Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3137302e302e3135342e302f32332d3234203d3e20323634303133.roa
File:                     3137302e302e3135342e302f32332d3234203d3e20323634303133.roa (raw, json)
Hash identifier:          6dvG9ZHSO2jO9Toj1Oe4A0BAg4mZwD0Wm4UtOIQtFUo=
Subject key identifier:   99:0D:A0:7B:A8:25:D7:10:D6:AE:B6:EC:FB:79:A5:ED:B3:98:FE:EB
Certificate issuer:       /CN=7FE47B22E1D00A16DC5F3525694FF71E9831FBEF
Certificate serial:       18D35B91F3DBE60FF5C031937259E82B8AE67A8C
Authority key identifier: 7F:E4:7B:22:E1:D0:0A:16:DC:5F:35:25:69:4F:F7:1E:98:31:FB:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3137302e302e3135342e302f32332d3234203d3e20323634303133.roa
Signing time:             Tue 19 Aug 2025 14:32:55 +0000
ROA not before:           Tue 19 Aug 2025 14:27:55 +0000
ROA not after:            Tue 18 Aug 2026 14:32:55 +0000
asID:                     264013
IP address blocks:        170.0.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.crl
                          rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d3:5b:91:f3:db:e6:0f:f5:c0:31:93:72:59:e8:2b:8a:e6:7a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FE47B22E1D00A16DC5F3525694FF71E9831FBEF
        Validity
            Not Before: Aug 19 14:27:55 2025 GMT
            Not After : Aug 18 14:32:55 2026 GMT
        Subject: CN=990DA07BA825D710D6AEB6ECFB79A5EDB398FEEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:79:7b:f9:d7:f9:d4:4c:4f:ba:24:a6:72:
                    c3:93:c8:05:1e:90:99:9e:0b:a9:ca:41:00:3c:e8:
                    d2:ae:89:45:ed:32:f0:1d:ca:02:37:8c:79:f7:c5:
                    f4:b6:2c:94:ad:ca:fb:87:f6:bd:7d:8b:b7:62:6c:
                    9f:1c:ac:3c:29:fc:70:6b:63:53:4e:dc:0d:a0:7f:
                    64:d0:00:fd:0e:c4:47:62:5e:3a:6e:80:cd:c2:f6:
                    74:53:c2:c4:aa:30:56:63:73:b0:1b:d0:db:0f:31:
                    f3:ad:7d:ad:45:3c:3c:92:fc:2c:bf:5a:05:10:72:
                    d7:59:bf:ec:d0:41:29:bf:af:79:3c:8f:e7:a3:b2:
                    08:08:81:45:4f:70:5f:c0:e7:d6:df:d6:69:9e:d2:
                    3c:19:d2:98:2c:c0:07:9a:f6:35:16:eb:84:cc:7a:
                    01:73:56:1b:d1:91:50:d2:c3:b8:77:0d:a4:c9:bb:
                    6a:1b:37:89:a6:04:6a:b4:ab:01:1d:89:a6:00:06:
                    36:1f:07:90:2a:c5:d3:d0:c1:8d:8b:43:1d:2e:18:
                    5f:60:8a:d8:76:07:4e:42:31:bb:2d:76:8a:53:83:
                    cb:47:14:63:26:f5:96:e2:89:2f:7b:aa:ea:f3:37:
                    35:aa:59:76:17:f2:54:68:50:a4:9d:2c:53:7e:67:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0D:A0:7B:A8:25:D7:10:D6:AE:B6:EC:FB:79:A5:ED:B3:98:FE:EB
            X509v3 Authority Key Identifier:
                keyid:7F:E4:7B:22:E1:D0:0A:16:DC:5F:35:25:69:4F:F7:1E:98:31:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3137302e302e3135342e302f32332d3234203d3e20323634303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:03:76:26:ae:79:05:26:8a:bd:df:fc:fd:9c:b8:f8:00:68:
         b4:4e:05:41:f7:3c:4c:35:f3:ea:e8:6f:cb:2c:99:c1:ba:64:
         c9:49:3a:26:6c:b7:17:55:ac:a5:92:9b:09:55:c8:5c:5b:a6:
         0b:c2:5d:0f:f9:fd:c3:2b:80:11:5d:33:40:65:e9:9e:5f:9a:
         23:a3:7c:f4:3b:62:69:a6:38:82:f6:b4:65:4f:1f:3a:09:7f:
         6e:77:4b:af:53:46:18:9a:15:4c:f4:5d:84:c7:2b:0b:b1:ac:
         d4:5e:38:45:eb:e6:28:20:7a:98:90:fc:98:7d:46:13:30:6b:
         73:7a:4f:34:db:2b:a0:68:e8:d6:e7:d3:4a:ec:aa:5a:03:55:
         96:7e:d5:00:75:ce:ba:da:d8:a9:76:fd:3e:0f:b3:37:9e:5d:
         10:eb:d0:d3:cf:cc:cf:a2:aa:4d:6c:e7:32:76:54:cc:9b:1e:
         49:17:30:82:2b:b0:e5:7d:2b:25:10:35:97:60:77:9b:04:1e:
         0b:f9:2a:8e:d5:50:2f:7c:c6:b0:b1:c3:9a:1c:38:92:e0:34:
         a5:69:f5:36:ca:30:d8:d2:9c:03:a3:cc:cf:e4:d4:13:78:da:
         fe:0c:c8:de:71:94:26:9d:82:c6:26:c1:39:c3:eb:a7:b8:38:
         95:33:f2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:11 2025 by rpki-client