Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS265079.roa
File:                     AS265079.roa (raw, json)
Hash identifier:          JWVpXR22kbBDCStlvD4Mey/zwuJO3Hx0ZgeY825K1xY=
Subject key identifier:   E4:F0:25:7B:AC:B7:5F:A4:33:66:64:8B:D2:4A:2C:D1:2E:7F:B8:20
Certificate issuer:       /CN=15A0CACB6F5D6B45006136392255670B81DB66F8
Certificate serial:       5745E22F4732FF39E8669102681F23530CE69AA0
Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS265079.roa
Signing time:             Mon 29 Sep 2025 11:46:37 +0000
ROA not before:           Mon 29 Sep 2025 11:41:37 +0000
ROA not after:            Mon 28 Sep 2026 11:46:37 +0000
asID:                     265079
IP address blocks:        170.233.136.0/22 maxlen: 24
                          2804:3274::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:45:e2:2f:47:32:ff:39:e8:66:91:02:68:1f:23:53:0c:e6:9a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8
        Validity
            Not Before: Sep 29 11:41:37 2025 GMT
            Not After : Sep 28 11:46:37 2026 GMT
        Subject: CN=E4F0257BACB75FA43366648BD24A2CD12E7FB820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:36:06:ae:a2:0b:69:45:0a:5e:14:e4:56:55:
                    46:b6:d7:bc:7e:32:77:f6:e8:4e:1c:99:5e:4d:15:
                    87:c7:11:0a:3b:f3:a9:c8:99:2c:80:3b:7f:56:3b:
                    5e:72:9c:b9:b4:a3:e8:fd:34:67:89:e7:a8:28:23:
                    a1:fe:20:63:3f:ae:b3:28:c5:ea:07:11:e3:28:79:
                    69:63:94:f5:28:d5:06:fd:d1:2d:5f:76:be:96:fd:
                    bf:5b:1d:8c:de:e9:64:ec:3d:63:79:63:00:c5:7b:
                    d5:ea:c4:a8:3c:d4:d6:31:ee:d4:d0:a5:57:56:1c:
                    6e:2c:96:d0:87:72:70:1a:25:22:93:22:70:97:80:
                    62:79:35:8d:8b:5b:d3:ba:34:62:d2:d4:c8:0b:c3:
                    4a:98:d9:23:3c:fa:a1:85:3c:34:6c:e2:dd:a0:b4:
                    18:14:bc:44:b8:05:96:9b:45:ae:a0:a6:e7:8e:8c:
                    be:d2:7d:4f:27:f1:c1:ed:33:b3:7e:55:b5:02:6b:
                    d4:3e:fc:0c:39:48:83:f6:cd:0a:8d:af:29:02:e1:
                    12:f5:dd:8b:a3:de:a4:f4:0a:04:7e:9e:11:b9:0c:
                    e7:a8:1c:17:b5:a6:e0:9a:e5:7d:19:34:61:90:a5:
                    98:68:6a:51:46:98:60:93:19:04:77:62:b3:54:fd:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F0:25:7B:AC:B7:5F:A4:33:66:64:8B:D2:4A:2C:D1:2E:7F:B8:20
            X509v3 Authority Key Identifier:
                keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS265079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.136.0/22
                IPv6:
                  2804:3274::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:ea:d0:7e:d6:ce:b4:1f:13:07:e1:67:12:05:71:6b:41:bb:
         53:5c:4b:26:df:40:76:d9:e6:7b:01:9c:e0:e8:13:cf:5a:1f:
         15:a9:cb:8b:e7:96:55:5d:8d:bf:63:48:a5:60:de:3f:a8:1c:
         80:ea:fc:ad:31:a2:b0:f5:6c:96:83:25:11:6b:0f:d3:b2:de:
         92:88:15:04:6c:4f:64:97:a2:25:7c:3b:a5:06:e9:b8:50:f8:
         69:81:ca:33:9c:ee:5a:48:86:4b:0e:cb:6d:50:54:49:5a:45:
         89:13:52:1e:f3:60:7e:0d:6c:28:bc:4f:a9:ac:25:6a:b3:02:
         49:02:4d:95:a3:77:58:58:f6:a8:c9:bf:ae:13:b0:09:eb:0f:
         34:c3:90:77:64:60:a7:3c:22:6e:60:b9:a8:10:c2:38:b0:e0:
         45:60:06:9b:0c:37:5e:ce:02:72:22:08:24:5e:19:82:93:5a:
         84:53:ce:18:03:a6:1c:ba:0c:28:83:2f:83:bf:c2:18:76:9f:
         a7:ec:e9:b1:85:40:e2:4f:9e:72:9b:7b:af:08:38:75:ce:13:
         87:04:11:ab:e4:cf:0d:a2:84:05:61:65:c4:3a:a3:18:c8:9d:
         fb:78:dc:68:5b:18:f0:22:c1:89:e0:86:0e:ca:f7:7d:df:32:
         dc:74:19:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:35 2025 by rpki-client