Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32322d3332203d3e20323632323933.roa
File:                     3137302e38302e3137362e302f32322d3332203d3e20323632323933.roa (raw, json)
Hash identifier:          W6wcytX4IYWgA7HxAgcL+bhL5YDfMjAjJQhXqn8d7Ec=
Subject key identifier:   EF:96:1F:38:D2:68:43:E3:81:BD:EC:21:2F:38:2A:DC:37:A3:62:6C
Certificate issuer:       /CN=FC32F5E77BB553A3096A33BBDE768287D0B14B26
Certificate serial:       20AC5957184BDE4BF44AF8E0CE8EC81928EE01F5
Authority key identifier: FC:32:F5:E7:7B:B5:53:A3:09:6A:33:BB:DE:76:82:87:D0:B1:4B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32322d3332203d3e20323632323933.roa
Signing time:             Tue 19 Aug 2025 14:03:23 +0000
ROA not before:           Tue 19 Aug 2025 13:58:23 +0000
ROA not after:            Tue 18 Aug 2026 14:03:23 +0000
asID:                     262293
IP address blocks:        170.80.176.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 13:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ac:59:57:18:4b:de:4b:f4:4a:f8:e0:ce:8e:c8:19:28:ee:01:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC32F5E77BB553A3096A33BBDE768287D0B14B26
        Validity
            Not Before: Aug 19 13:58:23 2025 GMT
            Not After : Aug 18 14:03:23 2026 GMT
        Subject: CN=EF961F38D26843E381BDEC212F382ADC37A3626C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:cd:9e:a3:c9:e3:86:7a:0f:c3:16:dc:38:
                    2f:da:ba:5a:49:86:94:31:9a:9b:58:2e:2a:35:92:
                    b4:0a:e4:df:38:24:76:78:1f:43:82:bf:40:50:7b:
                    39:4e:37:88:a9:69:2f:dd:2d:be:7a:63:62:de:f6:
                    b0:88:55:31:91:e1:f6:77:85:da:b9:a1:fe:1c:36:
                    57:00:80:a8:76:50:3c:a0:6c:d6:a0:00:11:ad:0e:
                    83:0b:74:ea:30:4b:bf:0b:cc:22:cc:96:80:9b:6e:
                    6f:8f:bb:3d:b9:f5:68:b6:2f:7e:52:73:32:81:4d:
                    76:28:9a:b6:8d:e0:0d:9f:ed:56:ee:87:c0:23:40:
                    27:c1:ea:b8:f4:1d:a7:0a:04:19:e7:f5:80:cf:1a:
                    39:61:42:d9:2c:dd:fc:03:1f:0a:b0:51:64:8e:f5:
                    6b:d0:68:b3:3d:d8:4e:d1:bc:fd:2f:80:56:b7:0b:
                    4b:18:59:55:72:6c:96:23:d3:5d:63:cb:ce:3d:0e:
                    20:f8:5a:ba:a3:fa:24:91:c7:f8:ee:0a:ac:5f:cd:
                    01:ab:0f:f5:fb:6d:62:91:41:d9:0b:97:79:dd:15:
                    dc:6c:40:16:68:ae:e6:fb:59:d7:24:28:92:d5:5f:
                    dd:9e:d6:fd:1a:00:2b:81:25:dc:83:b8:f4:b5:32:
                    f0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:96:1F:38:D2:68:43:E3:81:BD:EC:21:2F:38:2A:DC:37:A3:62:6C
            X509v3 Authority Key Identifier:
                keyid:FC:32:F5:E7:7B:B5:53:A3:09:6A:33:BB:DE:76:82:87:D0:B1:4B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32322d3332203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:f3:40:02:26:e0:30:b5:9c:ff:27:98:f2:92:03:f4:dc:b1:
         31:3a:9e:12:24:c8:93:d1:99:ba:68:d8:88:6a:db:c7:18:fc:
         73:7a:5c:b7:1c:e4:72:ef:cb:8c:7d:88:3c:fe:86:cb:96:6d:
         15:90:bb:ae:02:ce:2c:bc:d0:01:b1:2f:c7:47:0e:76:56:ee:
         21:c4:5b:74:88:02:3f:98:39:16:ae:27:9f:fe:d7:d2:c5:d5:
         b5:a1:5b:ce:a3:07:20:45:d7:4b:1e:b2:ff:6f:b3:b7:c7:bc:
         9c:0e:85:e5:ef:e3:a1:48:d1:20:91:29:6d:39:a6:40:1c:88:
         e8:63:4e:3d:93:c1:55:ad:70:c2:44:aa:36:2b:9e:d4:9a:fb:
         40:b7:c0:3b:e2:b4:cb:a2:8e:01:f3:34:eb:e4:4d:be:8e:6e:
         70:bf:f7:8a:64:6e:fd:f0:9e:86:8d:35:c3:b2:2d:ad:d8:96:
         82:91:e0:50:d3:a4:6e:51:86:a3:b2:96:68:64:93:8f:b6:9a:
         fe:6e:36:55:ab:97:9d:6d:cb:5c:c4:6a:76:66:7c:ac:ab:46:
         c3:e4:18:7b:78:f0:7a:8e:e7:70:36:a4:57:2e:01:dc:55:07:
         49:56:64:54:ac:b3:48:09:56:7b:89:18:cd:aa:48:7f:e6:42:
         f5:9f:70:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:51:35 2025 by rpki-client