Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32332d3233203d3e20323636343731.roa
File:                     3137302e38332e34382e302f32332d3233203d3e20323636343731.roa (raw, json)
Hash identifier:          qR7PrAdw+J518JmZ9jG5OdrkMljxgdO9JrI6Y252umA=
Subject key identifier:   2A:29:17:D1:D1:5E:2B:0A:50:4C:D3:9A:08:C7:B4:40:65:0B:A6:ED
Certificate issuer:       /CN=CFD5C7E08BC9DC514991104660FD48DE47CD53BF
Certificate serial:       10AEF51F09F727B97CFB126463ABF5AFB2EDA33B
Authority key identifier: CF:D5:C7:E0:8B:C9:DC:51:49:91:10:46:60:FD:48:DE:47:CD:53:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32332d3233203d3e20323636343731.roa
Signing time:             Sat 21 Jun 2025 13:19:45 +0000
ROA not before:           Sat 21 Jun 2025 13:14:45 +0000
ROA not after:            Sat 20 Jun 2026 13:19:45 +0000
asID:                     266471
IP address blocks:        170.83.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ae:f5:1f:09:f7:27:b9:7c:fb:12:64:63:ab:f5:af:b2:ed:a3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFD5C7E08BC9DC514991104660FD48DE47CD53BF
        Validity
            Not Before: Jun 21 13:14:45 2025 GMT
            Not After : Jun 20 13:19:45 2026 GMT
        Subject: CN=2A2917D1D15E2B0A504CD39A08C7B440650BA6ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d8:f3:8b:33:7d:62:25:6d:e7:1a:b1:27:13:
                    3d:f7:8b:a1:38:69:21:cb:d9:d2:f2:34:ab:fa:c7:
                    d4:4f:e0:a0:36:51:19:64:e2:e0:97:57:90:bd:45:
                    28:f1:7b:7a:3b:9a:12:2c:c5:df:8d:04:e7:8f:88:
                    b3:ea:ba:0b:e8:26:0a:3d:a5:6b:0d:71:a1:e1:88:
                    c2:46:ed:20:47:16:eb:a7:0a:b4:00:99:96:82:5b:
                    8c:cc:33:ea:85:6c:bd:f4:10:a5:18:50:fb:33:ee:
                    56:b5:2c:80:07:19:a3:00:65:74:9a:40:a1:c0:78:
                    85:46:59:2f:b8:76:e6:b6:02:83:e8:44:8c:c4:23:
                    93:e6:a5:cf:aa:21:a3:ec:0e:48:75:16:e8:48:b5:
                    5e:a7:49:58:58:0f:8b:02:1a:ea:f3:1f:ef:a4:ff:
                    a4:05:f5:39:04:34:51:86:ea:ea:38:c3:9e:d8:aa:
                    3e:d1:d5:b8:63:ee:51:91:f4:e7:a9:2e:15:ee:34:
                    87:f6:17:bf:4c:d6:ce:29:db:7d:af:91:7c:f6:21:
                    03:0c:b5:cd:b9:29:4b:f9:81:c3:30:60:01:b6:a5:
                    fd:14:75:38:c7:a6:34:11:04:7e:22:61:e6:7b:d6:
                    9e:bf:7a:ca:6a:cf:00:f9:17:44:96:f8:1d:ed:20:
                    25:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:29:17:D1:D1:5E:2B:0A:50:4C:D3:9A:08:C7:B4:40:65:0B:A6:ED
            X509v3 Authority Key Identifier:
                keyid:CF:D5:C7:E0:8B:C9:DC:51:49:91:10:46:60:FD:48:DE:47:CD:53:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFD5C7E08BC9DC514991104660FD48DE47CD53BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/3137302e38332e34382e302f32332d3233203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:ef:f2:5d:19:9c:f1:44:5b:b5:12:fc:ab:d0:d8:89:d2:54:
         52:a0:dc:d7:2c:1a:d0:41:9f:c2:31:8f:dd:99:6c:88:39:e3:
         ad:86:8b:d2:8b:a0:ae:67:56:48:3b:5a:35:ff:38:27:dc:0c:
         dd:f9:53:a4:36:a9:bc:75:7d:cb:3e:b1:aa:6a:ce:05:c1:48:
         6d:d2:f3:e1:58:75:c2:37:4c:c4:e1:5e:8b:11:84:06:80:ec:
         b8:c8:cd:7f:32:00:9e:f5:92:89:13:e9:24:2e:51:e6:f9:5e:
         11:35:57:e3:62:7d:f6:75:10:f8:77:0e:df:e7:da:e1:6f:9b:
         0f:c3:ae:55:84:0a:df:44:9f:1c:7b:10:e7:07:6d:b5:99:e9:
         07:a0:eb:da:fb:96:39:03:1a:49:0d:33:76:ac:58:5c:b9:8d:
         65:1d:80:2a:60:f9:64:65:af:f5:4e:c5:53:ac:a8:fd:ec:f4:
         85:15:80:cc:3d:8d:ef:75:c7:58:d2:c0:44:b9:56:bd:91:d2:
         06:58:3b:71:f5:ec:1d:a0:0b:dc:57:d9:ff:22:45:bf:a0:f2:
         41:a5:b5:d9:02:f7:ce:fd:d9:2f:b4:09:c7:d7:92:85:4d:64:
         22:e5:33:89:dd:78:28:1f:2d:34:40:65:43:9f:b6:2a:94:b8:
         9b:68:c7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 00:49:26 2025 by rpki-client