Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34372e302f32342d3234203d3e20323636333339.roa
File:                     3137302e3233392e34372e302f32342d3234203d3e20323636333339.roa (raw, json)
Hash identifier:          h3Jn2ZWJ3EBT5PCCUzyv3M6X6uMskJtwI1piOLqBV+A=
Subject key identifier:   CE:96:35:45:7D:0D:73:9D:E7:27:C7:3A:7E:1D:64:A9:35:1D:84:53
Certificate issuer:       /CN=578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3
Certificate serial:       27A7B6D51C4C2CC4B85F2332134668F776339AE6
Authority key identifier: 57:8F:AC:A4:5E:AA:D1:DB:7C:7E:BA:86:A0:75:0F:BF:7D:83:4B:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34372e302f32342d3234203d3e20323636333339.roa
Signing time:             Mon 07 Jul 2025 17:44:15 +0000
ROA not before:           Mon 07 Jul 2025 17:39:15 +0000
ROA not after:            Mon 06 Jul 2026 17:44:15 +0000
asID:                     266339
IP address blocks:        170.239.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.crl
                          rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a7:b6:d5:1c:4c:2c:c4:b8:5f:23:32:13:46:68:f7:76:33:9a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3
        Validity
            Not Before: Jul  7 17:39:15 2025 GMT
            Not After : Jul  6 17:44:15 2026 GMT
        Subject: CN=CE9635457D0D739DE727C73A7E1D64A9351D8453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:fd:54:ae:76:5a:86:ee:e7:0a:fe:b1:b6:
                    6b:66:d6:4c:ea:42:94:42:48:01:71:df:f8:21:04:
                    a4:d3:6c:84:f0:c8:e0:e0:1b:41:d9:2c:dc:17:0d:
                    bc:a7:22:1b:c2:75:b9:39:bf:77:92:b4:b2:8c:3a:
                    9c:77:53:ba:eb:a2:df:e4:7e:6b:0c:81:8e:39:63:
                    d8:3f:2e:d3:5a:22:27:ab:18:89:09:ee:6a:45:0d:
                    b3:b2:2d:25:58:0b:a0:d0:3c:24:af:77:81:93:81:
                    e4:6e:1c:06:5e:b4:f8:83:ad:4e:ba:1e:8b:9c:dd:
                    b3:a0:27:b5:ae:a7:d0:5b:c3:ff:43:2f:49:20:cd:
                    9f:fa:03:ab:c0:dd:de:6d:f7:f3:3a:83:2a:5e:83:
                    3e:ef:5c:8f:3a:c3:3d:a7:13:da:37:cd:ef:a4:43:
                    07:fc:20:08:67:d7:28:67:5b:4f:e3:82:c1:e5:6d:
                    a2:2c:49:2a:cb:ab:12:73:85:b7:ac:31:2d:74:e2:
                    29:47:50:e7:ba:bc:e1:0e:d4:ee:5c:8d:5c:94:62:
                    7c:d0:06:c7:ba:81:73:f8:9b:39:f9:f6:c4:86:b4:
                    5b:5d:45:de:70:45:df:1d:b2:b9:28:17:f9:f1:15:
                    02:55:74:8d:a8:99:e1:20:9f:e1:25:1e:0a:63:23:
                    0f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:96:35:45:7D:0D:73:9D:E7:27:C7:3A:7E:1D:64:A9:35:1D:84:53
            X509v3 Authority Key Identifier:
                keyid:57:8F:AC:A4:5E:AA:D1:DB:7C:7E:BA:86:A0:75:0F:BF:7D:83:4B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578FACA45EAAD1DB7C7EBA86A0750FBF7D834BA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/3137302e3233392e34372e302f32342d3234203d3e20323636333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:bd:f0:67:df:56:75:7e:84:67:2a:34:c2:d1:e7:17:ce:1c:
         74:4e:23:1b:9f:4e:76:74:07:4f:bf:55:f3:c9:de:fc:97:66:
         bc:a0:14:9c:07:71:96:52:5a:28:84:31:d7:5e:3e:a2:5d:e0:
         1c:77:2d:b5:22:28:bf:97:8e:dc:f7:97:11:e4:15:d7:45:1c:
         aa:ea:2c:30:45:51:bf:f7:43:c4:90:2c:fa:48:9c:fa:ae:d9:
         b1:03:1c:9c:36:a1:eb:9b:3f:50:e8:68:8c:78:6f:37:1a:d7:
         85:c0:f5:f6:d5:85:65:0d:44:78:88:d6:df:a7:b0:51:73:c0:
         e6:68:88:b1:16:07:7c:8d:0a:b9:a7:8c:c5:9b:17:b7:9a:9f:
         73:de:79:cf:5a:32:63:3a:e1:b3:89:5d:ad:db:d8:e1:1b:be:
         b6:ba:23:a6:87:8d:d3:e9:5d:d0:79:08:e4:90:2c:3a:ee:e2:
         15:33:86:15:b0:12:89:e0:1c:8d:78:0f:09:e4:3f:29:b7:db:
         20:5f:6b:26:44:88:b5:56:c4:38:ae:04:5b:cb:2d:45:c9:23:
         69:19:1c:2b:55:91:1e:ed:c4:e3:2d:38:81:26:c5:59:90:52:
         22:31:95:33:2f:f7:95:92:f3:d9:bd:c6:e7:8a:61:9a:b2:74:
         48:d8:8c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:52:02 2025 by rpki-client