Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/3137302e38322e34382e302f32322d3332203d3e20323636343338.roa
File:                     3137302e38322e34382e302f32322d3332203d3e20323636343338.roa (raw, json)
Hash identifier:          i4oxEjounGtM6f1yNvoJDDKq2vUlPb9I6usjFu3BKxg=
Subject key identifier:   38:FC:8D:F9:95:E7:85:E7:58:C3:8E:9C:76:23:8E:9E:47:F9:66:E9
Certificate issuer:       /CN=ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5
Certificate serial:       66B5232408152DA5B3347699F271F96700486EEE
Authority key identifier: AC:D4:8B:6E:7C:51:9F:43:E7:54:0B:9C:98:95:DC:4F:5E:B6:C3:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/3137302e38322e34382e302f32322d3332203d3e20323636343338.roa
Signing time:             Fri 16 May 2025 19:09:33 +0000
ROA not before:           Fri 16 May 2025 19:04:33 +0000
ROA not after:            Fri 15 May 2026 19:09:33 +0000
asID:                     266438
IP address blocks:        170.82.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.crl
                          rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 08:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b5:23:24:08:15:2d:a5:b3:34:76:99:f2:71:f9:67:00:48:6e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5
        Validity
            Not Before: May 16 19:04:33 2025 GMT
            Not After : May 15 19:09:33 2026 GMT
        Subject: CN=38FC8DF995E785E758C38E9C76238E9E47F966E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5c:2c:d0:02:4d:bc:a9:3d:80:62:42:db:82:
                    83:b3:fa:56:db:03:5d:85:d5:03:65:d5:72:cc:e5:
                    7a:45:46:59:84:dd:b3:ef:06:db:b5:bc:5a:b9:4b:
                    36:76:79:e2:b8:0b:28:37:ab:5e:3f:29:6d:ef:72:
                    43:0b:4c:8c:a8:5a:9f:64:d1:0b:15:ef:9f:bf:d8:
                    4e:f7:1a:53:5c:03:50:d2:99:72:b8:ab:5b:bf:f1:
                    d9:6c:9a:48:cd:99:9b:b0:72:b7:ab:4f:6e:4c:8e:
                    af:37:04:34:1a:a8:c5:06:b9:11:2e:e7:64:8c:85:
                    bd:ff:80:71:57:83:b9:bb:f2:eb:b6:bb:3c:68:52:
                    ae:9e:64:31:a0:ad:d6:94:e4:1d:e0:69:af:90:15:
                    94:4c:fe:14:9d:45:93:34:13:60:77:74:f4:b5:6f:
                    75:3a:a2:f6:2f:e6:5c:6e:93:e3:e8:0c:06:11:d0:
                    61:20:45:9b:2d:56:2d:1d:9f:13:ed:9a:32:a0:19:
                    f9:04:36:82:4c:a7:41:2f:12:12:0e:87:d3:99:bd:
                    26:ef:97:1a:f9:7a:e7:12:e7:5b:7c:17:25:82:fc:
                    4f:43:06:33:65:0d:7f:82:b7:7b:a4:d8:be:9a:cf:
                    b2:b5:2b:21:89:66:99:e8:f7:96:a9:dd:a9:b5:a3:
                    fa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FC:8D:F9:95:E7:85:E7:58:C3:8E:9C:76:23:8E:9E:47:F9:66:E9
            X509v3 Authority Key Identifier:
                keyid:AC:D4:8B:6E:7C:51:9F:43:E7:54:0B:9C:98:95:DC:4F:5E:B6:C3:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/3137302e38322e34382e302f32322d3332203d3e20323636343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:58:c9:0e:5f:af:71:9b:a2:f6:37:ee:d3:82:c7:be:e0:c2:
         34:2e:5f:1f:24:08:87:87:2e:a9:1b:df:89:5e:49:7d:fc:27:
         09:d5:a9:eb:7c:b9:ab:a9:1b:35:34:a5:32:b2:19:ba:65:24:
         6b:da:92:74:50:a4:a7:f3:2c:4b:f4:ea:b1:32:ef:c4:17:bb:
         7c:95:d7:bf:08:c3:69:2d:80:0e:f3:3d:b1:0c:14:2f:6f:d0:
         5b:da:d1:3b:0a:8a:ef:13:2e:d6:0b:39:6d:10:76:10:e9:4c:
         6e:fd:f2:b8:1b:c2:7b:eb:67:01:03:68:58:0a:d6:13:48:b2:
         57:bb:3d:83:1a:4d:f7:3f:0a:89:7e:ef:f5:9a:fe:1a:a0:4e:
         2a:3f:79:42:24:1e:72:50:2d:ad:da:1a:07:02:ae:df:66:f9:
         9e:58:fa:a4:39:8d:27:f5:2c:0a:b4:25:58:a7:9b:50:ad:6e:
         e2:01:88:88:df:1b:88:2a:e5:d3:e1:22:f4:82:6a:35:29:2c:
         1d:e8:db:58:03:fc:78:9f:63:c9:7b:77:63:4c:ad:f7:05:ce:
         91:b1:9b:92:22:87:87:7b:95:0a:5a:25:31:be:7d:e9:e7:b5:
         ed:37:1b:7b:97:69:c5:b1:5d:38:d3:dc:a3:0b:13:5d:6e:1a:
         a4:17:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:41:44 2025 by rpki-client