Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e302e32342e302f32322d3332203d3e20323634303031.roa
File:                     3137302e302e32342e302f32322d3332203d3e20323634303031.roa (raw, json)
Hash identifier:          RHfWehu0Sg0c1vzAru84SBiBsfMYvWQJKUSXpGXroA8=
Subject key identifier:   51:2A:9F:C6:DB:27:89:B9:BC:EB:4B:37:43:0D:79:0B:68:D5:B5:8B
Certificate issuer:       /CN=847841B2315E0F72742EF9258D692AD085C734A9
Certificate serial:       7EE2D755445859A659FB785A19FEDDDBF940387C
Authority key identifier: 84:78:41:B2:31:5E:0F:72:74:2E:F9:25:8D:69:2A:D0:85:C7:34:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/847841B2315E0F72742EF9258D692AD085C734A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e302e32342e302f32322d3332203d3e20323634303031.roa
Signing time:             Wed 08 Oct 2025 13:49:19 +0000
ROA not before:           Wed 08 Oct 2025 13:44:19 +0000
ROA not after:            Wed 07 Oct 2026 13:49:19 +0000
asID:                     264001
IP address blocks:        170.0.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/847841B2315E0F72742EF9258D692AD085C734A9.crl
                          rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/847841B2315E0F72742EF9258D692AD085C734A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/847841B2315E0F72742EF9258D692AD085C734A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e2:d7:55:44:58:59:a6:59:fb:78:5a:19:fe:dd:db:f9:40:38:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847841B2315E0F72742EF9258D692AD085C734A9
        Validity
            Not Before: Oct  8 13:44:19 2025 GMT
            Not After : Oct  7 13:49:19 2026 GMT
        Subject: CN=512A9FC6DB2789B9BCEB4B37430D790B68D5B58B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:8d:de:cf:3e:65:6d:1a:2b:81:df:0d:ff:
                    e1:a3:42:2a:d3:e0:89:a1:fe:62:c4:f2:15:b9:d4:
                    58:d4:98:9d:18:30:1b:50:30:e4:34:4b:a1:47:17:
                    91:92:40:58:58:72:ed:69:a9:0d:34:4d:75:56:7e:
                    2b:f2:55:58:d4:96:00:ac:82:6c:98:17:7d:01:fc:
                    ad:37:0e:23:3a:0d:58:0a:22:06:11:23:18:3f:07:
                    95:f8:cc:9d:75:d6:b8:30:cb:6b:f2:d4:3b:9e:c6:
                    b3:d2:1b:8a:51:86:ff:e1:5f:67:3b:0e:34:56:0c:
                    7a:3b:d5:ec:18:b6:74:34:b5:47:3e:4c:8f:96:38:
                    c3:c6:6c:45:c4:07:e8:e4:93:02:f1:f9:4d:bc:00:
                    b5:27:22:3b:9e:7f:96:fe:50:86:8a:f5:28:9d:1d:
                    3d:bd:05:ba:76:c1:1c:ae:32:76:9b:71:ed:43:15:
                    da:5b:72:24:58:d2:ab:42:9d:ab:0e:33:36:19:4b:
                    46:92:f3:f6:2f:7f:f7:d8:03:ac:f0:08:b0:22:ae:
                    7a:76:3d:04:23:7d:b9:2b:de:96:ea:68:e0:ec:39:
                    5a:8a:fd:0a:01:1e:a1:e4:f2:d2:da:e0:0a:d4:bc:
                    87:0c:65:71:48:c1:91:5f:e3:23:e3:55:b7:50:8c:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2A:9F:C6:DB:27:89:B9:BC:EB:4B:37:43:0D:79:0B:68:D5:B5:8B
            X509v3 Authority Key Identifier:
                keyid:84:78:41:B2:31:5E:0F:72:74:2E:F9:25:8D:69:2A:D0:85:C7:34:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/847841B2315E0F72742EF9258D692AD085C734A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/847841B2315E0F72742EF9258D692AD085C734A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3137302e302e32342e302f32322d3332203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:fa:41:57:69:91:07:97:ab:d3:80:ac:f0:a6:b5:3e:eb:3d:
         15:7c:c9:a5:1c:ca:77:16:4b:a8:be:66:d4:d2:cf:70:47:1f:
         72:c1:e8:e9:c4:9c:3e:91:c3:f6:00:06:f1:7b:e9:53:06:6d:
         9b:f7:a9:2e:7d:62:e8:83:36:94:1e:a4:49:24:16:e5:31:61:
         d2:54:3a:3f:b4:99:fe:2f:20:b6:cb:d3:6d:c9:89:8d:04:a6:
         69:53:95:ef:f9:f3:4a:29:42:3e:af:ee:4b:72:e0:a6:2d:c4:
         67:ff:cc:7e:c3:fb:2a:33:21:2f:94:c6:d7:86:fa:b7:6f:e2:
         8c:c3:4f:7f:0b:a5:fe:bc:2e:5b:e8:bd:71:14:80:38:3b:5b:
         a2:b2:83:84:6e:6c:44:c4:34:8e:6d:9a:e8:e5:ac:4f:65:e2:
         3b:2f:12:10:f4:b7:80:d3:27:ef:5f:07:4d:1d:28:27:bc:de:
         be:e2:25:41:e1:06:b3:95:48:9e:9d:a5:d3:6f:ed:6e:d7:45:
         e4:63:58:92:7a:08:2b:b1:3a:c9:2b:8c:52:d1:3a:7d:b5:9f:
         a8:5b:ad:10:dc:d3:8d:58:96:15:30:e5:f4:64:d3:e3:75:98:
         89:5b:67:be:1a:fe:4f:88:88:72:51:21:d0:7b:35:ed:62:6b:
         82:d3:53:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:33:10 2025 by rpki-client