Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231352e302f32342d3234203d3e203532373036.roa
File:                     3137302e3233332e3231352e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          Fgm9ssha6fivdkvvD/9kNd6JML1A/t+nHO9WAMC5tUo=
Subject key identifier:   63:C5:74:34:8C:EA:B8:52:27:A2:F8:84:37:07:F8:94:5B:84:C0:47
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       70F777B8BF36259A7DE40BEC8D6207F6096164C6
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231352e302f32342d3234203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:31:27 +0000
ROA not before:           Fri 22 Aug 2025 21:26:27 +0000
ROA not after:            Fri 21 Aug 2026 21:31:27 +0000
asID:                     52706
IP address blocks:        170.233.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 07:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f7:77:b8:bf:36:25:9a:7d:e4:0b:ec:8d:62:07:f6:09:61:64:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:26:27 2025 GMT
            Not After : Aug 21 21:31:27 2026 GMT
        Subject: CN=63C574348CEAB85227A2F8843707F8945B84C047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:3f:7e:ac:f9:43:d2:57:78:04:9e:8c:a9:
                    27:fc:d6:58:ca:8f:12:86:42:c7:52:7e:a2:ca:ef:
                    cb:c8:c6:7f:4d:1c:3f:73:b0:24:99:e1:b2:63:7f:
                    c5:4a:d1:e5:ea:15:1e:45:80:6a:ea:f1:d3:a7:83:
                    40:89:e4:95:23:b9:74:c1:11:38:85:7c:4b:fe:b6:
                    d3:52:19:79:53:ea:4d:9c:f7:6c:e3:40:63:f9:4d:
                    0a:d9:7c:3a:9d:f6:7a:1c:0d:f5:c7:17:53:28:79:
                    2c:b5:8e:70:87:8f:03:59:49:84:41:11:fd:c4:73:
                    f1:18:c2:ab:e3:04:d2:f1:f5:2a:5d:38:2e:5e:5f:
                    7c:30:f8:06:5e:61:11:9d:66:bf:05:79:f6:3c:55:
                    d0:38:b4:c0:c1:ae:87:cd:6e:7b:75:17:dc:74:74:
                    2c:58:9f:0f:d2:d6:fa:85:19:e0:4c:9a:3d:b3:63:
                    6a:b8:39:79:db:4a:01:5a:7e:e8:bd:a8:af:ca:ae:
                    75:2d:90:6a:96:04:1e:85:dc:7d:9d:ba:f2:cb:fc:
                    97:63:c5:84:1f:38:48:b6:14:5e:7e:c0:fa:d7:47:
                    f5:97:e7:c4:69:d3:d0:90:a8:22:62:10:35:62:be:
                    98:b9:6b:6e:59:50:ce:ef:0c:fd:cc:74:7c:e1:1d:
                    da:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C5:74:34:8C:EA:B8:52:27:A2:F8:84:37:07:F8:94:5B:84:C0:47
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231352e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:da:b9:17:79:eb:a8:a7:34:f9:c9:06:72:b6:c8:e0:12:e9:
         c0:36:09:c7:e5:a4:01:d1:34:12:ce:52:fa:65:f1:d9:d6:6f:
         d2:48:04:03:e8:f0:d9:3c:58:d2:a5:84:2f:4c:20:8d:c7:df:
         18:72:e0:be:01:1a:8d:5d:9e:2b:33:9b:9e:14:be:c6:c9:4d:
         0d:3e:5a:3f:31:1a:e5:32:ef:9f:ac:6a:88:3a:1a:fa:45:18:
         4f:d2:e8:47:6d:0a:a7:c9:cc:b5:2a:df:08:ee:12:5a:9d:ff:
         3f:bd:5c:81:d6:5e:82:ea:eb:23:70:28:57:8b:b3:b9:ff:ff:
         46:fc:a3:9c:15:b4:1e:80:16:fe:93:78:b9:25:0a:1c:ef:17:
         89:47:e3:97:90:87:dc:b3:69:b9:48:c2:97:45:5f:4e:35:9e:
         89:e5:b9:4a:63:5b:79:3d:c5:9a:e2:5c:0b:ee:3e:5c:e1:de:
         f0:8c:b9:f4:ba:d5:18:f6:7c:6c:2d:e8:37:af:fb:07:66:6f:
         5a:6e:d4:aa:df:e5:b3:57:dd:66:8e:e8:7c:9f:be:9d:77:3d:
         8a:e7:47:a5:41:36:c5:16:e5:5a:a8:2a:9c:38:5b:af:a6:91:
         e6:3f:59:95:59:fe:27:79:b4:d9:60:06:08:62:a8:2b:87:3b:
         f0:31:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:39:05 2025 by rpki-client