Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa
File:                     3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          2fckDaxQnlH6jlao0Z0cfHrhFrUwEwZ0mmWPz1trWU0=
Subject key identifier:   29:EF:94:24:03:EA:53:3F:AE:DC:50:2F:FC:41:74:5C:6C:15:C4:51
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       759ABA25F7510B15CF9DF439A91F7051D504667D
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa
Signing time:             Sat 02 Aug 2025 12:58:21 +0000
ROA not before:           Sat 02 Aug 2025 12:53:21 +0000
ROA not after:            Sat 01 Aug 2026 12:58:21 +0000
asID:                     28201
IP address blocks:        170.239.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9a:ba:25:f7:51:0b:15:cf:9d:f4:39:a9:1f:70:51:d5:04:66:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:21 2025 GMT
            Not After : Aug  1 12:58:21 2026 GMT
        Subject: CN=29EF942403EA533FAEDC502FFC41745C6C15C451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f4:fb:9b:47:93:8b:ef:5b:dd:11:f6:04:c6:
                    d4:2c:f4:56:b8:de:e9:91:f5:74:a4:f0:71:19:81:
                    51:06:82:07:b4:bc:ca:30:e5:85:b0:c7:12:4b:f1:
                    34:91:83:28:50:8d:bb:2a:3c:67:6c:6e:bd:c0:d2:
                    56:0d:e7:34:17:62:25:a3:2e:38:85:4e:ba:17:a0:
                    c3:35:c3:73:d1:b1:ef:a6:e0:4f:76:ff:a9:f2:7b:
                    7f:72:18:d0:93:5f:02:eb:5d:29:19:59:77:27:e8:
                    56:94:1d:da:91:75:e0:db:8f:cb:11:48:13:6c:aa:
                    f5:6e:71:57:6e:e4:d9:4a:90:42:2c:e3:35:f0:28:
                    27:70:19:ad:93:bc:3b:88:b6:03:9a:da:f0:4d:b8:
                    7d:f5:5d:96:4b:cb:2c:1b:af:e5:27:59:f2:67:f9:
                    1c:8d:6d:31:93:39:ad:ad:90:9e:bf:fe:91:b5:c9:
                    d4:aa:44:24:51:26:74:b0:53:80:d6:b3:2b:c2:f2:
                    85:a3:56:2d:52:32:be:83:ee:a8:00:f5:a3:c3:78:
                    da:0f:8b:12:89:d1:44:56:49:a9:a9:9d:e4:18:af:
                    b2:ca:f4:6e:ad:66:20:1e:6e:c2:91:d4:33:b0:41:
                    f8:29:80:92:5b:c3:9c:9f:d2:9b:18:49:9c:17:72:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EF:94:24:03:EA:53:3F:AE:DC:50:2F:FC:41:74:5C:6C:15:C4:51
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137302e3233392e3139322e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:79:d0:a0:cf:d4:43:b6:62:7c:69:36:b6:7e:02:d6:e3:f1:
         0d:3d:04:50:25:21:7d:56:da:24:53:b7:bb:ee:3f:b5:04:61:
         8c:d3:6c:bc:4f:12:2a:94:93:fe:4e:56:8a:92:ef:59:1e:95:
         aa:99:2e:1f:f1:9f:ff:fb:cf:e5:b2:81:08:83:7b:f2:6c:6a:
         81:06:c7:c1:85:32:54:1a:a8:b5:a3:4b:5c:c8:46:10:17:c0:
         5a:c2:88:2a:59:2a:9a:d8:d2:76:58:ab:b0:1d:10:a1:9c:0f:
         c7:c6:12:46:f2:b8:eb:29:8c:2a:17:b6:8e:ad:de:13:72:48:
         92:84:f0:43:76:c7:86:17:b4:d8:43:99:9f:58:3e:d9:40:56:
         f7:41:f3:ca:b2:a9:2e:9f:9d:a9:88:3b:79:ef:8f:d6:8a:ed:
         19:dc:b1:69:92:3b:0b:92:02:f2:1f:85:df:ad:71:a0:20:6a:
         49:c7:5f:a2:39:5d:4d:4f:23:1b:85:6d:3d:40:fb:48:c4:be:
         6e:64:47:97:50:11:3b:c4:02:23:7a:b6:6d:18:52:e7:dd:a8:
         b2:d7:d1:fd:4d:8a:99:ee:ac:37:f6:5f:a9:4e:97:5f:58:a7:
         f2:71:98:07:76:7e:21:85:88:72:18:b6:42:bc:3d:87:d3:7d:
         19:05:39:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:19:20 2025 by rpki-client