Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3232203d3e20323635303339.roa
File:                     3137302e3135302e3230342e302f32322d3232203d3e20323635303339.roa (raw, json)
Hash identifier:          9mcMX3ahs5AIs1ezAh9Rsp2/1ypwjCg27jrlMQNVzKI=
Subject key identifier:   C0:F7:F0:16:6D:29:84:84:9C:A5:0A:69:BE:B3:B0:2D:59:E8:EA:B6
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       2DC77CCFA636C860A40F5C6BD21B6B88E9625179
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3232203d3e20323635303339.roa
Signing time:             Thu 09 Oct 2025 21:02:30 +0000
ROA not before:           Thu 09 Oct 2025 20:57:30 +0000
ROA not after:            Thu 08 Oct 2026 21:02:30 +0000
asID:                     265039
IP address blocks:        170.150.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c7:7c:cf:a6:36:c8:60:a4:0f:5c:6b:d2:1b:6b:88:e9:62:51:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Oct  9 20:57:30 2025 GMT
            Not After : Oct  8 21:02:30 2026 GMT
        Subject: CN=C0F7F0166D2984849CA50A69BEB3B02D59E8EAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:ce:86:e5:fb:0b:30:d3:ff:2c:da:0e:1c:
                    3f:a2:38:a9:a1:bc:9e:b0:34:8c:fb:bf:a0:0c:5e:
                    a4:ab:31:4d:3d:0a:6e:48:8d:e0:ee:fc:86:59:cc:
                    4c:ae:e6:d6:52:44:9b:fe:33:f0:c4:b0:2c:d7:d3:
                    5f:7a:b5:80:65:92:42:dc:ba:4e:fe:7f:c2:9e:cd:
                    4e:5b:8e:49:cb:1f:9d:d4:f3:7e:a8:d9:f9:b7:95:
                    5c:3a:08:11:b2:f7:4b:f9:c8:bb:1a:91:2b:ce:25:
                    78:4e:d3:dc:23:d4:00:52:b9:67:07:5c:be:6d:f7:
                    32:6a:19:a6:2c:2c:ab:c9:3e:cb:d2:14:27:bd:a8:
                    f5:27:42:b6:6d:10:e4:4b:0c:96:56:ce:04:fb:52:
                    5b:4d:8e:49:ac:b7:07:e4:07:ed:0e:81:7a:ed:cb:
                    81:17:a5:78:61:d7:51:48:a1:46:3c:49:66:76:04:
                    7c:29:6a:45:ca:3f:30:a5:4b:96:fe:89:b2:bc:fe:
                    a2:83:1a:8d:d5:5c:23:b5:f3:38:50:cb:b4:61:28:
                    f1:a5:87:d6:8b:e3:e9:ae:da:d1:6f:94:cc:e9:13:
                    7a:1f:ed:04:22:db:23:6f:48:8b:aa:6f:87:f5:1c:
                    e8:f8:71:59:be:b9:ea:f4:3b:1d:33:d5:4a:1f:29:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:F0:16:6D:29:84:84:9C:A5:0A:69:BE:B3:B0:2D:59:E8:EA:B6
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3232203d3e20323635303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:da:57:e7:a3:ed:01:34:a7:ca:ae:6b:3e:23:78:10:39:c1:
         04:55:cc:b5:e7:cf:f5:4d:8c:fb:42:c4:a5:10:c7:92:74:f8:
         65:a6:99:8d:36:91:81:4a:2c:69:9c:f4:57:a1:90:00:64:72:
         f0:92:9b:2e:d6:db:63:80:a6:1b:29:4e:32:f6:7d:46:21:cf:
         a7:65:bd:e6:0a:8b:12:a4:18:a5:82:f7:84:c4:8d:6b:92:f3:
         c6:be:cd:b0:84:48:49:f8:cd:af:d4:c6:44:c9:93:8f:91:e3:
         98:9c:77:0e:9a:95:47:e6:35:56:17:14:ff:e5:7a:07:42:7f:
         42:1d:3c:a1:8e:d7:75:ad:83:ff:25:55:b6:ae:f6:8c:c0:aa:
         69:ad:64:34:7f:bf:40:7b:b8:af:51:04:53:f5:5d:a4:73:39:
         97:7b:13:74:83:a5:96:8e:81:fc:47:14:0c:53:85:1b:0f:54:
         d3:08:6e:3d:66:59:82:52:d3:7a:fe:67:3f:0d:8e:30:36:4d:
         18:3f:77:e0:08:6f:a0:3d:f2:f8:d6:61:c6:92:70:3a:17:28:
         8d:fe:66:4e:c6:1f:a6:fe:c2:b1:9a:ee:b6:6a:be:e8:9c:5d:
         3e:65:2d:1a:7f:2f:57:c4:99:dc:b5:7f:92:76:a7:d1:1c:61:
         f9:28:99:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:04:56 2025 by rpki-client