Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3234203d3e20323636343731.roa
File:                     3137302e38332e34382e302f32322d3234203d3e20323636343731.roa (raw, json)
Hash identifier:          Q5y23cRLX5DOBtg1sd74XIr/Lk7ahzh9VV/jYk1Tmw8=
Subject key identifier:   C5:E0:C9:88:DA:D7:7A:3B:73:DD:39:C6:B8:C8:EE:A5:0D:8B:27:C6
Certificate issuer:       /CN=CFD5C7E08BC9DC514991104660FD48DE47CD53BF
Certificate serial:       168F5C97C78B1646228767F4F317BEEA873EFF56
Authority key identifier: CF:D5:C7:E0:8B:C9:DC:51:49:91:10:46:60:FD:48:DE:47:CD:53:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3234203d3e20323636343731.roa
Signing time:             Sat 21 Jun 2025 13:21:27 +0000
ROA not before:           Sat 21 Jun 2025 13:16:27 +0000
ROA not after:            Sat 20 Jun 2026 13:21:27 +0000
asID:                     266471
IP address blocks:        170.83.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8f:5c:97:c7:8b:16:46:22:87:67:f4:f3:17:be:ea:87:3e:ff:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFD5C7E08BC9DC514991104660FD48DE47CD53BF
        Validity
            Not Before: Jun 21 13:16:27 2025 GMT
            Not After : Jun 20 13:21:27 2026 GMT
        Subject: CN=C5E0C988DAD77A3B73DD39C6B8C8EEA50D8B27C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e4:29:7e:1b:24:cf:5d:4f:81:f2:61:dc:fd:
                    f4:10:19:89:cc:ed:73:17:5a:c2:c3:49:b9:e9:bf:
                    37:bc:39:02:16:46:64:d6:0c:1e:ab:80:bf:33:19:
                    9b:84:a9:75:6b:b8:66:38:fb:2e:00:43:2f:fe:f5:
                    f4:d4:6d:c5:5e:bd:1d:bd:e7:11:2c:42:da:3f:3d:
                    b0:9d:4d:b7:2a:64:77:17:a5:bf:9e:f2:37:e7:c0:
                    08:6c:0c:6d:21:17:1d:34:30:d9:af:a8:26:fe:94:
                    df:60:1a:4f:ee:d0:c5:1a:02:df:23:f9:fd:76:e9:
                    3f:8d:8c:65:f4:c0:18:34:da:3d:9e:67:e0:09:2d:
                    ac:f7:28:ad:79:7d:9b:00:a3:e7:8c:54:aa:bb:ba:
                    e1:a7:d1:77:40:38:1a:88:a3:86:23:88:97:f5:6a:
                    46:9f:f8:ad:29:9c:cb:59:52:54:c6:a5:91:9d:32:
                    04:c2:2a:87:6c:0f:a9:31:ff:8a:e9:7f:d6:77:66:
                    f0:a8:14:e4:7d:b9:e7:a2:2c:93:7d:6e:eb:d3:aa:
                    37:29:a6:6a:8a:34:a3:3c:be:8a:7c:d3:76:96:b7:
                    5b:86:22:fc:50:f3:5a:ae:ac:03:2b:d6:42:b3:63:
                    c7:da:fa:5c:37:6b:4e:9b:2b:4b:30:94:aa:3a:db:
                    79:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E0:C9:88:DA:D7:7A:3B:73:DD:39:C6:B8:C8:EE:A5:0D:8B:27:C6
            X509v3 Authority Key Identifier:
                keyid:CF:D5:C7:E0:8B:C9:DC:51:49:91:10:46:60:FD:48:DE:47:CD:53:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32322d3234203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:e5:bd:77:c4:7a:0c:5b:e9:c0:cb:5d:59:55:0f:42:66:de:
         18:ce:69:31:51:16:54:73:05:8c:ac:6f:cb:e7:cb:a9:8b:30:
         fe:6a:f7:58:2d:2e:44:15:0d:a2:a5:82:b7:f3:b3:31:b9:6d:
         71:c7:9d:12:b6:b8:bb:29:ee:ff:04:91:8e:7e:5d:55:f1:87:
         4b:50:16:27:aa:cf:bb:ec:46:32:e7:f6:e3:fe:d9:15:59:bf:
         5b:d3:61:79:12:28:26:c6:f2:ff:bf:33:50:04:1d:bc:a5:a2:
         d0:30:e0:2e:ba:da:07:ed:10:89:73:1c:a9:00:5e:f9:c5:30:
         39:f1:85:9f:fe:7f:bc:39:30:6d:3b:48:2b:f2:f4:9c:6f:97:
         31:72:b9:59:73:72:da:ca:09:c7:22:01:03:d5:f4:8a:f1:a7:
         a7:e7:5d:70:b4:3b:eb:a7:51:8a:be:99:63:3e:16:36:2f:c9:
         06:7b:b3:45:f5:6e:c8:84:5c:0b:ae:46:6a:43:2e:bc:29:e0:
         73:7a:a3:0d:cc:36:3e:d5:62:2a:4f:a5:88:56:f8:21:b9:9e:
         81:4f:e1:37:6e:e9:34:c6:81:38:a7:1d:64:8e:41:98:74:8a:
         76:ad:41:f8:56:96:69:96:4a:a6:63:16:8a:38:70:1f:18:e4:
         b5:52:18:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 17:18:25 2025 by rpki-client