Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e37392e3230382e302f32322d3332203d3e203238363439.roa
File:                     3137302e37392e3230382e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          8HMWv50SsefCysuv3gHQjPKb0fWu0lf8cixIoMep2Ak=
Subject key identifier:   C3:E8:56:05:9E:2B:DA:65:95:D7:17:B1:0E:0C:49:08:64:8F:26:50
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       4ECD264B27FEB3ED0FDC1C21568317B855C8ECB0
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e37392e3230382e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:31:18 +0000
ROA not before:           Fri 15 Aug 2025 20:26:18 +0000
ROA not after:            Fri 14 Aug 2026 20:31:18 +0000
asID:                     28649
IP address blocks:        170.79.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cd:26:4b:27:fe:b3:ed:0f:dc:1c:21:56:83:17:b8:55:c8:ec:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:18 2025 GMT
            Not After : Aug 14 20:31:18 2026 GMT
        Subject: CN=C3E856059E2BDA6595D717B10E0C4908648F2650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:be:1e:04:86:47:3a:1c:94:b2:2d:39:7a:bd:
                    f5:9f:80:6b:e7:64:45:46:89:01:78:5e:34:d1:26:
                    1d:a7:f1:73:79:a7:90:32:68:a0:84:0a:95:33:fe:
                    78:a3:98:60:cc:84:25:67:b7:a6:52:d1:0e:21:9d:
                    bc:ea:9d:2a:d5:e3:53:33:e3:80:16:7e:15:e2:05:
                    61:85:48:ef:aa:1b:4b:9f:ec:7d:1e:87:42:0f:85:
                    ad:50:ae:f7:ac:d5:05:8c:4a:a6:32:57:59:14:d1:
                    a0:d8:0e:57:34:5b:2d:b0:66:92:bc:59:b6:48:a3:
                    db:e6:5a:ff:e8:67:87:84:50:b6:0b:1e:9e:57:05:
                    a3:84:6a:f4:36:87:f3:3e:cc:e9:a4:46:b8:90:20:
                    a0:85:50:95:ef:b0:22:7d:57:a4:d0:77:5d:8b:57:
                    22:b5:3e:6e:69:4e:af:49:4a:5a:0b:99:54:b8:a1:
                    86:bb:46:8d:9c:d7:49:4d:95:d4:03:89:63:6f:4e:
                    1e:62:bd:46:a5:3c:f2:6a:f9:5f:b4:ad:c5:5b:9f:
                    86:5b:7a:0a:59:75:41:55:59:57:ca:59:ab:31:11:
                    08:67:53:5b:9f:d2:03:c3:7e:fe:a7:7a:6a:45:62:
                    e3:b3:35:6f:c2:ca:5b:2e:d5:07:11:2c:9e:06:0e:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E8:56:05:9E:2B:DA:65:95:D7:17:B1:0E:0C:49:08:64:8F:26:50
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e37392e3230382e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:70:2c:fb:c4:c3:ef:84:29:91:3f:32:d5:27:bd:7e:a2:64:
         b8:ab:55:84:75:ab:1a:4c:92:9c:ba:66:8c:2d:65:be:24:90:
         ca:ea:81:42:44:e6:ac:62:7f:f3:8e:46:4c:28:28:f4:25:b6:
         f1:61:74:a7:3f:4b:15:5a:46:23:34:96:3c:c9:5e:ff:f0:c7:
         1d:fc:68:61:1d:71:f6:73:36:33:53:49:dd:73:4d:79:3e:f4:
         ca:f0:59:5b:af:1e:13:b5:27:e2:65:0b:d4:bb:5d:83:15:66:
         47:38:a7:95:a2:46:1c:92:5c:50:c7:b7:c3:cd:5f:e8:93:f9:
         4f:2a:27:6c:8f:9f:dc:52:04:4e:9c:38:ae:51:d6:15:ad:be:
         e6:61:0f:b2:8e:a7:a2:19:8a:ed:ff:7f:ae:4a:97:4a:7c:34:
         e5:3f:49:88:20:83:8b:01:05:99:77:44:29:17:fc:3d:89:c7:
         3a:b8:53:04:c0:78:b1:96:91:e5:57:b6:9a:07:c4:07:d0:2c:
         e1:34:30:f6:aa:ae:53:27:9b:e9:ac:fc:f9:4e:fb:79:b8:54:
         69:40:99:06:c5:4f:c3:64:a6:04:7a:a3:15:9a:67:df:fa:50:
         fb:7a:fc:d5:a7:73:b2:2e:78:85:e0:d8:6c:87:44:a9:26:52:
         c4:60:0f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:15:54 2025 by rpki-client