Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/3137302e38312e3132302e302f32322d3234203d3e20323636343036.roa
File:                     3137302e38312e3132302e302f32322d3234203d3e20323636343036.roa (raw, json)
Hash identifier:          2oDrpu6etcuI2mEbMVCYRlYKncvSXQnN/k+hlMindEk=
Subject key identifier:   FB:E8:D9:7C:4C:9E:B2:87:39:5B:D7:4E:63:31:AE:E7:7D:6E:5F:63
Certificate issuer:       /CN=CB91FE18915AE687D903BB2899406C36F9DB163E
Certificate serial:       082490F1A5E6F492A53332EDEDCCC2BC5BFDCEBE
Authority key identifier: CB:91:FE:18:91:5A:E6:87:D9:03:BB:28:99:40:6C:36:F9:DB:16:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB91FE18915AE687D903BB2899406C36F9DB163E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/3137302e38312e3132302e302f32322d3234203d3e20323636343036.roa
Signing time:             Tue 07 Oct 2025 18:35:05 +0000
ROA not before:           Tue 07 Oct 2025 18:30:05 +0000
ROA not after:            Tue 06 Oct 2026 18:35:05 +0000
asID:                     266406
IP address blocks:        170.81.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.crl
                          rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB91FE18915AE687D903BB2899406C36F9DB163E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 21:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:24:90:f1:a5:e6:f4:92:a5:33:32:ed:ed:cc:c2:bc:5b:fd:ce:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB91FE18915AE687D903BB2899406C36F9DB163E
        Validity
            Not Before: Oct  7 18:30:05 2025 GMT
            Not After : Oct  6 18:35:05 2026 GMT
        Subject: CN=FBE8D97C4C9EB287395BD74E6331AEE77D6E5F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:43:4d:4a:9a:f5:11:80:8f:47:bb:50:37:
                    3a:73:45:4b:be:f3:ef:99:eb:59:06:3b:4d:bf:df:
                    04:00:9b:66:d6:95:50:e2:6a:bd:de:1b:a3:96:15:
                    6d:95:ce:e0:92:33:d3:d1:24:b7:3d:02:f0:ab:6a:
                    7d:46:a2:80:be:64:36:8a:6a:d5:dc:50:db:f8:78:
                    6e:ba:96:c4:c6:79:45:69:58:a5:4c:88:82:74:b5:
                    4e:73:42:00:65:30:63:40:a2:e6:24:c9:56:f3:59:
                    ef:65:4d:e4:c5:1c:00:45:eb:4e:66:81:f8:94:54:
                    33:60:75:3f:ce:16:01:4d:e0:9f:92:9d:83:ce:04:
                    5c:85:ac:90:bb:1d:08:e9:40:66:b7:57:25:10:7b:
                    0e:c6:d9:87:ea:9d:46:2b:90:ad:55:0a:72:3a:e9:
                    52:0b:5a:db:9e:e0:59:52:2a:e5:63:7c:af:4c:df:
                    b8:e0:13:e2:60:33:0e:d0:7e:d2:a7:66:ce:bc:40:
                    fe:34:eb:d3:28:55:9b:d7:27:fb:1d:de:68:55:ed:
                    6f:d7:da:02:39:f3:03:53:4a:06:b4:7f:59:d9:e5:
                    25:8b:63:08:6a:9d:7f:52:7c:12:62:77:25:68:cc:
                    39:33:ac:9d:51:bb:8b:d6:48:6b:5b:04:0b:c1:c8:
                    f3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E8:D9:7C:4C:9E:B2:87:39:5B:D7:4E:63:31:AE:E7:7D:6E:5F:63
            X509v3 Authority Key Identifier:
                keyid:CB:91:FE:18:91:5A:E6:87:D9:03:BB:28:99:40:6C:36:F9:DB:16:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/CB91FE18915AE687D903BB2899406C36F9DB163E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB91FE18915AE687D903BB2899406C36F9DB163E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/0/3137302e38312e3132302e302f32322d3234203d3e20323636343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:83:75:c8:55:9a:a0:7f:de:23:5a:63:82:d2:31:b7:3c:e3:
         98:25:85:77:75:e7:ab:dd:21:4d:53:ff:c5:4b:32:4c:56:23:
         02:7f:ab:c7:66:61:1d:81:bb:2d:0e:99:89:86:a4:74:e6:77:
         b1:9f:54:46:a4:81:7e:67:f2:07:28:dc:21:7f:8b:af:3b:c2:
         d7:dd:0a:e5:c3:6f:65:0a:86:e6:83:16:02:55:43:29:08:7b:
         94:1b:5d:f2:f2:4c:dd:e7:ac:6a:42:eb:e3:58:29:07:b6:a9:
         58:04:d9:b5:30:83:a7:70:df:b2:aa:6e:73:f8:f0:16:7f:4f:
         e7:11:25:31:de:7d:dd:3d:0b:fc:4b:31:cc:f0:a3:9b:d7:1a:
         f1:3d:53:f6:e3:1d:a7:06:26:02:a0:c0:24:75:12:12:fd:38:
         85:ae:b7:44:47:f2:93:89:6a:4c:86:e3:15:1c:c1:4a:f4:65:
         a1:e8:33:6c:0e:a3:32:4a:67:15:5c:cd:2b:f2:0c:46:1d:d9:
         40:72:87:da:8a:61:bf:c4:7b:e8:20:c6:69:88:3f:c6:c5:56:
         78:eb:27:71:d4:c6:7b:ae:95:94:02:da:5c:8f:61:fd:46:1b:
         af:2e:12:e1:20:7e:31:58:9c:ed:f1:c5:5b:40:9f:17:47:b2:
         cf:aa:15:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:50:18 2025 by rpki-client