Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3137302e38322e342e302f32322d3234203d3e20323636343333.roa
File:                     3137302e38322e342e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          b/Zm6CJPfwWN47+L36utGZhmWMOak2gazTH2hP371BA=
Subject key identifier:   D5:01:13:6A:FD:4B:5B:5B:D3:5B:19:9F:42:8A:7C:63:BE:7B:15:9D
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       13F622B6BEEDD30FB56E5645E2B63CAA3029F287
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3137302e38322e342e302f32322d3234203d3e20323636343333.roa
Signing time:             Mon 09 Jun 2025 19:15:40 +0000
ROA not before:           Mon 09 Jun 2025 19:10:40 +0000
ROA not after:            Mon 08 Jun 2026 19:15:40 +0000
asID:                     266433
IP address blocks:        170.82.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 19:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f6:22:b6:be:ed:d3:0f:b5:6e:56:45:e2:b6:3c:aa:30:29:f2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: Jun  9 19:10:40 2025 GMT
            Not After : Jun  8 19:15:40 2026 GMT
        Subject: CN=D501136AFD4B5B5BD35B199F428A7C63BE7B159D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d1:84:4d:5c:0c:31:bf:65:ec:5e:e9:b1:7b:
                    6f:19:2d:93:9c:4f:4f:74:bd:a7:22:55:8d:47:30:
                    40:6f:c1:93:5c:0a:61:24:a6:ab:64:01:e8:e7:a4:
                    ad:c0:84:2e:79:0a:57:10:5f:ba:04:87:9a:36:3e:
                    62:4e:0a:73:14:04:74:cc:4d:1d:a2:a3:e0:03:93:
                    5b:e5:fd:73:f9:7c:e7:25:14:f3:04:cd:51:29:30:
                    f2:14:cd:91:9b:96:af:81:1d:9a:07:03:84:5a:ee:
                    aa:60:b2:35:e8:ca:50:c1:cc:1c:78:ed:95:d0:6c:
                    cc:57:15:c4:45:5d:ef:67:b2:a5:76:79:c1:0c:10:
                    8c:4a:86:bd:cb:af:80:26:dc:1e:5b:c7:d3:8f:f5:
                    f5:69:bd:eb:ad:43:5a:70:9b:f6:0e:83:92:10:d6:
                    39:f0:64:23:ea:20:49:8b:7b:24:ad:4d:a5:73:8c:
                    eb:ec:d6:2b:72:ba:26:4f:27:8f:49:b7:05:bd:59:
                    4d:7a:ad:ad:64:f7:57:8b:dc:b9:ca:22:35:f8:a2:
                    d6:33:26:e4:bf:13:67:02:b2:1a:95:48:34:bc:3e:
                    3c:e3:dc:1f:b7:17:d4:92:62:17:68:91:f2:b7:cc:
                    1c:e9:5e:c0:50:ff:06:d5:d8:64:14:ab:37:9c:4c:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:01:13:6A:FD:4B:5B:5B:D3:5B:19:9F:42:8A:7C:63:BE:7B:15:9D
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3137302e38322e342e302f32322d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:c0:cc:17:98:63:2b:3f:4a:18:34:b1:9b:8c:7d:52:c4:9a:
         06:6a:32:d1:f8:ea:4a:bd:30:f5:7f:b9:5c:2c:6e:7e:9a:42:
         cf:0d:8c:44:49:b0:db:13:a2:65:72:4e:e2:39:cf:53:76:70:
         25:ef:42:08:0e:25:53:d2:4e:63:b4:66:f8:83:6c:be:81:ca:
         95:59:6f:8b:f9:2c:53:4a:fe:1c:70:6a:94:99:8a:34:ad:2e:
         ca:68:4e:27:ea:7d:a2:fc:01:75:3e:b9:c9:3b:42:c3:47:d3:
         29:1e:22:8d:17:2f:29:68:4c:c5:dd:39:80:33:d3:55:b1:dc:
         fe:5e:47:6f:b6:55:98:78:03:af:ed:68:9e:69:78:54:18:6a:
         44:e7:8b:93:6b:a9:0c:85:ff:3b:6d:60:97:a7:ab:25:e0:f6:
         6e:56:32:3e:ae:e2:09:7b:1d:ff:64:19:66:1b:64:08:51:75:
         09:41:06:b7:40:63:2e:ae:04:31:34:a0:5e:56:7b:8a:00:d5:
         b5:cb:48:70:09:7f:8f:8e:87:51:a9:c0:66:bf:7b:f0:34:4c:
         2d:a0:74:ae:9a:69:c4:30:a2:91:c3:bd:25:fa:cc:af:9c:1b:
         80:2d:51:ac:8b:86:d7:60:84:23:d0:1d:e2:53:48:b7:d6:58:
         f1:6d:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:59:31 2025 by rpki-client