Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3235203d3e20323634353530.roa
File:                     3137302e302e33322e302f32342d3235203d3e20323634353530.roa (raw, json)
Hash identifier:          uDAgbAPwQ1KAA1BfneicnGfjwhFTqhVoeRodKMxUfEk=
Subject key identifier:   BA:D7:72:70:7B:93:42:3D:CC:84:AE:56:C8:2B:AE:3E:94:49:E4:4F
Certificate issuer:       /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
Certificate serial:       6EBB589053BB588E6C86AA7481DAB60BF4A1E440
Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3235203d3e20323634353530.roa
Signing time:             Tue 23 Sep 2025 15:18:10 +0000
ROA not before:           Tue 23 Sep 2025 15:13:10 +0000
ROA not after:            Tue 22 Sep 2026 15:18:10 +0000
asID:                     264550
IP address blocks:        170.0.32.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:bb:58:90:53:bb:58:8e:6c:86:aa:74:81:da:b6:0b:f4:a1:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
        Validity
            Not Before: Sep 23 15:13:10 2025 GMT
            Not After : Sep 22 15:18:10 2026 GMT
        Subject: CN=BAD772707B93423DCC84AE56C82BAE3E9449E44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:05:d2:d2:06:69:da:57:49:35:34:87:a7:1a:
                    88:ae:ea:a6:31:29:09:d2:08:44:05:08:6a:d1:97:
                    6a:a6:2a:25:c5:af:e0:ba:84:40:48:aa:14:e8:88:
                    00:21:ce:cc:52:61:28:cb:6d:ff:93:65:e0:6c:fc:
                    60:93:1c:8f:0f:85:6a:40:23:44:f2:aa:6d:d2:9b:
                    74:34:20:da:74:e9:f9:b1:dc:f9:1f:89:f9:a5:05:
                    ee:67:c9:90:e0:e9:64:e1:bd:3c:4f:f9:e2:df:05:
                    c2:67:58:c5:3a:9b:86:37:96:e6:67:5a:bd:fd:a6:
                    d1:24:a1:01:01:b4:ac:fc:06:1a:59:8e:cf:7e:68:
                    0d:d9:ae:c1:06:52:b4:78:bb:21:c2:d8:67:f0:f4:
                    22:48:6d:fa:2c:70:ed:ed:02:60:8c:79:1e:a9:46:
                    b9:a8:1b:45:fd:d9:66:39:df:0c:ac:ef:d2:3e:16:
                    70:08:e8:ee:a1:c0:ba:a8:df:0b:28:c2:75:b4:91:
                    b8:75:1b:52:0c:7d:16:bf:bc:24:f3:7d:d0:31:cf:
                    6a:82:ed:96:a5:d8:b8:f2:bb:2d:5b:93:4b:55:b9:
                    c6:43:fe:7f:aa:a8:a1:5b:07:92:31:94:a7:a9:a5:
                    a7:0f:4a:97:7c:03:ea:fe:4b:84:84:16:f4:c6:1e:
                    8a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D7:72:70:7B:93:42:3D:CC:84:AE:56:C8:2B:AE:3E:94:49:E4:4F
            X509v3 Authority Key Identifier:
                keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3235203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:5f:1b:e4:32:5e:fd:65:6e:be:f2:21:b7:fd:d8:98:bb:3f:
         b2:a6:ae:45:da:59:3e:b0:4c:1b:c2:68:9f:bb:01:bc:be:02:
         94:ae:3c:4a:95:09:35:6d:f1:4a:85:e9:ee:67:f4:f5:93:2d:
         6e:1b:96:3c:67:a5:2d:cc:cf:4a:16:e5:c7:28:35:99:47:64:
         b0:a9:76:a4:08:ec:24:78:98:14:84:cb:0d:b5:92:bb:b3:cd:
         76:55:9f:ad:d4:ac:a1:a2:44:f2:6f:5b:a0:05:91:19:6d:ca:
         da:e8:fa:55:d4:88:7e:7a:87:6d:84:31:69:dd:8e:2b:cd:10:
         35:6e:3f:09:93:c9:e8:23:1d:19:9e:e7:78:11:d8:34:4e:c9:
         30:17:2c:d8:d3:09:a6:0b:38:79:cb:3e:3f:a8:64:2b:91:c4:
         6c:23:6e:90:95:9b:e0:49:5c:40:d3:02:80:ad:65:25:ab:63:
         35:05:f3:d9:78:55:99:32:6a:5c:3b:f5:37:30:6e:9f:8b:ec:
         80:88:b9:6e:33:a7:e6:5b:54:47:db:0d:81:c6:8a:c1:24:c2:
         51:46:46:55:1b:5b:44:b0:c6:a5:fe:33:72:ac:42:6e:86:42:
         a0:15:1c:fa:98:5b:82:45:43:e2:36:52:cd:63:02:34:5d:26:
         e9:45:fe:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:18 2025 by rpki-client