Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34362e302f32342d3234203d3e20323636333339.roa
File:                     3137302e3233392e34362e302f32342d3234203d3e20323636333339.roa (raw, json)
Hash identifier:          gE/TjpH7sIPhhyCLDr0ilX3Hf1qHOabNcebEQmbyhfg=
Subject key identifier:   48:68:1A:54:6C:B4:39:3A:A1:76:82:9A:44:2D:63:29:E4:C3:48:BA
Certificate issuer:       /CN=578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3
Certificate serial:       7725B5B03602E3742F9DA60D48A91E0604BB59FC
Authority key identifier: 57:8F:AC:A4:5E:AA:D1:DB:7C:7E:BA:86:A0:75:0F:BF:7D:83:4B:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34362e302f32342d3234203d3e20323636333339.roa
Signing time:             Mon 07 Jul 2025 17:44:13 +0000
ROA not before:           Mon 07 Jul 2025 17:39:13 +0000
ROA not after:            Mon 06 Jul 2026 17:44:13 +0000
asID:                     266339
IP address blocks:        170.239.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.crl
                          rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:25:b5:b0:36:02:e3:74:2f:9d:a6:0d:48:a9:1e:06:04:bb:59:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3
        Validity
            Not Before: Jul  7 17:39:13 2025 GMT
            Not After : Jul  6 17:44:13 2026 GMT
        Subject: CN=48681A546CB4393AA176829A442D6329E4C348BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:52:3b:f1:29:57:6f:5d:fc:df:44:bf:43:
                    31:15:3a:d7:c8:de:52:13:74:47:fc:2d:e7:ad:4b:
                    a1:01:24:88:4a:07:ff:2a:ec:12:06:f1:8c:11:a6:
                    53:66:ec:ca:f7:77:e1:1a:89:66:4f:f8:69:fb:f4:
                    e7:20:d9:65:e0:d3:13:55:ff:46:c7:24:60:f8:85:
                    66:eb:b1:82:17:ad:3a:0a:41:be:0f:a1:d6:18:a6:
                    64:46:ca:b1:80:a2:ca:87:17:d0:61:12:2c:66:cb:
                    58:d2:1d:8c:c0:c9:cb:dd:76:9c:a6:5b:fc:b6:62:
                    b8:8b:6c:18:6c:df:d1:95:6c:9e:b9:b0:c1:65:76:
                    f4:97:8e:d4:4d:05:12:6d:df:42:e1:43:2f:77:ea:
                    2f:fc:f3:2f:ef:2f:94:e8:60:7d:b3:9d:3d:cb:f9:
                    a4:d5:2f:b1:ee:e7:07:a0:cd:82:3c:d9:8c:07:90:
                    df:bb:31:05:df:a2:13:2b:46:8b:8b:a3:7c:da:52:
                    4b:0f:be:15:cd:0d:4c:c8:02:5a:ff:72:ff:d7:8d:
                    25:ee:0a:cf:3d:7c:21:e9:97:66:38:4c:3b:b7:fc:
                    55:42:5d:86:86:b8:20:4d:b8:41:70:51:ad:b6:1d:
                    69:95:57:a9:3b:92:9d:89:18:df:b5:34:3b:32:c4:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:68:1A:54:6C:B4:39:3A:A1:76:82:9A:44:2D:63:29:E4:C3:48:BA
            X509v3 Authority Key Identifier:
                keyid:57:8F:AC:A4:5E:AA:D1:DB:7C:7E:BA:86:A0:75:0F:BF:7D:83:4B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34362e302f32342d3234203d3e20323636333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:ec:e7:fc:78:bd:22:e0:07:60:21:93:a6:5a:76:02:05:73:
         e7:1a:c5:87:19:f5:d0:58:37:65:e8:dd:f7:cb:ff:02:17:81:
         ac:f4:27:74:80:4f:c4:1f:06:05:62:a5:01:4f:e4:20:5a:7f:
         9d:a4:24:ba:bf:6c:3d:65:5f:c9:cc:30:00:56:46:92:58:1b:
         84:97:4a:89:18:9c:18:de:17:0b:cb:5a:b2:df:1e:8e:e6:c5:
         6a:c7:a9:6b:91:cf:33:d1:67:79:89:1c:a2:bb:27:d5:90:86:
         2f:3d:a7:8c:a2:3b:90:f5:14:46:1b:54:f8:9b:0d:3c:e8:7d:
         7f:50:78:9b:c3:87:02:63:91:28:ce:16:37:d8:72:9e:92:88:
         ab:3a:d7:6a:5d:f7:69:25:cf:51:e6:5a:49:c5:3a:a3:7f:f2:
         11:4e:30:4e:4c:e9:8e:c8:0d:47:fb:ff:85:4f:10:18:18:ca:
         28:45:85:ab:64:d1:e2:dd:39:cb:44:80:3f:84:c5:2b:f0:3d:
         74:d0:8a:d4:1d:94:58:5d:eb:35:75:cc:bb:c9:46:4a:7e:d1:
         6b:3f:d9:b9:fa:e1:ad:c9:ff:f6:d6:a2:8e:e5:6b:6f:35:ce:
         6e:1e:8f:12:7d:41:a9:79:5f:df:f7:52:df:f6:93:a3:61:5c:
         27:d5:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:55:13 2025 by rpki-client