Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa
File:                     3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa (raw, json)
Hash identifier:          UTVJfypfok615iRWk1ayEw/rK8U4eAbDusVkYJUItSA=
Subject key identifier:   CB:09:65:32:16:14:46:EF:FD:70:08:C0:ED:13:2F:A1:94:E1:0F:02
Certificate issuer:       /CN=FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB
Certificate serial:       605B3CB5FFE2FA45B8FD66A031B893535B452A8D
Authority key identifier: FD:CF:6A:6B:F7:DB:13:21:6C:1A:A8:AD:94:05:9A:DD:9B:00:58:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa
Signing time:             Mon 13 Oct 2025 11:45:55 +0000
ROA not before:           Mon 13 Oct 2025 11:40:55 +0000
ROA not after:            Mon 12 Oct 2026 11:45:55 +0000
asID:                     265061
IP address blocks:        170.231.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.crl
                          rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5b:3c:b5:ff:e2:fa:45:b8:fd:66:a0:31:b8:93:53:5b:45:2a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB
        Validity
            Not Before: Oct 13 11:40:55 2025 GMT
            Not After : Oct 12 11:45:55 2026 GMT
        Subject: CN=CB096532161446EFFD7008C0ED132FA194E10F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b5:59:e5:fb:38:c2:6c:81:d0:5b:06:9b:ff:
                    7d:5e:84:02:df:7a:d4:9b:79:90:9c:e8:f1:3f:71:
                    e5:55:85:7e:17:64:c5:b9:cb:ff:4f:af:a2:e0:09:
                    b6:01:d7:70:a8:99:07:46:6f:28:6f:8b:c5:b8:cf:
                    79:16:1d:b9:e8:7d:92:83:d4:74:cb:b6:48:62:ae:
                    fb:51:07:67:28:f8:9a:69:d0:5b:49:e2:2d:36:5b:
                    63:5e:01:fc:c9:ef:63:06:19:c5:b7:d5:b0:38:9a:
                    13:41:d1:42:78:90:0c:f4:99:3b:38:9c:df:ba:87:
                    ac:58:86:0c:ef:1f:a3:84:27:f5:cf:f1:3d:98:57:
                    1e:f4:8a:b8:99:00:33:eb:cf:b2:fd:30:81:43:69:
                    d3:a7:ea:ee:4a:fa:65:27:fb:68:03:f3:ec:cd:bb:
                    87:e6:df:7b:77:e2:3d:f0:5b:89:36:28:f4:d2:dd:
                    82:d8:bb:12:80:78:f5:74:c1:6b:92:80:b5:1a:3f:
                    d1:32:e5:bd:a4:12:28:9b:16:75:cd:28:2f:02:12:
                    54:15:4f:d2:28:b2:d7:de:da:4c:63:81:3a:aa:ff:
                    11:51:3c:c0:16:1b:5a:1f:6f:ad:9b:0c:07:e9:0a:
                    61:9c:8b:4b:68:f0:01:33:c4:46:fd:0c:b0:38:a0:
                    78:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:09:65:32:16:14:46:EF:FD:70:08:C0:ED:13:2F:A1:94:E1:0F:02
            X509v3 Authority Key Identifier:
                keyid:FD:CF:6A:6B:F7:DB:13:21:6C:1A:A8:AD:94:05:9A:DD:9B:00:58:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:e0:ab:a2:c3:8f:e7:57:d7:4d:ea:c0:62:f3:06:e9:5c:70:
         08:00:5e:08:ff:59:82:aa:d1:7b:29:7d:5b:db:9d:54:3a:a3:
         2f:d0:bd:3a:7c:f2:f2:00:3d:fd:03:bd:af:3d:84:21:39:b7:
         89:9b:d7:08:85:80:d7:0a:a3:eb:cb:82:81:ca:84:0d:f2:a7:
         c3:36:f0:6f:41:05:fa:0b:c5:48:d3:d7:33:a7:ce:61:b2:89:
         37:55:9f:57:b3:22:43:8c:a4:05:a7:65:5e:68:a5:2a:dc:44:
         63:6b:95:0c:4d:11:b0:37:75:8d:97:eb:f0:76:36:c8:d8:1e:
         a3:7c:0d:3a:5f:d9:fd:a4:14:e4:e7:ce:bd:af:4d:f0:c9:1f:
         dd:0d:61:d0:47:70:14:e4:3b:22:93:62:de:46:71:00:5c:a4:
         00:bd:63:3c:a2:ca:0f:33:89:6e:e9:bf:54:07:dc:92:3e:c5:
         ed:65:1b:de:74:d7:4c:22:ce:5f:14:43:a2:1c:75:37:2e:ba:
         a8:3e:24:c5:2f:4f:c1:03:00:60:aa:87:46:9f:5b:c7:c0:f9:
         17:51:e7:6d:58:28:8f:f3:6d:41:bd:56:bd:4e:60:88:b2:77:
         8b:79:a4:ac:6f:57:40:4a:35:ea:19:f2:38:12:77:0f:82:29:
         bd:53:0d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:36:57 2025 by rpki-client