Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e38332e3134302e302f32322d3332203d3e203238363439.roa
File:                     3137302e38332e3134302e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          EPwNE9R8V6IY1J0DDxl8ohS+UrO4bcRyHI7yuNDfTOk=
Subject key identifier:   94:B6:36:B1:67:F4:6C:3C:04:24:EF:C8:99:2B:68:80:CF:74:6E:07
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       70F273168AFD4822EF0EA981F352F6058AE764D4
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e38332e3134302e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:31:16 +0000
ROA not before:           Fri 15 Aug 2025 20:26:16 +0000
ROA not after:            Fri 14 Aug 2026 20:31:16 +0000
asID:                     28649
IP address blocks:        170.83.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f2:73:16:8a:fd:48:22:ef:0e:a9:81:f3:52:f6:05:8a:e7:64:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:16 2025 GMT
            Not After : Aug 14 20:31:16 2026 GMT
        Subject: CN=94B636B167F46C3C0424EFC8992B6880CF746E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:2b:a7:66:df:9c:ca:56:07:c5:19:40:e8:
                    bc:89:90:e2:34:da:e8:e3:f0:ab:de:c2:60:33:2a:
                    52:86:9e:89:d8:67:fa:21:d1:8c:61:e4:a8:54:d8:
                    29:0b:4c:9c:3c:f8:4e:c4:04:39:33:06:1e:b5:bc:
                    46:af:12:62:8d:7d:1c:2a:29:fb:e9:45:da:19:81:
                    63:48:54:90:b3:cd:7f:e8:76:8d:92:41:8e:dd:3a:
                    f4:d4:4c:64:86:f0:bb:93:5c:07:b3:87:e5:78:56:
                    23:36:04:cd:27:2e:f3:d4:0a:0a:e0:ea:c5:9d:fe:
                    ec:ca:7a:67:74:38:51:c9:a4:f8:cc:39:4d:91:cb:
                    c4:12:6d:86:43:7c:7a:71:d4:57:e4:5b:8a:81:d2:
                    ef:5f:ff:24:b5:01:51:84:c5:d7:85:de:c0:2a:82:
                    08:fc:2c:14:88:38:91:1b:17:b2:17:34:70:3f:15:
                    0a:e3:62:72:52:1e:cb:9b:9c:b0:10:56:d5:b8:0d:
                    a8:16:80:8a:a1:a5:60:42:c8:99:5c:25:1c:31:6d:
                    c7:24:8e:08:55:bc:52:23:79:86:0d:04:9c:5f:b6:
                    6e:e4:26:77:df:b2:cf:1f:da:c6:3d:98:a8:b3:3c:
                    52:ee:70:48:19:84:a5:ee:b0:62:df:65:04:53:02:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B6:36:B1:67:F4:6C:3C:04:24:EF:C8:99:2B:68:80:CF:74:6E:07
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e38332e3134302e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:a4:25:24:6c:8f:69:65:aa:50:af:41:c1:52:0b:e2:41:10:
         47:c5:5e:a9:10:b4:b1:7e:a4:04:05:15:22:4a:48:d1:b1:39:
         c5:14:be:8a:cc:13:6a:f2:77:a1:5a:92:c6:57:5b:bd:67:80:
         a8:65:2d:83:2b:6b:65:c3:2a:3a:67:4b:68:80:16:4e:d3:5c:
         e0:ab:ba:60:68:0c:90:46:95:b9:3b:87:ff:94:d9:04:31:27:
         52:52:0e:8d:12:ca:8d:6b:a7:d1:72:a1:19:ef:b9:0f:87:8c:
         73:ec:6f:96:46:d9:71:da:ed:1c:1c:d3:a0:a7:a1:d2:b7:72:
         be:42:71:19:2c:d0:bd:41:c7:ec:b2:7c:2c:19:8b:cc:40:43:
         7b:a9:bf:ca:12:8c:2c:d9:b0:ed:31:90:5d:d2:23:9d:70:e8:
         e3:4d:9d:ee:bf:d1:ef:c2:67:15:18:36:94:17:bd:2b:51:49:
         dd:c7:da:58:89:44:86:9c:cb:83:d6:0c:4c:c4:10:8c:36:95:
         9e:8b:5d:b6:ae:ee:b0:cf:9f:f0:44:32:8f:71:a4:12:c5:3e:
         29:62:4f:e3:b5:95:f4:df:75:ef:dd:da:68:bd:0f:33:0b:c1:
         6c:21:5e:08:06:1c:1a:83:05:cc:1d:76:4e:26:3a:43:55:9b:
         2d:e2:9c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:28 2025 by rpki-client