Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/3137302e38332e3138382e302f32322d3332203d3e203533303635.roa
File:                     3137302e38332e3138382e302f32322d3332203d3e203533303635.roa (raw, json)
Hash identifier:          rdsbpqjt7rv6LTsl6h1BK8yLs1t8tYPL6i0q0nnfiI4=
Subject key identifier:   F6:19:BE:AE:73:2A:C4:FB:F8:87:1A:B2:4F:C1:72:73:CC:32:A1:44
Certificate issuer:       /CN=4C774192AB5886D743BDEAE813B49508256649E8
Certificate serial:       5713AA02E0BEF36F7E077F45C10892D5CC1E73DE
Authority key identifier: 4C:77:41:92:AB:58:86:D7:43:BD:EA:E8:13:B4:95:08:25:66:49:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/3137302e38332e3138382e302f32322d3332203d3e203533303635.roa
Signing time:             Wed 01 Oct 2025 20:27:30 +0000
ROA not before:           Wed 01 Oct 2025 20:22:30 +0000
ROA not after:            Wed 30 Sep 2026 20:27:30 +0000
asID:                     53065
IP address blocks:        170.83.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.crl
                          rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:13:aa:02:e0:be:f3:6f:7e:07:7f:45:c1:08:92:d5:cc:1e:73:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C774192AB5886D743BDEAE813B49508256649E8
        Validity
            Not Before: Oct  1 20:22:30 2025 GMT
            Not After : Sep 30 20:27:30 2026 GMT
        Subject: CN=F619BEAE732AC4FBF8871AB24FC17273CC32A144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e3:4a:b0:0d:0e:bd:2b:b6:b3:f2:c2:a4:38:
                    d3:38:4c:1c:15:ed:cb:2e:da:ba:6a:8e:48:ae:66:
                    78:cb:4c:24:b5:28:9d:3e:1e:0b:fd:16:a2:56:f7:
                    4e:e3:2f:98:0f:04:fe:98:a9:0d:6e:1a:76:9a:26:
                    eb:5a:37:ae:a1:9a:ac:44:3b:17:28:3c:82:c7:ef:
                    70:36:da:99:92:52:b4:be:35:14:72:d0:d5:9e:60:
                    df:27:19:f0:db:81:35:db:40:a0:ce:68:2d:dc:08:
                    2d:eb:c8:ab:00:03:4b:df:db:77:ec:10:06:e9:76:
                    77:83:aa:b0:be:b2:7a:84:ff:35:92:24:41:9e:6e:
                    c8:01:54:7d:c6:5e:58:ed:cd:41:44:28:03:be:6f:
                    c6:3f:04:30:41:61:5e:34:e1:d0:34:cc:8d:b5:7f:
                    4b:90:14:b2:f0:f3:df:89:f9:c2:f9:90:6a:32:1e:
                    fc:6b:b9:06:57:ef:6e:09:b0:02:63:ac:d0:7b:43:
                    75:2d:d4:48:bb:4e:03:a3:34:57:e8:27:df:5f:b1:
                    40:b4:92:f3:b1:6e:4e:7a:10:d0:6a:3b:34:cc:77:
                    3a:0c:2d:b6:be:a9:08:80:64:cb:68:43:98:c4:93:
                    6f:98:1c:5c:fb:92:74:c1:0a:27:3e:fd:bb:cd:d8:
                    7b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:19:BE:AE:73:2A:C4:FB:F8:87:1A:B2:4F:C1:72:73:CC:32:A1:44
            X509v3 Authority Key Identifier:
                keyid:4C:77:41:92:AB:58:86:D7:43:BD:EA:E8:13:B4:95:08:25:66:49:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/3137302e38332e3138382e302f32322d3332203d3e203533303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:ec:ae:7a:95:c9:4b:b5:87:f6:0d:c8:a7:dc:57:44:47:0f:
         a7:5a:78:62:5f:b9:13:81:a4:e1:21:a9:af:5f:8b:9b:0d:e1:
         d3:5f:48:35:1c:aa:59:58:81:a7:6f:fa:7a:52:71:fc:50:83:
         c4:b1:c3:c4:b3:0a:7d:45:ee:1c:16:5e:db:e0:75:32:a7:42:
         8a:35:2f:a2:33:9c:97:70:42:19:3d:00:f8:7b:6a:07:3b:2f:
         3f:70:ec:45:d9:97:12:d6:39:c8:f6:67:e0:ab:f6:58:90:31:
         7e:cc:16:24:3f:48:f1:e1:54:0f:e1:4c:21:de:13:1d:e8:68:
         bb:66:33:ba:9b:77:5e:13:3c:76:0b:44:7a:65:1e:3c:78:18:
         95:11:06:86:35:8b:85:46:76:b2:92:9c:cd:f2:77:3a:5a:75:
         8c:85:52:57:11:01:78:9e:40:72:bc:3a:46:48:61:37:69:9e:
         d3:16:61:ee:8e:22:2f:4e:64:86:13:04:7f:a3:26:c6:c9:52:
         17:97:82:92:b1:87:62:97:56:a0:96:96:2d:46:26:c3:69:fc:
         f9:bf:07:96:a3:a7:3b:d9:16:02:f8:1f:a5:72:36:d2:68:40:
         ba:4c:76:c1:b4:23:2c:ae:4c:14:3e:ec:ab:17:fc:4c:bd:aa:
         79:53:9e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:48 2025 by rpki-client