Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32332d3233203d3e203631373937.roa
File:                     3137302e3234362e3233322e302f32332d3233203d3e203631373937.roa (raw, json)
Hash identifier:          ypAI15BnKMh8Rqaj1N2jCaAT+r3FHoB+MzgykGXK9Nk=
Subject key identifier:   2E:5C:04:0B:86:ED:15:C2:E8:52:E0:0D:59:95:90:90:BB:0D:9C:0E
Certificate issuer:       /CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
Certificate serial:       58B265B270A072FDB8CCF586B6880275BB610150
Authority key identifier: FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32332d3233203d3e203631373937.roa
Signing time:             Fri 06 Jun 2025 11:44:46 +0000
ROA not before:           Fri 06 Jun 2025 11:39:46 +0000
ROA not after:            Fri 05 Jun 2026 11:44:46 +0000
asID:                     61797
IP address blocks:        170.246.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b2:65:b2:70:a0:72:fd:b8:cc:f5:86:b6:88:02:75:bb:61:01:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
        Validity
            Not Before: Jun  6 11:39:46 2025 GMT
            Not After : Jun  5 11:44:46 2026 GMT
        Subject: CN=2E5C040B86ED15C2E852E00D59959090BB0D9C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e7:0f:26:aa:f4:91:07:fc:4f:d5:8b:69:b3:
                    a6:9b:bf:75:ed:5e:07:92:21:cf:8e:3f:59:d6:c5:
                    4a:0c:22:6b:a6:ca:5c:05:cb:80:a0:59:6f:01:4a:
                    91:9a:8f:0c:cc:d3:47:b2:ba:b1:c7:7b:12:e5:29:
                    0a:e8:67:55:02:1b:b9:ab:93:f0:c9:5a:aa:73:ef:
                    17:04:8a:a4:ec:10:69:99:97:76:59:ab:fa:9a:00:
                    8e:a9:0f:7f:72:93:84:75:fe:7d:01:3c:08:b0:e2:
                    b6:52:7d:de:3c:8d:52:2d:b9:5f:29:72:c6:08:ee:
                    46:2a:e3:72:e9:6a:5c:b0:6b:42:01:84:c0:8f:6d:
                    76:d4:96:6f:b9:2b:59:fd:1d:1e:bd:ad:f1:a0:16:
                    d9:67:75:02:ea:f5:20:8b:a1:9c:df:d1:c0:45:70:
                    b5:8b:75:7d:f5:c9:ed:20:a8:1e:86:61:2c:51:94:
                    30:33:30:4c:d5:87:da:e7:f1:c2:d1:51:3e:d5:41:
                    c3:8b:d4:ae:b8:ac:41:d9:e8:d7:17:ad:a4:4a:ea:
                    40:b8:40:17:16:92:25:57:a1:c7:9d:56:9d:f4:91:
                    b5:8f:e2:24:19:db:f4:d1:6c:6f:6e:33:26:db:b7:
                    4e:98:60:b2:5f:4c:4f:f8:5c:6d:54:1b:c1:f2:1b:
                    7d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5C:04:0B:86:ED:15:C2:E8:52:E0:0D:59:95:90:90:BB:0D:9C:0E
            X509v3 Authority Key Identifier:
                keyid:FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32332d3233203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:1b:9a:3b:3a:95:e7:0b:ac:20:28:c1:81:97:97:70:ad:d3:
         e5:ab:ea:ab:c0:01:90:d1:d1:35:a1:f5:fc:8f:77:80:76:05:
         27:0c:2e:ec:95:af:1c:76:99:61:c1:62:9e:d7:4b:ea:cb:43:
         e5:cf:5f:07:fb:51:de:77:66:f2:c4:fe:05:92:f8:a5:30:0e:
         5f:fc:f6:39:16:78:ba:9f:85:5c:21:ab:1f:2b:29:02:5a:43:
         cf:54:e9:6d:f3:65:52:c0:02:35:08:85:1b:e5:7b:8f:b4:f9:
         2b:04:3d:e9:3b:22:32:af:65:3d:09:d5:d3:f5:92:14:4b:f2:
         00:38:aa:23:2a:62:c8:48:02:ce:a5:22:f0:21:d5:37:d5:62:
         5d:95:d7:48:79:84:72:1b:84:fd:24:48:56:03:67:db:54:a2:
         6d:e1:59:54:ac:9e:e9:1e:4b:00:9b:a5:fa:ed:84:ba:a7:f4:
         1c:c2:06:ac:8d:96:eb:0b:dc:60:8f:aa:47:4b:fd:06:9b:ce:
         85:0f:89:92:71:11:a7:20:1c:75:7b:ac:4d:4d:0f:57:85:7f:
         2f:49:73:a1:71:8d:c4:a7:a6:b1:70:5e:d5:66:bb:38:3d:0a:
         35:15:d5:e4:c2:50:35:52:36:be:a9:0c:da:ae:d6:1b:f7:a3:
         73:79:5d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:30:10 2025 by rpki-client