Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/1/3137302e3234352e382e302f32322d3234203d3e20323636353139.roa
File:                     3137302e3234352e382e302f32322d3234203d3e20323636353139.roa (raw, json)
Hash identifier:          evkGG8FdtiOVkWoHAwHnD2Yv0u+AlPPhOAA1pHgPCw0=
Subject key identifier:   B9:4B:3A:86:5B:88:23:28:AB:79:81:36:33:9E:05:C9:D1:BB:3C:C9
Certificate issuer:       /CN=6C835B626F252A97ED1738860649F0C3B856DC1D
Certificate serial:       3BF4B5D1A5CBDF37C6F210BED5696513FB3F77E0
Authority key identifier: 6C:83:5B:62:6F:25:2A:97:ED:17:38:86:06:49:F0:C3:B8:56:DC:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C835B626F252A97ED1738860649F0C3B856DC1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/1/3137302e3234352e382e302f32322d3234203d3e20323636353139.roa
Signing time:             Wed 13 Aug 2025 16:03:50 +0000
ROA not before:           Wed 13 Aug 2025 15:58:50 +0000
ROA not after:            Wed 12 Aug 2026 16:03:50 +0000
asID:                     266519
IP address blocks:        170.245.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/1/6C835B626F252A97ED1738860649F0C3B856DC1D.crl
                          rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/1/6C835B626F252A97ED1738860649F0C3B856DC1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C835B626F252A97ED1738860649F0C3B856DC1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f4:b5:d1:a5:cb:df:37:c6:f2:10:be:d5:69:65:13:fb:3f:77:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C835B626F252A97ED1738860649F0C3B856DC1D
        Validity
            Not Before: Aug 13 15:58:50 2025 GMT
            Not After : Aug 12 16:03:50 2026 GMT
        Subject: CN=B94B3A865B882328AB798136339E05C9D1BB3CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b3:1d:78:9d:77:33:50:ba:f1:f3:95:33:06:
                    47:24:2a:96:87:00:c1:8c:0c:6a:20:f9:9c:06:8f:
                    19:eb:b5:b6:54:ea:15:8b:b1:94:a7:0a:f4:9c:d1:
                    88:70:d4:12:26:27:45:49:f7:25:d3:9d:f3:fa:1f:
                    e9:8e:88:e8:ef:6a:91:78:57:82:41:43:58:0e:a6:
                    f6:ad:f3:bb:0f:71:9f:4c:1d:ae:78:6f:0c:cf:3c:
                    5b:08:ca:5a:f1:23:9c:ca:69:27:c0:87:e9:f7:fd:
                    b7:cb:47:e0:50:76:4f:de:d3:44:67:e5:ae:c7:55:
                    f9:da:a2:37:b1:90:ad:a1:64:67:f5:c7:65:34:a4:
                    08:45:d4:2c:44:3c:0b:b3:33:92:33:d1:a1:cb:6b:
                    5c:45:d8:e2:02:2b:b4:fa:bd:6f:cc:ba:24:c2:1d:
                    7e:73:33:b1:e6:db:04:76:c5:16:30:f3:c7:c4:6c:
                    cb:c3:8b:e7:4c:19:4c:e7:fd:67:8f:4b:79:8f:53:
                    02:9c:ac:75:55:81:7d:96:7a:fa:3f:b0:b8:0c:96:
                    3c:9b:74:97:bc:3c:5c:68:a3:cc:af:9c:1c:22:79:
                    3f:6a:70:8b:4b:7f:5c:1f:25:bb:e4:d8:47:c7:49:
                    f0:ed:7f:26:4d:35:17:69:bc:e3:68:a1:f5:34:cf:
                    66:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4B:3A:86:5B:88:23:28:AB:79:81:36:33:9E:05:C9:D1:BB:3C:C9
            X509v3 Authority Key Identifier:
                keyid:6C:83:5B:62:6F:25:2A:97:ED:17:38:86:06:49:F0:C3:B8:56:DC:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/1/6C835B626F252A97ED1738860649F0C3B856DC1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C835B626F252A97ED1738860649F0C3B856DC1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5o1AWvkegwCpfcscRMbKtox1jGWsX3r5CifQeKR2Zs3X/1/3137302e3234352e382e302f32322d3234203d3e20323636353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:49:25:ec:81:22:9a:e6:c1:70:3d:c4:43:3a:54:c9:21:53:
         cd:97:15:48:04:31:65:bf:4e:df:53:64:a7:4f:b5:c9:e2:e6:
         04:7a:8f:2b:70:f5:d2:f5:8d:7b:12:2c:e2:26:f2:f5:5e:06:
         14:a7:2a:28:44:6b:6c:c0:cb:a0:9c:3d:fb:72:c7:09:c6:0f:
         c3:e7:08:a5:e2:a6:a1:e3:52:e9:a1:01:77:9d:32:49:62:54:
         56:d1:c1:77:a2:f8:0a:a3:e0:3f:e8:63:61:e6:c3:4f:cd:46:
         b4:cd:67:da:0b:de:bf:57:ea:0a:d1:69:c4:fc:6d:db:33:38:
         7c:bd:3f:d5:1b:0e:78:1d:56:fe:81:19:83:91:92:8d:63:12:
         77:96:5c:a5:04:5c:ea:2d:b7:ae:ab:d2:0e:6f:d0:54:98:64:
         b9:3e:74:56:20:ba:c9:ea:a0:9f:82:99:ca:6d:46:c6:10:17:
         3f:01:1f:f7:ca:c7:fe:c6:50:50:a9:a7:a3:ba:ad:df:1e:18:
         84:79:eb:4a:99:48:fb:de:8e:94:4d:86:79:54:0d:b1:08:ef:
         7f:5c:9f:0c:7c:4b:7b:41:18:69:2c:05:66:94:f1:24:13:7c:
         74:e3:23:b7:26:1d:2a:f4:8a:c2:38:46:fc:4d:fe:68:30:7b:
         60:9b:6c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:20:48 2025 by rpki-client