Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3137302e3234372e3234342e302f32322d3234203d3e20323632333639.roa
File:                     3137302e3234372e3234342e302f32322d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          AePOPCBOMcIPxUe3ICVe2wKhADVjryejvfYzhOn+4TA=
Subject key identifier:   C5:56:C6:6A:95:FE:6C:BA:22:3E:7E:AA:0D:28:1C:E7:CA:55:38:30
Certificate issuer:       /CN=CF46A132348143E7B60D54AC599BE74868B00829
Certificate serial:       62C37C707C87D5A2ED22A57C2429D2FB0F64FF96
Authority key identifier: CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3137302e3234372e3234342e302f32322d3234203d3e20323632333639.roa
Signing time:             Tue 14 Oct 2025 19:00:00 +0000
ROA not before:           Tue 14 Oct 2025 18:55:00 +0000
ROA not after:            Tue 13 Oct 2026 19:00:00 +0000
asID:                     262369
IP address blocks:        170.247.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c3:7c:70:7c:87:d5:a2:ed:22:a5:7c:24:29:d2:fb:0f:64:ff:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF46A132348143E7B60D54AC599BE74868B00829
        Validity
            Not Before: Oct 14 18:55:00 2025 GMT
            Not After : Oct 13 19:00:00 2026 GMT
        Subject: CN=C556C66A95FE6CBA223E7EAA0D281CE7CA553830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:1d:bd:39:d4:68:21:0b:0c:b5:c0:ac:48:
                    c2:9a:a4:52:28:af:c1:5e:5a:cb:c0:c8:12:e9:08:
                    5b:a3:36:36:98:1a:da:b7:8c:39:3e:b8:5e:59:cb:
                    90:7f:10:a9:de:a5:19:0e:88:65:89:56:ab:c5:c1:
                    80:eb:11:91:43:0e:6e:af:87:88:d3:1e:3b:85:26:
                    5f:a7:a5:24:c2:a8:4e:3d:1b:e1:61:8d:80:cf:c1:
                    00:91:d7:79:14:1b:3d:fa:0c:f2:93:a8:dd:85:f3:
                    75:1d:96:66:56:a0:1e:64:3b:3a:d0:52:bd:46:aa:
                    93:f3:82:66:01:2e:86:0d:28:e1:33:49:d2:99:a6:
                    c8:40:0b:52:99:cc:4c:03:01:49:e1:2a:a5:6b:b7:
                    46:cb:ae:c3:df:5b:83:2d:e3:3c:19:b0:b2:8f:bb:
                    e3:26:62:1c:b4:4a:42:c7:44:d6:bf:33:07:7c:14:
                    a0:96:e5:1d:1b:d1:af:0e:77:0c:32:6c:b4:5d:44:
                    5e:4c:7d:cc:d9:ab:e5:32:42:95:0e:22:66:5b:f9:
                    07:e0:cc:13:8b:1f:48:11:d6:5b:fb:64:c2:4e:7d:
                    98:8b:89:86:45:78:e4:c8:08:47:c3:83:c5:33:74:
                    f6:8b:54:58:57:9f:d1:14:88:56:55:94:57:d5:86:
                    5f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:56:C6:6A:95:FE:6C:BA:22:3E:7E:AA:0D:28:1C:E7:CA:55:38:30
            X509v3 Authority Key Identifier:
                keyid:CF:46:A1:32:34:81:43:E7:B6:0D:54:AC:59:9B:E7:48:68:B0:08:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/CF46A132348143E7B60D54AC599BE74868B00829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF46A132348143E7B60D54AC599BE74868B00829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/1/3137302e3234372e3234342e302f32322d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:cc:a9:6c:a2:70:0b:86:cd:e2:2e:e0:c5:22:61:12:40:fc:
         da:88:df:a4:dc:65:6a:66:a8:67:d9:0d:62:79:0b:25:47:04:
         8a:8f:0f:7d:5b:f0:69:0d:5a:9e:87:cc:1e:28:74:f7:48:39:
         04:bb:f4:66:1e:fe:a2:1f:0e:e2:d9:a8:76:71:8d:ce:de:51:
         0d:6f:47:cf:12:04:4d:80:bf:59:dc:64:5f:5a:fa:57:5d:4a:
         31:01:c3:05:c6:43:69:c2:06:fd:ac:2f:18:8e:8f:24:23:01:
         c3:8c:12:cb:88:c5:90:cd:a4:fc:a6:f5:2f:a1:59:e6:c5:3e:
         77:dc:fc:e4:c6:7f:1f:28:8c:58:64:ec:44:79:2a:b9:64:62:
         67:e6:16:c0:c4:5a:b7:aa:0d:2e:f7:1a:4f:17:87:92:4b:0e:
         8e:e9:a0:87:8f:cd:d0:38:d8:92:e2:f9:1e:8a:90:e0:dc:e8:
         6b:66:2b:5f:30:31:54:a0:ac:b1:63:f2:a6:88:a2:63:2b:7e:
         77:48:83:96:28:52:e1:a4:d2:20:d7:ad:83:fc:55:cd:92:1e:
         dd:d5:2c:8b:cc:98:11:92:83:67:95:a3:c1:89:22:c8:30:f9:
         94:02:60:27:bb:62:e8:da:cf:1f:a1:f1:98:51:57:cb:b6:27:
         1f:ad:72:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:54:52 2025 by rpki-client