Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130322e302f32332d3233203d3e20323634393637.roa
File:                     3137302e302e3130322e302f32332d3233203d3e20323634393637.roa (raw, json)
Hash identifier:          4V8psZfuIe/WilYU+eVwNOUI8C571r+MCTDeOljHjqA=
Subject key identifier:   5F:38:E5:C7:E4:4C:5F:1B:28:31:F5:00:A8:5F:6E:0C:F8:91:6D:D3
Certificate issuer:       /CN=1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602
Certificate serial:       8EB82F10615DCC6EEF7CFF17A43C4675CE724A
Authority key identifier: 1A:02:54:8E:37:FE:91:D8:F9:1D:08:E9:CC:34:FE:EB:3F:6F:26:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130322e302f32332d3233203d3e20323634393637.roa
Signing time:             Thu 26 Jun 2025 21:02:55 +0000
ROA not before:           Thu 26 Jun 2025 20:57:55 +0000
ROA not after:            Thu 25 Jun 2026 21:02:55 +0000
asID:                     264967
IP address blocks:        170.0.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.crl
                          rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 14:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8e:b8:2f:10:61:5d:cc:6e:ef:7c:ff:17:a4:3c:46:75:ce:72:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602
        Validity
            Not Before: Jun 26 20:57:55 2025 GMT
            Not After : Jun 25 21:02:55 2026 GMT
        Subject: CN=5F38E5C7E44C5F1B2831F500A85F6E0CF8916DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:d4:74:fd:7c:1e:6f:43:4d:16:10:70:41:
                    4e:c6:b3:18:1b:91:eb:51:a5:10:77:4e:43:13:b0:
                    0c:cf:3d:c4:a4:04:af:cc:a1:46:ff:ec:c8:f0:b6:
                    6b:31:0f:90:f2:0d:75:a0:0b:e4:2b:f4:0e:32:f7:
                    e7:54:47:8e:a7:21:e9:d6:82:38:3d:8e:88:77:71:
                    46:a7:d2:85:2c:e7:bf:46:41:b0:dd:a8:ee:98:96:
                    b0:bc:85:ed:b6:f7:aa:5d:22:a3:97:2c:55:d5:bc:
                    2d:2d:ae:d9:f3:c1:e4:35:13:86:60:68:8e:df:cd:
                    91:c3:b9:8b:9c:8a:fe:87:04:7b:20:f8:b3:41:26:
                    6a:b4:b5:cb:14:fe:ae:ad:e6:28:81:35:94:71:e8:
                    bc:0f:6c:21:32:3e:2b:01:f0:d8:b8:14:bd:50:af:
                    dd:f5:8e:c8:80:9a:82:84:f1:4a:a4:17:de:ee:30:
                    78:5f:c7:0e:07:80:6b:d2:3c:ea:ed:89:8b:5d:9c:
                    59:52:37:11:5b:ed:e5:d1:c8:5e:0e:fc:6f:d0:e7:
                    f3:07:7d:eb:9a:92:fe:b3:09:1f:78:98:2d:c2:e0:
                    e2:10:56:f7:d1:c1:9e:09:00:45:92:90:9f:d3:75:
                    36:be:d9:f0:ff:34:4f:93:e4:f9:bf:35:cf:a8:f7:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:38:E5:C7:E4:4C:5F:1B:28:31:F5:00:A8:5F:6E:0C:F8:91:6D:D3
            X509v3 Authority Key Identifier:
                keyid:1A:02:54:8E:37:FE:91:D8:F9:1D:08:E9:CC:34:FE:EB:3F:6F:26:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130322e302f32332d3233203d3e20323634393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:2f:da:a1:53:df:85:ea:ae:d1:39:71:4e:5e:c6:c3:cd:18:
         cd:81:36:dd:83:b9:26:ae:2a:ee:47:ce:29:84:f4:9f:50:dc:
         ab:7c:04:98:c1:94:bf:88:f4:26:2c:d9:d8:0a:fb:ac:bb:1d:
         9b:40:9f:c8:64:aa:f8:a1:3a:d0:2b:77:4b:80:19:7d:2c:f2:
         5a:76:83:9d:c2:97:f3:c2:a1:4a:37:58:a9:94:a0:2b:5a:23:
         5c:38:95:1d:43:90:fa:b0:e8:a6:63:7a:e3:58:9b:40:de:85:
         0c:67:ad:5d:4d:39:2a:24:3c:f9:d0:f6:3a:71:e6:9f:f8:6e:
         f9:c0:9a:6e:c8:cf:bd:d1:11:96:cb:7d:cc:f5:df:0e:b4:20:
         b8:aa:02:18:1c:aa:44:24:61:43:9c:07:89:62:7d:8c:1c:fc:
         78:87:43:73:4a:61:82:66:71:ac:8f:1e:d8:61:d8:4f:fc:c8:
         e5:76:d5:25:bf:54:7a:52:31:28:e5:55:bf:00:d9:0e:d1:cd:
         0e:04:4a:0f:1c:86:8a:91:04:9a:d6:68:8f:43:8a:40:67:35:
         27:96:35:8b:a5:13:fb:56:a0:fa:1f:a4:37:c8:73:4a:b5:c2:
         8c:92:b1:94:42:bc:c9:90:38:3b:de:42:fa:95:ad:7d:60:a4:
         be:a6:75:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 13 01:08:10 2025 by rpki-client