Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231322e302f32342d3234203d3e20323639303338.roa
File:                     3137302e3234352e3231322e302f32342d3234203d3e20323639303338.roa (raw, json)
Hash identifier:          7bTBe6foerlbnPVzgJxjUa2qnSpUp7+GG0Ii7SlUjlM=
Subject key identifier:   B9:CE:3A:D2:5F:28:C3:1B:22:5F:F6:15:06:77:E2:33:B5:4E:AC:C7
Certificate issuer:       /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial:       155830B8B0CC929A67A6EFF90CD1A6D00FF8A247
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231322e302f32342d3234203d3e20323639303338.roa
Signing time:             Fri 22 Aug 2025 13:50:24 +0000
ROA not before:           Fri 22 Aug 2025 13:45:24 +0000
ROA not after:            Fri 21 Aug 2026 13:50:24 +0000
asID:                     269038
IP address blocks:        170.245.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
                          rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:58:30:b8:b0:cc:92:9a:67:a6:ef:f9:0c:d1:a6:d0:0f:f8:a2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
        Validity
            Not Before: Aug 22 13:45:24 2025 GMT
            Not After : Aug 21 13:50:24 2026 GMT
        Subject: CN=B9CE3AD25F28C31B225FF6150677E233B54EACC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:74:27:6b:d0:a3:9d:66:10:92:3d:2c:01:
                    02:76:58:d8:1e:7a:32:07:bd:8c:af:56:ff:ab:f4:
                    5b:d3:57:10:3b:5f:8f:e4:e7:42:33:f0:20:a0:3b:
                    5a:66:62:9d:b1:3e:fe:ec:db:27:28:37:96:d9:36:
                    b5:b7:d0:18:69:20:f2:9d:4b:60:b0:f0:9f:84:ab:
                    1a:ec:5d:3c:5c:ab:ca:db:00:0a:73:3e:2d:31:85:
                    f5:9d:ab:11:2a:07:3e:1c:c1:9d:22:8f:10:2c:c0:
                    12:0f:fc:b2:18:4e:bd:cf:e5:0d:6d:eb:71:68:b8:
                    86:f8:13:59:55:ba:21:8c:32:ea:0f:b2:bf:4c:63:
                    51:c1:a3:aa:60:87:d7:42:a3:a4:c2:e5:41:e5:cd:
                    52:6f:0b:00:ea:de:71:75:d3:af:73:3d:aa:51:67:
                    96:43:1d:65:f3:29:6d:57:ab:88:2d:db:73:82:56:
                    32:b7:11:7a:f9:15:a6:96:41:a7:33:66:e7:4f:cc:
                    08:12:0d:0c:3d:52:56:7f:e6:c7:62:08:7c:d3:28:
                    ba:00:a1:c6:c9:68:80:df:f1:31:28:0b:9f:28:0b:
                    02:d8:99:9a:c0:7d:6d:63:96:e5:0e:5e:2b:30:6d:
                    9d:18:4b:05:02:d7:7b:10:d4:9a:c4:23:4d:f9:6d:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CE:3A:D2:5F:28:C3:1B:22:5F:F6:15:06:77:E2:33:B5:4E:AC:C7
            X509v3 Authority Key Identifier:
                keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231322e302f32342d3234203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:c9:b9:fc:35:c8:11:8f:92:95:90:a4:71:93:04:40:8d:cc:
         88:fc:a5:d5:db:1f:32:9c:49:61:be:08:ae:24:23:84:9d:16:
         ca:e6:e5:3d:a2:4b:d9:88:64:d9:17:96:61:23:b5:6c:46:cb:
         74:8c:ae:c3:cf:d6:1f:ff:9a:eb:a2:45:6e:73:00:94:7f:05:
         d2:a9:43:e8:44:c8:0b:8c:2e:52:36:bf:94:0f:e2:db:75:b9:
         1f:f0:c8:29:72:12:28:f9:03:83:b9:d3:94:f6:01:f8:e7:9d:
         a0:1e:a3:2e:1a:82:27:e3:c6:59:f5:3d:0b:af:9a:74:60:db:
         e3:2b:6b:ee:a2:42:94:e9:82:70:ab:7b:09:0f:32:6a:3a:ec:
         7a:8f:d0:b3:3c:11:49:10:e5:a5:98:52:c4:af:29:b7:76:a7:
         db:eb:08:c0:68:f0:7f:29:61:eb:36:5c:75:da:0d:1b:37:40:
         62:ff:3a:e8:7c:64:52:41:b4:4e:74:83:0d:ec:87:6b:6f:fc:
         ee:74:61:b0:b5:34:9f:9f:8e:97:99:3e:cf:1e:fa:15:62:f1:
         79:8b:4a:11:ba:fe:62:c5:54:18:15:e9:ae:a5:16:46:5a:27:
         0a:9b:d9:ca:7e:c2:37:eb:42:6b:45:d2:33:e4:75:38:15:34:
         ac:4b:72:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:16 2025 by rpki-client