:f1:92:e0:15:
                    c8:99:95:d1:62:a5:de:e9:ea:9e:e2:c4:43:51:91:
                    62:a1:ed:42:86:3d:99:97:0b:dc:02:9c:99:24:c3:
                    14:75:26:0f:8b:25:84:13:69:9f:14:79:ee:76:52:
                    5a:dd:b2:4a:a7:e2:a0:1c:3b:40:aa:8f:b1:4d:32:
                    75:06:e3:be:e7:e6:a6:9b:14:32:6a:55:8d:12:bb:
                    d9:cc:77:ce:e5:74:b0:eb:73:9c:ed:e6:8e:8b:5e:
                    5c:5f:c0:66:ca:e8:d2:3a:fa:95:08:25:eb:30:4e:
                    fd:7c:b9:25:da:36:e3:3e:ba:f9:0d:ab:7f:f8:d1:
                    49:63:06:1c:94:4e:95:c9:da:5e:f6:1e:b4:02:64:
                    78:03:7c:51:e5:17:9b:d1:ce:78:65:b7:e1:27:11:
                    b9:09:76:53:8f:fc:11:f6:b3:f9:ef:38:41:e1:0f:
                    0a:7c:25:d8:3a:a1:c4:64:b5:c8:f7:74:62:26:49:
                    03:ea:03:80:7a:c6:01:3f:6b:15:ea:1d:8a:b0:36:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A5:38:DA:5D:45:83:55:7A:14:5B:80:8C:64:9C:0B:A7:08:E7:41
            X509v3 Authority Key Identifier:
                keyid:FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32322d3232203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:5d:f2:f3:21:c0:b4:96:d2:8f:55:a8:65:e3:b9:db:8b:b2:
         cc:e2:ae:5b:75:0c:5a:5c:a5:e3:81:04:58:9c:07:4d:47:6c:
         c0:2b:c1:f6:57:4d:b4:67:76:63:84:3c:04:1f:a6:26:d6:fb:
         b4:e0:ea:d7:16:bd:1d:69:31:b7:4f:dc:28:a1:c1:58:53:e1:
         9e:f5:fa:5b:7e:ce:f2:26:b6:09:6f:99:5a:9b:71:04:5b:e2:
         aa:99:16:58:96:fa:57:0a:4c:52:a7:d7:85:17:af:e2:85:d5:
         31:2b:5c:12:b0:da:11:c2:38:15:83:99:cb:cf:3d:24:03:30:
         a1:fe:d1:61:44:9d:2b:fd:35:40:bc:99:2c:99:5f:30:83:11:
         5d:4e:8d:89:c0:df:e3:77:c6:e2:83:40:74:f2:67:d1:47:d5:
         73:26:86:48:04:0f:fc:94:51:c0:3d:30:61:8d:e6:8b:1b:67:
         ab:e9:7c:3d:23:13:ae:ef:4f:1f:9c:55:52:0a:67:aa:b4:cd:
         f9:de:41:59:61:f4:1c:46:21:98:4f:61:c6:69:05:d5:90:ac:
         de:ed:6d:9b:e8:06:a0:28:f0:9e:17:36:8b:65:ef:b9:6e:d3:
         ac:cd:65:05:71:fc:ed:43:bb:ea:1a:ec:b0:05:1f:4c:a3:6b:
         23:42:a7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:30:11 2025 by rpki-client