Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3137302e302f32332d3233203d3e20323636333032.roa
File:                     3137302e37392e3137302e302f32332d3233203d3e20323636333032.roa (raw, json)
Hash identifier:          4GyaIzLOXhA7MURt5NoeuuoFkQqfjasYsl9a+52jfMY=
Subject key identifier:   C1:C2:04:7B:B6:FF:1C:5C:33:42:BF:E4:55:F0:93:BC:0A:E1:87:31
Certificate issuer:       /CN=180D5A022BF9B64C2D3DB9A99B100E4173AF515C
Certificate serial:       0BB69E1980C03CDA7E8F890C08E29317BBF846F8
Authority key identifier: 18:0D:5A:02:2B:F9:B6:4C:2D:3D:B9:A9:9B:10:0E:41:73:AF:51:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3137302e302f32332d3233203d3e20323636333032.roa
Signing time:             Mon 29 Sep 2025 12:18:27 +0000
ROA not before:           Mon 29 Sep 2025 12:13:27 +0000
ROA not after:            Mon 28 Sep 2026 12:18:27 +0000
asID:                     266302
IP address blocks:        170.79.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.crl
                          rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b6:9e:19:80:c0:3c:da:7e:8f:89:0c:08:e2:93:17:bb:f8:46:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=180D5A022BF9B64C2D3DB9A99B100E4173AF515C
        Validity
            Not Before: Sep 29 12:13:27 2025 GMT
            Not After : Sep 28 12:18:27 2026 GMT
        Subject: CN=C1C2047BB6FF1C5C3342BFE455F093BC0AE18731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:dc:5f:53:43:1a:81:1d:16:5d:89:16:93:
                    53:23:9f:37:4c:d3:db:20:f4:e8:83:ec:1f:12:3f:
                    fa:58:3e:47:aa:d8:42:bd:c8:0d:ca:fa:79:d1:28:
                    99:26:11:83:45:b9:a7:e0:2c:3e:39:d7:b6:be:a4:
                    5d:dd:54:3a:2c:ac:02:8d:83:ca:3c:85:77:49:e9:
                    9b:ad:57:f4:52:bf:00:8a:e3:22:e9:b8:93:0d:1d:
                    ce:fb:11:27:34:1d:13:33:04:b4:90:31:ab:ba:3b:
                    a9:1d:63:28:0c:3e:c8:ef:c7:4a:f7:eb:5a:60:18:
                    b5:4c:e4:ee:74:c8:56:a1:e4:64:df:2b:44:8c:d0:
                    fe:15:d5:26:b1:12:9f:60:ce:fb:ff:77:ac:ce:7c:
                    58:50:0f:fe:e4:1f:ad:79:b2:f8:bf:35:c5:0f:a5:
                    dd:45:f6:54:e2:ac:12:a4:22:aa:1c:b9:ba:c6:be:
                    32:0a:09:a1:e2:5e:a0:e5:82:26:cc:75:50:a6:e4:
                    3f:9b:fb:55:55:0c:c3:2c:e9:d0:ff:8b:30:aa:77:
                    e0:5f:ec:2c:80:57:a8:bb:2f:54:67:9b:f9:b4:8c:
                    b1:6c:ca:4e:82:22:4a:db:c0:9c:33:d4:98:62:fa:
                    57:b8:18:3f:bb:93:bc:46:7d:cd:a7:83:38:5b:ff:
                    24:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C2:04:7B:B6:FF:1C:5C:33:42:BF:E4:55:F0:93:BC:0A:E1:87:31
            X509v3 Authority Key Identifier:
                keyid:18:0D:5A:02:2B:F9:B6:4C:2D:3D:B9:A9:9B:10:0E:41:73:AF:51:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3137302e302f32332d3233203d3e20323636333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:44:89:e9:88:4f:2a:55:94:95:40:2e:b3:12:5e:96:0c:91:
         86:0b:c9:5b:7c:e3:32:ae:5a:c1:45:b3:fd:06:b8:20:a1:c0:
         29:0d:72:04:a0:cd:17:45:e5:ec:8b:5a:c9:a5:72:3a:46:ab:
         e6:27:90:25:91:c7:6e:43:9e:2c:02:7b:ed:60:90:ec:a0:a7:
         ed:8b:f7:8c:c2:40:e8:b8:c3:03:a9:e2:b9:c6:55:f1:5c:9f:
         47:60:35:e4:37:e7:b6:19:7c:d4:a7:cd:91:c6:0e:51:5c:a7:
         7c:dc:09:1d:ac:1d:ac:4d:40:ca:f6:04:5f:4c:82:6f:f8:50:
         98:ca:b9:76:6a:70:f8:11:b4:d9:37:d4:44:20:6c:23:45:7b:
         f8:1d:01:65:2b:62:52:09:37:c5:5b:b5:fc:20:f7:d0:1a:0f:
         ca:4a:b2:92:3d:d6:fb:a6:fe:36:ae:a2:38:13:10:76:2f:80:
         8a:bd:57:12:69:dd:94:5c:dc:e3:bb:d4:61:dd:5a:8b:ce:de:
         fa:c8:08:9c:3b:de:63:03:68:72:d8:70:53:9a:4e:a4:b8:78:
         4f:07:9e:48:46:52:85:d4:f4:30:8d:fc:2a:d3:01:4a:79:e1:
         c8:23:f7:5c:f3:46:38:e8:8f:ed:03:9d:5b:8b:46:86:68:a5:
         1f:5a:ce:70
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC7aeGYDAPNp+j4kMCOKTF7v4RvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTgwRDVBMDIyQkY5QjY0QzJEM0RCOUE5OUIxMDBFNDE3
M0FGNTE1QzAeFw0yNTA5MjkxMjEzMjdaFw0yNjA5MjgxMjE4MjdaMDMxMTAvBgNV
BAMTKEMxQzIwNDdCQjZGRjFDNUMzMzQyQkZFNDU1RjA5M0JDMEFFMTg3MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFmNxfU0MagR0WXYkWk1MjnzdM
09sg9OiD7B8SP/pYPkeq2EK9yA3K+nnRKJkmEYNFuafgLD4517a+pF3dVDosrAKN
g8o8hXdJ6ZutV/RSvwCK4yLpuJMNHc77ESc0HRMzBLSQMau6O6kdYygMPsjvx0r3
61pgGLVM5O50yFah5GTfK0SM0P4V1SaxEp9gzvv/d6zOfFhQD/7kH615svi/NcUP
pd1F9lTirBKkIqocubrGvjIKCaHiXqDlgibMdVCm5D+b+1VVDMMs6dD/izCqd+Bf
7CyAV6i7L1Rnm/m0jLFsyk6CIkrbwJwz1Jhi+le4GD+7k7xGfc2ngzhb/yRpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwcIEe7b/HFwzQr/kVfCTvArhhzEwHwYDVR0j
BBgwFoAUGA1aAiv5tkwtPbmpmxAOQXOvUVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlR0ZXQ1R1lhajdZMkpBVFg2MmtDWlROeTdSMm9KcXNNdVVvZVRQU1h5
ZUUvMC8xODBENUEwMjJCRjlCNjRDMkQzREI5QTk5QjEwMEU0MTczQUY1MTVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4MEQ1QTAyMkJGOUI2NEMy
RDNEQjlBOTlCMTAwRTQxNzNBRjUxNUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JUdGV0NUdZYWo3WTJKQVRYNjJrQ1pUTnk3UjJvSnFzTXVVb2VUUFNYeWVFLzAv
MzEzNzMwMmUzNzM5MmUzMTM3MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzYzMzMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGqT6owDQYJKoZIhvcNAQELBQADggEBAJBEiemI
TypVlJVALrMSXpYMkYYLyVt84zKuWsFFs/0GuCChwCkNcgSgzRdF5eyLWsmlcjpG
q+YnkCWRx25DniwCe+1gkOygp+2L94zCQOi4wwOp4rnGVfFcn0dgNeQ357YZfNSn
zZHGDlFcp3zcCR2sHaxNQMr2BF9Mgm/4UJjKuXZqcPgRtNk31EQgbCNFe/gdAWUr
YlIJN8Vbtfwg99AaD8pKspI91vum/jauojgTEHYvgIq9VxJp3ZRc3OO71GHdWovO
3vrICJw73mMDaHLYcFOaTqS4eE8HnkhGUoXU9DCN/CrTAUp54cgj91zzRjjoj+0D
nVuLRoZopR9aznA=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:44 2025 by rpki-client