Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32342d3234203d3e20323632333532.roa
File:                     3137302e3234362e3130342e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          SP07za0fjuVsYqDXlO5c03VRN6We0YuIRKwhDiFqIS4=
Subject key identifier:   FD:F7:A4:95:7A:8A:C1:58:74:70:53:B4:BB:E4:08:94:B8:CB:B6:47
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       4B053C63D86CF4BB86ADE3806A2C409302395A6A
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32342d3234203d3e20323632333532.roa
Signing time:             Tue 23 Sep 2025 21:04:09 +0000
ROA not before:           Tue 23 Sep 2025 20:59:09 +0000
ROA not after:            Tue 22 Sep 2026 21:04:09 +0000
asID:                     262352
IP address blocks:        170.246.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:05:3c:63:d8:6c:f4:bb:86:ad:e3:80:6a:2c:40:93:02:39:5a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Sep 23 20:59:09 2025 GMT
            Not After : Sep 22 21:04:09 2026 GMT
        Subject: CN=FDF7A4957A8AC158747053B4BBE40894B8CBB647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:b8:74:a0:23:b6:64:4b:60:5b:b8:e9:44:
                    9d:08:b5:ee:99:78:b6:57:3c:e0:54:bd:59:bc:13:
                    28:3c:30:6e:0b:df:53:ad:9a:ff:63:38:de:de:e7:
                    58:a1:18:97:f5:62:16:b8:e2:8e:8d:3d:d8:c2:c9:
                    b6:15:83:a9:8b:6b:d5:df:e8:50:e4:83:f1:de:d6:
                    eb:d0:f2:37:11:78:0b:e5:ab:c4:61:3b:c8:51:9e:
                    49:6a:83:d1:8c:4e:87:21:b8:bb:a8:da:d6:b2:64:
                    6e:e1:43:aa:d2:a8:19:6b:3d:52:be:bb:e7:4c:52:
                    d0:a7:6e:c1:5e:a3:32:44:b7:3b:89:00:af:20:dc:
                    53:27:8d:61:2c:a7:d0:e8:bd:52:cc:45:b6:a9:0e:
                    8c:6e:51:f4:59:1f:4b:db:1b:28:ef:0b:9a:62:8e:
                    c6:16:c9:55:86:d1:4d:aa:b4:e1:61:c8:c1:2f:c1:
                    f2:b4:f3:92:6e:de:d1:b4:0a:b4:be:17:16:f4:b4:
                    34:99:38:34:a5:80:65:25:f3:8a:27:7a:3a:5c:5b:
                    16:70:7a:60:f3:f8:dd:9a:0d:88:0e:85:b4:03:60:
                    a2:ac:bd:32:62:aa:9a:27:f2:63:47:cf:37:3a:72:
                    50:eb:48:1a:ef:70:25:22:50:cd:50:bf:89:3b:29:
                    ab:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F7:A4:95:7A:8A:C1:58:74:70:53:B4:BB:E4:08:94:B8:CB:B6:47
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:14:5a:5c:de:ae:1a:b9:94:cd:b2:e8:57:e7:8c:29:e4:fa:
         f3:7f:45:dd:84:be:62:3c:57:7f:5f:c5:26:dc:7a:1f:e8:03:
         10:7c:1b:76:f1:96:8e:8e:92:d3:3e:5a:c5:48:50:cf:52:ee:
         73:ec:5e:66:d8:1d:e0:b1:08:a8:07:05:34:ec:f1:ab:4a:bb:
         fa:be:26:c6:93:55:aa:3f:c2:7d:26:2e:3d:d7:75:b2:6f:aa:
         da:0d:cc:80:44:46:34:06:4c:73:e8:9f:ca:32:58:28:44:f0:
         64:74:84:ba:b7:49:a6:41:92:24:d2:1e:54:3e:44:c1:f2:6a:
         f8:2a:ce:3d:b5:49:0d:36:54:07:ec:bd:ac:94:ac:ee:19:df:
         8f:7c:0c:fd:9a:b9:2f:12:9e:2f:b5:79:dc:bd:2e:1a:02:46:
         71:09:31:00:0e:6a:93:1a:f5:51:90:e5:c0:b5:10:d7:6e:49:
         09:95:c0:d7:b8:46:97:26:7d:96:c8:7b:66:4f:6f:cc:38:b9:
         6c:69:8b:69:ad:2d:da:cb:87:22:29:7e:68:d5:be:6c:62:f3:
         f4:f6:5c:fa:de:80:ff:57:79:29:6d:2e:80:27:f9:35:85:4d:
         58:93:36:b7:45:d2:d6:2e:32:83:07:f5:32:4e:d6:f4:37:73:
         ac:90:92:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:07:52 2025 by rpki-client