Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3332203d3e203631373932.roa
File:                     3137302e3234372e3233362e302f32322d3332203d3e203631373932.roa (raw, json)
Hash identifier:          w1nXfbLdhuX8M0Q8I1zwHqEoyw3CP8Fwj2XIDxj4OMM=
Subject key identifier:   F6:C3:96:83:58:5D:A6:F3:4D:C2:7A:09:8C:A9:67:8D:5C:12:C2:64
Certificate issuer:       /CN=83F0276570C6F4420470E10FE5542F0F878F7D89
Certificate serial:       6CA21FDCCEF022565AF630A334CAB9C35429465D
Authority key identifier: 83:F0:27:65:70:C6:F4:42:04:70:E1:0F:E5:54:2F:0F:87:8F:7D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3332203d3e203631373932.roa
Signing time:             Thu 09 Oct 2025 14:32:41 +0000
ROA not before:           Thu 09 Oct 2025 14:27:41 +0000
ROA not after:            Thu 08 Oct 2026 14:32:41 +0000
asID:                     61792
IP address blocks:        170.247.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/83F0276570C6F4420470E10FE5542F0F878F7D89.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/83F0276570C6F4420470E10FE5542F0F878F7D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a2:1f:dc:ce:f0:22:56:5a:f6:30:a3:34:ca:b9:c3:54:29:46:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F0276570C6F4420470E10FE5542F0F878F7D89
        Validity
            Not Before: Oct  9 14:27:41 2025 GMT
            Not After : Oct  8 14:32:41 2026 GMT
        Subject: CN=F6C39683585DA6F34DC27A098CA9678D5C12C264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fb:f5:06:79:5b:f0:42:83:f2:e2:2e:73:4b:
                    b5:38:07:bd:cd:c3:6f:ec:66:ce:18:10:e0:c2:20:
                    14:9f:7a:3a:02:b7:ca:9e:14:6d:fb:b8:b2:fc:47:
                    c0:1d:c4:80:e0:05:ab:d6:c7:49:87:9c:7b:e2:15:
                    a4:40:9d:9d:d1:5f:3e:a6:b9:de:79:20:a9:07:3d:
                    d2:b4:a4:fb:a3:78:38:4a:c3:30:5b:41:8c:5c:65:
                    90:cf:12:2d:b4:28:fc:2d:9a:36:19:41:6a:03:1e:
                    a6:c8:5d:8d:8f:af:d8:58:6e:8c:b1:be:e7:04:c1:
                    dc:53:9d:09:b4:49:cb:3f:05:6c:b8:f8:1c:ba:1c:
                    b6:74:1f:a1:74:bf:62:cf:70:6a:59:f4:e9:4f:19:
                    f7:03:dd:81:2a:cc:e5:02:59:5c:78:12:a3:a1:da:
                    43:6f:60:19:92:b0:2f:ee:96:a4:78:3c:74:f9:48:
                    86:f9:42:90:fc:60:cb:11:a7:25:a8:ae:d4:f1:de:
                    ef:ea:fa:6f:97:cd:90:d6:21:01:ae:c6:7d:60:20:
                    d0:52:c1:34:42:06:5a:3d:0e:bf:a6:5e:00:f9:48:
                    3d:30:24:c9:fb:0a:c3:22:15:42:e8:7d:14:07:bb:
                    bb:a7:8c:45:91:8d:06:9a:16:99:48:2d:9f:f1:8c:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C3:96:83:58:5D:A6:F3:4D:C2:7A:09:8C:A9:67:8D:5C:12:C2:64
            X509v3 Authority Key Identifier:
                keyid:83:F0:27:65:70:C6:F4:42:04:70:E1:0F:E5:54:2F:0F:87:8F:7D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/83F0276570C6F4420470E10FE5542F0F878F7D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3332203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:4a:ff:4d:3f:2f:ce:62:b5:20:18:d2:ab:7f:0c:dc:4c:39:
         7b:2b:28:e2:a2:bf:e8:71:7f:54:d7:28:7a:e5:49:68:e0:15:
         8f:e3:97:e3:63:2a:08:b8:e6:23:fd:ad:86:bf:62:76:5c:53:
         15:54:a7:98:6a:b1:e6:bb:52:3b:40:1a:bf:f9:51:b7:b6:d8:
         c6:5f:d4:92:22:bf:25:08:13:11:83:c5:fa:5d:cc:34:dd:7d:
         98:5d:81:18:0f:d2:a1:4b:d1:32:e1:a6:d3:61:32:7c:bd:ee:
         04:35:3a:d0:42:e1:a1:19:2b:42:ad:3b:8a:e4:d2:27:e9:ed:
         d8:61:07:40:db:c5:ea:ae:40:ff:e5:ce:62:bb:c3:e1:89:ae:
         f8:e8:ca:a1:f0:1b:f9:ca:40:17:87:f0:e2:aa:2b:9a:0b:99:
         2e:60:e7:7f:20:e7:30:17:8f:b0:69:38:49:87:51:7d:d1:28:
         b1:10:53:d6:f3:ff:c1:5b:e2:63:0f:fd:bc:8f:dc:3c:11:9f:
         98:34:79:29:ee:6b:37:38:eb:94:93:e9:ca:9f:f3:ae:3e:73:
         81:68:88:b6:3c:52:74:01:f8:ff:61:59:60:ab:6c:9b:a2:21:
         30:ba:f3:6f:db:b1:13:db:a4:fd:90:6d:cd:22:ca:06:49:31:
         a8:75:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 13:29:49 2025 by rpki-client