Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa
File:                     3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa (raw, json)
Hash identifier:          /YCW5eLMmQ0bPZkYu29i0Uy9U6MYPlLM1JqDFnYwIYw=
Subject key identifier:   8F:EA:FF:AB:05:F0:58:52:55:B9:4B:15:F1:3E:8C:EC:94:F4:BF:4A
Certificate issuer:       /CN=1855AAC48B259BBADA08BA3C6D6EA02E1786C76E
Certificate serial:       0A048B70951AFF177A4185749390CD611E68E1EE
Authority key identifier: 18:55:AA:C4:8B:25:9B:BA:DA:08:BA:3C:6D:6E:A0:2E:17:86:C7:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa
Signing time:             Thu 21 Aug 2025 18:43:42 +0000
ROA not before:           Thu 21 Aug 2025 18:38:42 +0000
ROA not after:            Thu 20 Aug 2026 18:43:42 +0000
asID:                     265011
IP address blocks:        170.84.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.crl
                          rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:04:8b:70:95:1a:ff:17:7a:41:85:74:93:90:cd:61:1e:68:e1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1855AAC48B259BBADA08BA3C6D6EA02E1786C76E
        Validity
            Not Before: Aug 21 18:38:42 2025 GMT
            Not After : Aug 20 18:43:42 2026 GMT
        Subject: CN=8FEAFFAB05F0585255B94B15F13E8CEC94F4BF4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:37:95:17:91:c9:51:e5:cc:56:ed:59:8d:e6:
                    8a:54:90:ff:b2:50:c2:7a:67:1c:2c:a1:c3:c8:32:
                    9b:eb:6c:6a:6d:e3:37:5a:de:b1:bc:42:e1:6d:24:
                    40:97:fd:55:f6:ec:8c:fd:e8:b9:a9:0a:52:f0:96:
                    12:cf:0b:69:19:9a:f6:63:a0:20:8d:05:1f:05:f1:
                    c5:29:4b:0c:25:5e:b1:ed:77:96:27:49:d8:65:ea:
                    2b:bf:3d:64:1b:48:73:70:d1:f1:02:65:ef:31:65:
                    be:cb:41:27:82:18:e4:10:4f:b6:5a:bd:6b:96:43:
                    5a:16:3c:5f:7a:38:24:ba:9c:cb:9f:d0:c6:87:71:
                    73:a1:a4:cb:54:fd:17:6a:c7:57:53:57:df:60:07:
                    00:56:eb:98:aa:d4:0c:5f:fb:41:43:b7:4b:62:e6:
                    ed:fe:01:c8:d1:f6:db:32:e7:2c:e7:ba:71:71:21:
                    3e:b7:ec:ee:c6:40:c2:a8:c8:cd:7e:a9:ea:70:35:
                    0e:72:8e:fe:f4:dc:7c:79:cf:88:84:87:4d:cf:4f:
                    30:97:81:ac:ae:50:57:0f:b4:c6:d9:68:d1:6a:ec:
                    f0:91:65:bf:df:b6:3f:ec:05:40:d1:8f:f0:94:e8:
                    b8:51:ce:17:7d:f5:b9:97:a9:51:12:2c:f8:2b:66:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EA:FF:AB:05:F0:58:52:55:B9:4B:15:F1:3E:8C:EC:94:F4:BF:4A
            X509v3 Authority Key Identifier:
                keyid:18:55:AA:C4:8B:25:9B:BA:DA:08:BA:3C:6D:6E:A0:2E:17:86:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/3137302e38342e3134382e302f32322d3234203d3e20323635303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:1a:9b:ee:75:d2:0f:b2:ad:96:60:d6:ef:4c:95:3d:82:f1:
         89:43:0a:b5:36:a6:f4:b3:ca:8d:cc:06:13:75:a0:e7:22:79:
         ff:96:8f:7a:ab:6b:5f:f0:ba:3f:b9:d0:1b:3b:6f:49:5f:19:
         ef:64:7d:a4:91:64:de:7c:14:46:8b:f6:71:b3:bc:29:8f:ad:
         b6:43:dc:9d:e6:31:60:11:bb:75:34:20:41:e3:88:02:31:07:
         42:b8:69:b6:05:c9:dd:00:44:dc:4b:85:f0:9d:e4:f2:c2:fb:
         68:6b:02:27:70:d4:5e:b7:bc:aa:44:0e:ef:0e:c8:9c:ca:f4:
         d7:b0:06:f5:8c:8a:95:5f:41:76:09:38:81:c0:a1:9f:c8:f5:
         a0:32:3a:ba:39:bf:31:28:45:03:6d:d6:53:39:9a:53:c0:a6:
         13:5e:b4:5e:de:a3:d3:99:eb:7b:3c:ff:f9:03:c6:ea:76:1c:
         3a:fe:73:9f:1a:3e:6a:96:69:1f:c7:b7:fe:45:6f:4e:cc:eb:
         05:fe:db:09:e6:a1:f3:fe:b9:5d:a8:f1:23:3a:6b:52:3e:74:
         4c:44:12:44:86:82:9e:e5:53:07:81:17:5c:64:a1:80:9f:a5:
         47:82:ff:f1:5f:db:23:d0:d5:74:d7:c4:f6:b6:3e:9c:00:13:
         1a:4f:86:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:33:57 2025 by rpki-client