Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3232203d3e20323634393637.roa
File:                     3137302e302e3130302e302f32322d3232203d3e20323634393637.roa (raw, json)
Hash identifier:          XgNyGKJzb029rGXXVheHilTaBDkdoAFhEPqAaRpRHyA=
Subject key identifier:   70:BB:5C:48:AC:0F:74:44:B8:DE:96:C6:ED:FD:2A:D0:51:1B:05:31
Certificate issuer:       /CN=1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602
Certificate serial:       33356D726AC6E266EF1C181077D12BBC52B9ADBE
Authority key identifier: 1A:02:54:8E:37:FE:91:D8:F9:1D:08:E9:CC:34:FE:EB:3F:6F:26:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3232203d3e20323634393637.roa
Signing time:             Thu 26 Jun 2025 21:02:56 +0000
ROA not before:           Thu 26 Jun 2025 20:57:56 +0000
ROA not after:            Thu 25 Jun 2026 21:02:56 +0000
asID:                     264967
IP address blocks:        170.0.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.crl
                          rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 14:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:35:6d:72:6a:c6:e2:66:ef:1c:18:10:77:d1:2b:bc:52:b9:ad:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602
        Validity
            Not Before: Jun 26 20:57:56 2025 GMT
            Not After : Jun 25 21:02:56 2026 GMT
        Subject: CN=70BB5C48AC0F7444B8DE96C6EDFD2AD0511B0531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:55:49:e3:f5:78:65:f9:a5:8f:3d:99:48:8b:
                    04:0b:f8:6e:30:dc:36:9e:ab:15:f7:a8:12:55:48:
                    be:88:fb:31:2f:42:0c:55:39:0d:5b:51:2d:c9:48:
                    7f:de:6e:ac:65:13:d7:e4:d6:1b:76:f3:8d:18:7d:
                    de:e5:d0:e4:5c:c9:2f:0e:95:55:c2:7e:52:98:5a:
                    55:78:59:99:ad:f2:3d:22:0b:6d:e8:a8:71:13:c2:
                    54:27:a4:3a:4b:0a:df:76:0a:a7:54:85:c3:84:44:
                    69:26:35:4b:be:06:93:e4:3f:ec:25:87:c1:df:8c:
                    73:76:6b:8e:61:61:78:bb:99:92:b0:70:26:f5:6e:
                    17:a0:92:f4:84:a2:d9:4e:97:df:f9:f0:1d:f7:b8:
                    5b:3a:1a:04:25:66:81:35:98:11:60:7e:6d:cc:94:
                    73:89:b7:5d:d2:82:af:fa:f7:19:98:39:bd:14:94:
                    d9:0b:98:f8:09:00:1b:ba:20:eb:d6:99:c4:2c:a2:
                    50:02:57:64:89:30:83:19:1d:40:0d:11:fe:01:15:
                    7d:a2:68:28:96:f0:28:fa:ad:5c:19:4a:92:2f:c1:
                    82:39:f6:a9:73:4d:e0:ff:25:0e:84:2d:a5:78:59:
                    d1:e3:86:62:e4:bd:e8:83:b4:19:cd:0f:b0:30:47:
                    64:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BB:5C:48:AC:0F:74:44:B8:DE:96:C6:ED:FD:2A:D0:51:1B:05:31
            X509v3 Authority Key Identifier:
                keyid:1A:02:54:8E:37:FE:91:D8:F9:1D:08:E9:CC:34:FE:EB:3F:6F:26:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32322d3232203d3e20323634393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:2c:d2:f8:90:b8:92:b9:31:a2:28:f4:3c:7f:6d:40:5e:72:
         75:75:a2:d3:05:69:ac:de:e5:46:a5:82:98:c0:f6:10:12:4a:
         8b:37:57:40:09:d4:38:36:34:3c:9b:6f:b4:db:19:34:9e:9c:
         39:ef:8e:a3:f6:6a:d4:c2:bb:62:d5:5b:8b:83:4a:91:dd:53:
         5e:2f:2f:25:0d:08:a7:24:58:06:d1:fb:c3:69:54:3d:bd:61:
         f2:62:79:46:f6:f3:e2:99:d6:83:43:94:97:5d:90:f0:05:cb:
         61:3e:b0:49:20:55:5a:d9:2c:38:8c:e2:55:60:08:bd:15:cc:
         dd:5e:0b:cd:05:d1:5a:6e:70:eb:48:0a:13:5d:47:0a:4e:38:
         b6:bb:ae:9e:7b:df:42:55:d5:32:47:60:d3:2a:72:5a:65:3f:
         59:ae:87:34:60:dd:82:8e:b5:2b:49:63:67:78:f9:d6:91:16:
         7b:4c:59:af:74:b5:22:89:ae:09:65:ab:63:0d:6c:d5:b5:1a:
         d1:45:61:1d:f8:ef:c2:08:8b:22:df:41:41:01:b6:4c:08:0f:
         5c:47:7b:cc:af:bb:0f:99:57:c6:47:0d:7e:da:89:80:39:18:
         e3:b4:59:10:b0:82:e7:70:49:ff:84:94:d1:ac:70:67:85:c7:
         03:45:e6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 13 01:06:59 2025 by rpki-client