Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3232203d3e20323634353530.roa
File:                     3137302e302e33322e302f32322d3232203d3e20323634353530.roa (raw, json)
Hash identifier:          ZZ+uo+FCEN2CoGrdnQzrcN1MhDwm9TD4QQUDmzv3Jbk=
Subject key identifier:   78:5C:13:F8:70:55:41:A2:B6:7F:ED:79:D4:8A:8B:E3:04:F9:63:7E
Certificate issuer:       /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
Certificate serial:       636E60FEC0A635D1FB2C7D8D489913E6633CE547
Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3232203d3e20323634353530.roa
Signing time:             Tue 23 Sep 2025 00:05:18 +0000
ROA not before:           Tue 23 Sep 2025 00:00:18 +0000
ROA not after:            Tue 22 Sep 2026 00:05:18 +0000
asID:                     264550
IP address blocks:        170.0.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6e:60:fe:c0:a6:35:d1:fb:2c:7d:8d:48:99:13:e6:63:3c:e5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
        Validity
            Not Before: Sep 23 00:00:18 2025 GMT
            Not After : Sep 22 00:05:18 2026 GMT
        Subject: CN=785C13F8705541A2B67FED79D48A8BE304F9637E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:3d:d4:d6:50:63:29:e7:0d:dd:17:32:fc:
                    0a:f0:f5:3f:c1:47:93:41:71:1c:e0:d2:7e:a5:cc:
                    11:8e:e8:8b:cf:b3:cf:63:25:04:e9:a2:21:1d:f9:
                    1e:9d:1f:7e:79:77:fb:b5:6e:2b:2b:4b:f0:62:3f:
                    f0:91:84:7c:94:c3:68:50:98:6a:bf:dc:a5:10:cb:
                    5c:b3:db:5f:11:4e:8e:26:67:c7:b5:eb:27:ad:00:
                    b5:3c:4a:a1:85:fd:a1:bc:24:0c:a3:bd:ed:e9:60:
                    e4:4b:e2:34:cc:5d:3f:ab:1f:fb:93:68:80:4a:d0:
                    96:b4:26:32:a2:29:66:65:8e:28:94:6f:25:9f:be:
                    73:39:be:1e:1b:35:05:38:b2:94:5d:07:8b:64:9e:
                    26:e6:a2:58:eb:85:31:5d:4e:61:45:24:30:07:cb:
                    6c:0c:4d:68:96:fc:26:4f:e3:8f:e1:e0:35:d8:9b:
                    8e:4b:24:4b:06:8d:23:3c:fa:72:84:68:83:ea:c6:
                    dd:00:ff:a1:7f:55:ee:1a:15:1f:86:9a:7f:fa:0a:
                    1b:95:5f:2e:b0:1e:96:67:2f:99:eb:e3:25:28:19:
                    dc:7f:9b:ac:27:98:9a:99:e5:65:68:24:8a:fc:e4:
                    8f:2a:d4:de:79:e8:f1:c8:33:a3:50:5f:c8:fb:bc:
                    ae:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5C:13:F8:70:55:41:A2:B6:7F:ED:79:D4:8A:8B:E3:04:F9:63:7E
            X509v3 Authority Key Identifier:
                keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3232203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:77:59:40:b0:ec:e4:9d:dc:cc:4b:7d:ce:50:c6:fa:7d:8f:
         7d:20:30:cd:37:4a:cd:35:78:16:f7:4d:5d:51:13:41:05:24:
         0b:8d:61:bf:cf:bc:12:fe:92:9c:18:98:95:bd:dc:f6:b2:d0:
         9d:7d:fd:4a:dd:99:8a:d2:a0:73:59:98:1f:c1:d7:e0:74:a7:
         fa:d4:e9:9f:82:ba:66:b8:0f:1a:2d:3f:6c:03:35:29:c0:9c:
         b3:33:17:03:28:16:68:37:9b:8d:8a:ab:47:72:62:c0:1d:b6:
         d8:e3:ee:74:b0:8c:37:0e:0a:0a:af:73:71:34:05:8a:a8:6e:
         a5:c7:aa:1d:76:90:1d:e8:5f:8a:63:cc:5f:a6:d5:32:76:be:
         46:9e:23:d0:f2:a8:9e:d8:fc:ef:a3:10:f3:14:0b:f2:d8:bd:
         d4:c8:04:26:8a:76:8a:47:2d:89:4d:91:12:ba:d5:15:b0:93:
         02:c3:ba:04:ac:1e:36:f1:ac:5b:63:5b:8d:7c:26:df:d5:16:
         ad:9c:95:0c:06:cd:b3:d6:2e:e1:18:ec:f7:20:85:3f:af:0a:
         9f:ad:a5:22:02:df:4b:6a:13:5f:67:1c:bc:d0:9c:05:2e:d3:
         71:3f:57:57:89:9f:34:72:1e:18:be:3c:d1:76:be:42:9d:74:
         bb:91:0d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:50 2025 by rpki-client