Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3137302e302e35362e302f32322d3332203d3e20323633333238.roa
File:                     3137302e302e35362e302f32322d3332203d3e20323633333238.roa (raw, json)
Hash identifier:          c+6ShT2cDj596tzwAJb1tGtN0z8WzEUZhQJVwZUg4LE=
Subject key identifier:   D5:D2:34:DD:F1:AB:64:C0:A2:FA:45:CB:9B:44:D0:87:9A:16:E8:10
Certificate issuer:       /CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
Certificate serial:       5FF49DA3190C7C2B1DB6C2BF8A35E5F7B393D238
Authority key identifier: 2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3137302e302e35362e302f32322d3332203d3e20323633333238.roa
Signing time:             Tue 19 Aug 2025 13:23:06 +0000
ROA not before:           Tue 19 Aug 2025 13:18:06 +0000
ROA not after:            Tue 18 Aug 2026 13:23:06 +0000
asID:                     263328
IP address blocks:        170.0.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl
                          rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f4:9d:a3:19:0c:7c:2b:1d:b6:c2:bf:8a:35:e5:f7:b3:93:d2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
        Validity
            Not Before: Aug 19 13:18:06 2025 GMT
            Not After : Aug 18 13:23:06 2026 GMT
        Subject: CN=D5D234DDF1AB64C0A2FA45CB9B44D0879A16E810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:c0:a3:bf:c5:03:ce:c0:76:06:ac:b7:6c:
                    9d:00:c8:2e:91:a5:17:fc:e4:70:36:71:9f:95:23:
                    2e:d3:37:65:36:24:8d:8c:c4:25:b8:9a:1e:f7:70:
                    ac:c1:8b:d6:47:61:3c:da:e2:ab:a5:b9:aa:9c:a4:
                    9c:09:7f:f9:23:39:9c:32:6d:72:66:8b:85:d8:ae:
                    b7:b1:c1:b8:9d:86:77:80:09:e3:44:eb:c3:ff:df:
                    e3:e2:50:88:7e:01:83:17:e6:7b:9c:a7:51:93:d6:
                    af:c5:f2:49:ce:3b:b6:60:36:4e:fe:c3:0a:e2:1f:
                    00:b0:77:66:cb:ca:94:49:de:28:df:35:56:01:bc:
                    a2:fa:d0:e3:13:af:e4:e5:3b:6f:dc:25:29:e3:85:
                    6c:14:2a:6b:21:e5:05:94:d2:15:a2:69:3b:06:c2:
                    f4:1c:05:83:1c:74:b3:dc:b4:4e:3b:40:1e:91:16:
                    ba:52:44:bb:12:f6:56:45:09:48:ca:54:6e:01:26:
                    3f:7b:09:44:e4:b6:e3:bf:69:e7:9e:a7:4e:d6:30:
                    7c:36:3e:f4:f3:3e:4e:c6:50:16:b8:0d:50:59:b2:
                    5a:c9:c9:fd:df:90:84:c2:32:ce:24:d1:0b:c9:d9:
                    8f:92:3e:8d:ea:a5:f8:79:1d:32:a4:d9:c4:bd:ed:
                    79:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D2:34:DD:F1:AB:64:C0:A2:FA:45:CB:9B:44:D0:87:9A:16:E8:10
            X509v3 Authority Key Identifier:
                keyid:2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3137302e302e35362e302f32322d3332203d3e20323633333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:1c:75:dd:e3:f0:c3:71:eb:f0:28:94:97:07:7c:5c:70:9d:
         1b:e4:57:d6:99:c8:61:e0:09:09:dc:3f:15:c5:a8:da:f6:f9:
         3e:2d:c0:09:c8:35:6c:f5:f6:5a:5a:d6:03:8a:96:3f:a8:55:
         98:7c:67:90:6a:cd:5d:e9:90:2c:e2:96:ee:07:c5:d5:d4:b5:
         b1:e7:7c:0a:0c:39:ed:ad:40:8e:d6:fa:81:2b:08:45:97:b7:
         10:43:f0:78:f2:13:e4:28:ba:cc:5d:a4:0d:d3:9c:0a:13:3b:
         16:d6:d4:7f:f6:90:8b:51:55:72:c8:d3:65:9d:6e:3a:5e:d8:
         60:0e:11:db:9c:91:4a:c7:cf:0f:c9:52:8e:8e:b8:31:7e:f1:
         07:8f:d2:0a:ce:0e:7b:0c:c6:c4:3f:0f:ca:76:2b:8b:39:b6:
         c5:13:d0:08:7d:49:7f:66:b2:89:1f:00:8a:b1:c5:96:4c:25:
         cc:80:e8:a8:93:ac:38:45:97:ca:4b:c0:3a:76:5f:52:bd:ed:
         40:d5:96:0d:17:98:8d:6d:08:56:4a:30:99:0e:51:c3:63:62:
         0e:a2:25:98:6f:c4:f5:b9:1f:01:e6:30:ab:0e:1b:ae:36:d1:
         f1:34:ca:79:c1:f6:fe:9a:7b:cf:29:99:29:28:55:74:ff:b5:
         2d:dc:d1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:58:04 2025 by rpki-client