Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33332e302f32342d3235203d3e20323634353530.roa
File:                     3137302e302e33332e302f32342d3235203d3e20323634353530.roa (raw, json)
Hash identifier:          KIQNcWJmg0b3sY/nuIn3ZqZoS4uGHoXv01Rd+pk69rM=
Subject key identifier:   F7:AB:0A:A0:14:96:93:76:96:22:91:62:7B:DE:9F:76:4C:69:F5:45
Certificate issuer:       /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
Certificate serial:       241FF1FE8D7E0361A5961CF11340F10B6779F372
Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33332e302f32342d3235203d3e20323634353530.roa
Signing time:             Tue 23 Sep 2025 15:18:28 +0000
ROA not before:           Tue 23 Sep 2025 15:13:28 +0000
ROA not after:            Tue 22 Sep 2026 15:18:28 +0000
asID:                     264550
IP address blocks:        170.0.33.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1f:f1:fe:8d:7e:03:61:a5:96:1c:f1:13:40:f1:0b:67:79:f3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
        Validity
            Not Before: Sep 23 15:13:28 2025 GMT
            Not After : Sep 22 15:18:28 2026 GMT
        Subject: CN=F7AB0AA014969376962291627BDE9F764C69F545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:cc:50:23:9c:4e:fa:bb:6f:f1:aa:4e:21:
                    bf:91:f4:97:87:1b:bc:fc:3e:3b:79:7d:28:8c:d6:
                    01:e4:76:de:2a:c3:49:a6:29:fc:76:61:1b:d5:11:
                    0e:3d:cd:12:f6:0a:f1:47:f0:0e:f3:77:2d:29:7c:
                    91:9f:b8:c7:d3:3e:cc:2a:c2:69:ac:c9:b2:d7:a9:
                    40:f3:d0:f4:0a:c2:f8:7e:31:1e:c3:1a:2e:21:43:
                    13:66:3e:a4:8f:b1:24:5a:50:54:ad:2e:d5:76:dd:
                    23:3e:d4:fc:cb:61:12:a7:a9:7b:20:03:64:be:31:
                    b0:ce:1f:21:e1:0d:cb:e0:98:cb:80:6d:59:dd:64:
                    df:2d:3d:7e:8f:81:b2:10:ca:05:ca:2a:7d:07:7f:
                    ac:45:16:1b:4d:d2:d8:16:b3:42:80:9f:4b:68:39:
                    f0:41:90:a7:9c:63:c0:51:b6:5d:be:d8:9c:0d:8f:
                    00:d2:a1:64:a5:59:11:cf:2d:5e:14:fb:b4:02:1a:
                    dc:6d:e7:8a:7f:41:f0:cc:8a:66:f7:dd:f6:2e:59:
                    28:16:77:e0:a5:99:00:f5:b9:89:f6:48:40:e5:b6:
                    d9:c6:a2:11:6c:c8:6d:a7:77:e5:a6:30:e3:2c:b0:
                    18:aa:95:77:94:af:3b:16:6f:67:74:9a:c3:46:e2:
                    1f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AB:0A:A0:14:96:93:76:96:22:91:62:7B:DE:9F:76:4C:69:F5:45
            X509v3 Authority Key Identifier:
                keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33332e302f32342d3235203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:97:55:e4:04:79:87:99:2a:2b:95:c2:59:41:b7:d1:79:6d:
         2e:40:53:e4:b5:68:b9:de:6c:42:2f:69:e1:d7:af:fb:f7:aa:
         db:9e:ed:11:d1:32:56:6f:af:ea:c5:8b:40:92:5c:83:d9:38:
         c1:58:d8:8a:44:aa:4d:88:d9:88:44:15:e4:75:de:91:a7:50:
         bf:8f:a9:4d:a2:b5:a2:cd:b3:07:e8:2c:c2:8c:7e:01:26:56:
         9c:76:61:44:9c:6a:fe:e0:6d:94:d8:93:c5:a5:48:29:ca:47:
         c5:e9:b4:d9:3f:c5:86:f7:a2:6b:fc:78:54:a9:11:91:21:42:
         03:2b:ab:84:54:e1:ca:51:5c:68:ea:7a:18:78:20:ce:1f:e1:
         ba:03:7a:0e:9f:ef:a9:cf:f5:f8:d0:82:dd:a5:ad:cd:7f:b2:
         77:61:a8:a2:e5:76:5d:6f:94:ae:f6:e5:63:fb:53:56:dd:18:
         f9:6f:be:40:d6:4b:a7:44:88:86:0c:58:7e:e2:0b:e7:c4:6a:
         74:4a:d4:85:eb:39:60:1f:ed:cf:d4:ef:52:e5:22:1d:57:8e:
         d0:1c:5c:c4:c2:44:50:d0:01:2b:fd:50:d2:d1:3e:25:f6:6e:
         bf:a2:a1:1d:03:ef:92:a5:30:5d:4e:cc:dc:1a:80:b7:37:68:
         06:51:57:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:26 2025 by rpki-client