Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS265079.roa
File:                     AS265079.roa (raw, json)
Hash identifier:          X8Cj+B/AFRYaBo4Ojdh7Qr7G6PqPMt4Ooai4q6eEAdg=
Subject key identifier:   54:AD:A7:24:91:CC:84:49:95:1B:D1:43:13:40:17:C5:09:8D:47:6D
Certificate issuer:       /CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Certificate serial:       4251519DB66A4FCA29F967D3BC7BBEF8F4F55771
Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS265079.roa
Signing time:             Wed 02 Jul 2025 11:40:02 +0000
ROA not before:           Wed 02 Jul 2025 11:35:02 +0000
ROA not after:            Wed 01 Jul 2026 11:40:02 +0000
asID:                     265079
IP address blocks:        170.233.136.0/22 maxlen: 24
                          2804:3274::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:51:51:9d:b6:6a:4f:ca:29:f9:67:d3:bc:7b:be:f8:f4:f5:57:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8
        Validity
            Not Before: Jul  2 11:35:02 2025 GMT
            Not After : Jul  1 11:40:02 2026 GMT
        Subject: CN=54ADA72491CC8449951BD143134017C5098D476D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:13:dc:61:13:ef:fe:1e:fe:c7:f9:01:1f:75:
                    ff:1e:a1:29:18:9c:d9:58:d8:0c:c5:58:59:e1:da:
                    91:35:ce:8b:a8:83:55:1c:fa:2a:a7:d6:92:fe:f2:
                    24:df:44:b5:56:3a:da:bf:16:54:f9:0a:d4:fa:51:
                    24:17:fe:39:b8:73:bc:e3:3d:71:38:09:4f:57:a9:
                    88:e3:02:d8:6a:1d:98:5b:b1:0f:9c:3a:05:e2:85:
                    8b:f3:a8:e3:97:5a:44:38:ec:0d:4f:3a:4e:7d:cd:
                    e5:e9:c4:50:60:ff:f1:7d:13:35:c3:14:20:11:40:
                    33:9c:b5:32:71:90:42:b2:00:9f:b5:7f:93:48:4f:
                    b4:8a:40:8e:a9:aa:90:97:b5:ac:33:a3:44:53:72:
                    01:48:1a:76:22:c2:f4:1b:5e:7a:a6:b2:38:bd:dd:
                    14:c1:8d:3d:7b:f5:1d:2e:4a:32:55:85:5f:ce:02:
                    79:39:0d:3d:b6:2f:df:c1:6b:a6:4e:c3:fa:31:89:
                    21:6c:7f:d2:7c:c3:e7:55:b0:f6:d8:1f:6e:47:23:
                    76:11:0d:37:26:7b:c1:c9:26:61:1e:d7:c6:3f:c8:
                    93:1b:58:40:a6:2f:65:4b:2b:82:fa:ea:cd:cc:80:
                    c1:b3:86:94:49:f2:78:29:40:e7:6b:b1:34:2b:fa:
                    48:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AD:A7:24:91:CC:84:49:95:1B:D1:43:13:40:17:C5:09:8D:47:6D
            X509v3 Authority Key Identifier:
                keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS265079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.136.0/22
                IPv6:
                  2804:3274::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:5a:ac:e9:b1:eb:c2:4c:14:4c:8d:8c:2d:17:10:fc:7e:13:
         20:5e:20:f8:fe:f0:5e:30:3d:71:7e:7b:f5:ed:62:3c:0f:8c:
         43:74:9d:b3:5c:c8:0c:5e:7e:0c:50:4e:97:be:70:f6:59:59:
         f2:bc:41:23:a1:f2:21:70:c0:d1:36:13:09:09:40:a5:7d:b7:
         01:58:e4:db:98:a8:b8:c4:c0:65:c6:d3:41:82:db:78:53:1e:
         f1:df:d4:eb:d7:23:b5:e5:f6:50:20:62:5e:fa:62:b6:76:4d:
         25:0b:80:89:a2:92:5f:33:a3:85:12:1d:d4:1e:c5:c8:5a:15:
         d2:a7:61:c9:ba:01:80:67:5c:6e:f3:0d:00:8c:e4:75:ee:5f:
         ee:50:17:c7:cb:9d:a5:fa:be:af:7e:d4:84:cb:a7:ec:0d:3b:
         e1:3d:4a:6c:12:04:96:67:3d:05:68:31:9e:6b:1d:6f:b2:ee:
         82:43:92:23:63:84:70:d6:8f:65:03:99:35:4b:c2:e6:82:01:
         0f:d9:2f:65:f2:03:5b:34:9f:f2:0e:a1:02:31:6e:2d:9d:f4:
         54:db:eb:6c:a1:d4:9b:38:c9:fd:22:d0:b7:3f:86:1e:f0:07:
         63:33:21:cf:aa:45:65:b0:68:de:d5:67:a2:bb:ea:ab:7a:36:
         23:ca:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:08:00 2025 by rpki-client