Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa
File:                     3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa (raw, json)
Hash identifier:          OOf095CLKM7SyV2IJGlU27bKqAZvsPZ1DQfWXk+UKZI=
Subject key identifier:   78:74:80:AD:20:98:57:84:A3:D0:99:36:54:C2:B6:B2:28:C9:B3:ED
Certificate issuer:       /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
Certificate serial:       753DA927E56DC1432EDF5A70852FDDDE714C68A2
Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa
Signing time:             Mon 22 Sep 2025 13:51:11 +0000
ROA not before:           Mon 22 Sep 2025 13:46:11 +0000
ROA not after:            Mon 21 Sep 2026 13:51:11 +0000
asID:                     266309
IP address blocks:        170.79.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl
                          rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 03:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3d:a9:27:e5:6d:c1:43:2e:df:5a:70:85:2f:dd:de:71:4c:68:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
        Validity
            Not Before: Sep 22 13:46:11 2025 GMT
            Not After : Sep 21 13:51:11 2026 GMT
        Subject: CN=787480AD20985784A3D0993654C2B6B228C9B3ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:01:c5:06:07:0b:b5:8b:de:23:03:d2:d9:00:
                    0b:b8:f8:61:16:56:e0:6c:7f:db:8f:f2:59:1e:fc:
                    74:ca:ab:fc:ed:1f:8c:27:40:e6:50:31:7e:5f:14:
                    82:3a:64:0f:28:21:03:aa:85:2b:47:0f:69:c6:c4:
                    0e:4e:a6:c6:c0:21:53:6b:e4:eb:1e:17:a2:58:77:
                    20:e5:95:bb:09:67:e3:c2:5f:2e:5d:9d:9b:35:0d:
                    7e:32:38:ad:ec:7f:84:66:82:96:d5:72:cb:43:d6:
                    aa:c4:2a:ed:5e:73:4c:19:b7:d0:6a:e3:b4:a1:99:
                    42:c5:20:99:08:fa:8c:0a:7a:be:f4:29:5c:b6:20:
                    26:70:cb:55:c0:99:3b:87:3f:98:cf:e8:24:4d:2c:
                    40:f1:c2:c8:1e:4f:61:a7:3f:c3:07:e4:ef:38:97:
                    ed:17:bc:68:d6:73:b9:74:ca:a2:80:73:b8:75:d9:
                    51:d4:bd:89:3a:d2:44:33:86:95:78:e7:9d:a9:e1:
                    c9:0e:ac:7a:36:18:e3:ee:78:0b:ab:b1:ef:cb:d8:
                    78:0e:04:f2:ce:98:84:76:b0:c4:96:70:1c:7f:b1:
                    fc:aa:52:e6:8f:ac:e4:f4:33:69:10:8c:bf:21:5e:
                    17:fe:b5:d0:7a:be:d6:18:81:3a:6c:ae:9d:c2:73:
                    a7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:74:80:AD:20:98:57:84:A3:D0:99:36:54:C2:B6:B2:28:C9:B3:ED
            X509v3 Authority Key Identifier:
                keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:f2:55:48:a8:6d:4e:44:f5:3b:b6:12:18:8a:76:cc:2c:5e:
         5e:df:50:4a:3d:29:92:d2:88:6d:6e:36:6c:90:e5:4e:f0:97:
         86:15:b8:4a:f6:03:31:b7:48:93:0d:cc:b6:ef:19:8d:bf:1a:
         46:13:d7:8f:77:d3:17:d7:3f:9c:7e:09:05:72:1a:14:83:74:
         58:64:b4:ed:11:7a:8b:3c:eb:43:2e:ea:ea:2c:5a:94:7c:b5:
         0a:61:b8:6c:ea:6a:b8:07:14:3c:d4:fe:92:5f:ce:2b:b5:a4:
         cd:00:a8:85:1d:79:46:5f:e4:da:07:9e:b1:88:c1:ca:ed:8c:
         bb:1f:57:d2:8b:2f:89:45:f3:8d:cf:18:cf:8c:13:e6:ff:73:
         3f:81:a2:1b:97:d3:66:9e:ad:f2:a6:3d:71:c5:1f:d8:28:a4:
         a8:4c:82:07:8c:aa:a1:1d:66:10:63:6d:75:fd:aa:fe:ae:f6:
         1d:6a:fa:4f:57:e2:23:82:e2:65:6c:67:36:39:cc:84:c8:52:
         fe:47:ef:23:41:ab:84:7d:02:5b:34:1e:e2:cd:ac:df:77:8a:
         8d:f1:42:f3:c8:e9:e4:b5:2e:5d:91:3d:9b:ef:af:fb:2b:5a:
         5c:c8:2e:42:b0:31:bb:a9:fc:91:b2:8f:ed:4b:e5:b8:d1:92:
         fa:0d:b7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:38:17 2025 by rpki-client