Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/3137302e37392e3133362e302f32322d3232203d3e20323636333031.roa
File:                     3137302e37392e3133362e302f32322d3232203d3e20323636333031.roa (raw, json)
Hash identifier:          ehS8e5P8qY0QuS3tHKfwFjLKUq1RyIwO7sjKjYAmAok=
Subject key identifier:   BA:66:98:AE:19:F2:F4:EB:7A:87:40:03:FD:FC:C5:BF:C6:E0:89:83
Certificate issuer:       /CN=774CB762631C4ECCE6178AC72CD05509DDA606A3
Certificate serial:       53145F309A1B965584818A887EF446E394E23FB3
Authority key identifier: 77:4C:B7:62:63:1C:4E:CC:E6:17:8A:C7:2C:D0:55:09:DD:A6:06:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/3137302e37392e3133362e302f32322d3232203d3e20323636333031.roa
Signing time:             Wed 08 Oct 2025 19:30:18 +0000
ROA not before:           Wed 08 Oct 2025 19:25:18 +0000
ROA not after:            Wed 07 Oct 2026 19:30:18 +0000
asID:                     266301
IP address blocks:        170.79.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.crl
                          rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:14:5f:30:9a:1b:96:55:84:81:8a:88:7e:f4:46:e3:94:e2:3f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=774CB762631C4ECCE6178AC72CD05509DDA606A3
        Validity
            Not Before: Oct  8 19:25:18 2025 GMT
            Not After : Oct  7 19:30:18 2026 GMT
        Subject: CN=BA6698AE19F2F4EB7A874003FDFCC5BFC6E08983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:df:71:58:d8:d9:91:44:0e:e0:1b:e0:7c:
                    aa:dd:b8:97:5b:2d:52:a2:cb:15:a5:bd:af:96:b4:
                    cf:a2:1f:ae:c0:b9:d2:fe:63:27:14:9c:05:7f:f6:
                    3e:04:4b:96:4d:ff:1a:a9:f9:e6:1c:57:33:db:6c:
                    54:1c:81:93:76:02:31:69:49:aa:54:9b:cb:6e:ca:
                    ed:ac:a0:97:4d:13:e3:3c:6f:0d:c5:10:1d:ff:30:
                    0e:4c:90:25:b1:16:f5:a7:42:0f:8a:dc:40:fb:b9:
                    a5:63:17:60:d5:f8:02:c0:32:1d:11:c5:6b:be:67:
                    3b:ff:a7:19:6f:a3:7a:a8:bc:f9:8f:99:69:b4:cc:
                    19:73:88:0e:48:3d:dd:10:ab:3e:64:37:22:35:ab:
                    ff:5a:c6:0d:64:dc:ec:b7:55:d7:cf:5e:e8:9d:36:
                    4c:3b:4b:82:7d:98:14:ff:75:4c:9a:92:0d:f4:7d:
                    5a:63:bd:92:e2:68:d0:62:1e:04:37:06:b7:f0:a2:
                    5c:5c:59:48:ed:0d:17:01:0a:4d:51:b8:8c:c5:57:
                    00:67:39:25:5a:ad:c5:b6:93:24:2e:2f:36:15:d0:
                    b9:80:f8:37:fc:82:06:61:ff:c9:da:43:b5:52:b7:
                    aa:92:8e:74:85:fd:df:ce:07:81:29:f5:d6:5b:49:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:66:98:AE:19:F2:F4:EB:7A:87:40:03:FD:FC:C5:BF:C6:E0:89:83
            X509v3 Authority Key Identifier:
                keyid:77:4C:B7:62:63:1C:4E:CC:E6:17:8A:C7:2C:D0:55:09:DD:A6:06:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/3137302e37392e3133362e302f32322d3232203d3e20323636333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:b3:6c:74:ef:e3:e9:17:b7:8b:6d:93:ed:27:dc:8a:34:f5:
         74:ff:c7:8a:73:f7:60:ba:35:ef:6e:2b:de:eb:06:92:17:c6:
         af:5d:8c:e9:ad:e9:1f:8e:af:8e:44:a1:98:f5:5c:6a:09:f4:
         31:fd:9b:4e:01:f9:21:23:6a:22:d5:21:93:57:9b:56:6e:77:
         df:6a:09:30:b5:5b:87:2c:2e:fa:a2:41:f0:05:03:46:2f:3e:
         07:66:af:cd:e9:46:2e:cb:30:76:49:82:54:19:f4:99:86:6d:
         35:ab:ac:6d:1b:31:1e:61:27:e7:53:84:b8:94:e7:5b:0e:d2:
         7f:11:22:55:09:e0:87:41:8f:93:21:e2:a0:2d:29:a1:1d:88:
         d0:88:32:dc:09:f3:7c:11:f0:21:51:74:16:9d:df:42:54:4d:
         56:ef:1f:25:2a:dc:99:ef:be:70:89:c2:74:fa:7b:d4:af:04:
         f9:13:c8:b3:b9:26:eb:1b:79:60:a4:96:af:05:9f:b2:0b:a6:
         0c:b3:64:26:95:d9:60:a5:80:7d:66:47:b8:20:b8:ce:31:e6:
         f7:b8:fc:4b:0b:3d:c7:55:32:62:c8:a2:82:49:cb:98:88:b9:
         9e:8c:1b:48:54:b1:9a:21:3b:80:7a:5e:c5:ea:65:6e:e3:0c:
         a1:e9:27:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:53:38 2025 by rpki-client