Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa
File:                     3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa (raw, json)
Hash identifier:          ZZ0aEOx4TcH8o+220vcxqYgFc1rDsgd+Cu7TkfMg7do=
Subject key identifier:   03:3A:00:99:60:FF:89:30:B8:2F:4A:DC:7F:EF:64:40:FC:73:A6:D5
Certificate issuer:       /CN=ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6
Certificate serial:       7692DD5A2931A8C1B3F5C59858AE836E0F594294
Authority key identifier: EC:EE:35:93:AC:23:48:2C:BF:6C:5C:A1:02:58:F7:8F:3F:5A:BF:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa
Signing time:             Sat 27 Sep 2025 13:02:11 +0000
ROA not before:           Sat 27 Sep 2025 12:57:11 +0000
ROA not after:            Sat 26 Sep 2026 13:02:11 +0000
asID:                     265224
IP address blocks:        170.239.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.crl
                          rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:92:dd:5a:29:31:a8:c1:b3:f5:c5:98:58:ae:83:6e:0f:59:42:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6
        Validity
            Not Before: Sep 27 12:57:11 2025 GMT
            Not After : Sep 26 13:02:11 2026 GMT
        Subject: CN=033A009960FF8930B82F4ADC7FEF6440FC73A6D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:c2:8c:9a:24:f6:7a:ea:2f:d3:a1:02:c2:
                    29:b9:de:b1:a7:48:0d:45:9f:fa:bd:7a:83:71:2c:
                    06:2d:68:9c:4b:4f:82:d0:ff:ad:68:a1:1e:45:fd:
                    bf:f8:8f:36:51:1e:90:f9:a7:d9:eb:11:ee:cf:35:
                    3c:08:59:fd:63:b9:6e:6f:c6:8b:8e:52:4e:d6:b0:
                    8f:86:18:3a:80:45:97:5a:3a:39:a9:3a:93:85:bc:
                    41:bb:c5:29:0a:92:20:b7:a0:9c:38:65:b6:c9:e5:
                    af:60:4c:38:c4:68:10:b6:ea:6f:b5:64:63:c9:e5:
                    96:fa:07:ab:fd:e8:de:8c:1d:67:95:f4:a7:f2:09:
                    41:39:e2:40:57:80:cf:c0:a8:8a:78:03:15:a9:50:
                    47:cd:1a:40:fc:75:63:91:ed:d9:cf:22:4b:00:83:
                    d5:f0:68:9c:90:b3:61:ac:12:6f:62:c8:f3:ab:37:
                    db:a7:62:17:3f:e4:9d:98:6a:8c:5d:3a:ed:28:62:
                    ca:ae:b9:bb:9d:6d:e0:65:5a:5e:fa:63:f1:e5:e4:
                    68:e5:b4:fe:95:73:06:09:62:70:05:06:87:77:9c:
                    bc:24:6e:97:6a:a7:94:1f:b1:41:97:13:ea:a7:0a:
                    12:6b:37:e0:19:5f:c1:5b:e2:60:cd:fa:e5:04:98:
                    ba:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3A:00:99:60:FF:89:30:B8:2F:4A:DC:7F:EF:64:40:FC:73:A6:D5
            X509v3 Authority Key Identifier:
                keyid:EC:EE:35:93:AC:23:48:2C:BF:6C:5C:A1:02:58:F7:8F:3F:5A:BF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECEE3593AC23482CBF6C5CA10258F78F3F5ABFE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/3137302e3233392e34302e302f32322d3234203d3e20323635323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:60:8d:b7:03:21:75:b1:97:cc:16:11:59:db:f1:6b:32:e5:
         79:9c:05:8c:72:e1:02:b3:36:53:6c:0c:1d:67:9d:b3:5f:c2:
         bf:82:ab:41:0f:8f:a3:a1:bd:06:ca:8a:68:43:97:dc:eb:5a:
         01:80:25:b3:81:e5:70:bc:6d:17:c8:b7:cb:37:33:93:c1:80:
         25:41:95:5d:8c:07:4a:eb:ee:36:46:3f:8f:13:e0:02:f1:87:
         89:0d:e3:2c:01:f3:df:f7:f2:9b:91:5e:55:f8:45:7e:f8:f4:
         ad:be:82:10:a2:7c:8a:59:81:62:c2:0b:a3:6b:64:85:42:4e:
         3a:76:3e:54:90:3f:cf:2d:eb:57:ef:6c:3f:e1:9a:2a:47:d1:
         35:76:eb:7a:ad:da:0a:8a:f6:40:6d:f6:71:a3:5a:ee:f6:02:
         63:0a:46:6b:51:a1:a9:e0:00:6c:f1:9b:24:fc:f8:38:3b:6f:
         40:63:a9:cd:15:e3:89:5f:7d:7f:fe:dc:6c:7f:f2:fc:42:f0:
         51:dc:f6:71:cf:6b:90:b5:98:e5:e7:fd:dd:6a:16:8b:18:2b:
         d0:96:49:ae:f4:ee:dd:f9:9b:8c:ce:07:09:cc:b5:2e:1b:fd:
         b9:e9:82:c2:03:9f:e4:a0:75:9c:05:ad:7e:c9:7d:4b:27:ec:
         b0:94:c0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:35:51 2025 by rpki-client