Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137302e3233392e3136302e302f32322d3234203d3e20323633343135.roa
File:                     3137302e3233392e3136302e302f32322d3234203d3e20323633343135.roa (raw, json)
Hash identifier:          ykoVxEibwIPxD2trQpAqYgSu7ZuvioEOIQwy66CKjiQ=
Subject key identifier:   FF:E4:E7:7E:C3:37:77:11:48:46:D8:77:D8:E3:30:A3:6D:2E:DA:12
Certificate issuer:       /CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
Certificate serial:       7712774C0A8A734541370E1EEA0B1C7A7ECAF2BB
Authority key identifier: 0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137302e3233392e3136302e302f32322d3234203d3e20323633343135.roa
Signing time:             Thu 18 Sep 2025 18:48:38 +0000
ROA not before:           Thu 18 Sep 2025 18:43:38 +0000
ROA not after:            Thu 17 Sep 2026 18:48:38 +0000
asID:                     263415
IP address blocks:        170.239.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.crl
                          rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:12:77:4c:0a:8a:73:45:41:37:0e:1e:ea:0b:1c:7a:7e:ca:f2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
        Validity
            Not Before: Sep 18 18:43:38 2025 GMT
            Not After : Sep 17 18:48:38 2026 GMT
        Subject: CN=FFE4E77EC33777114846D877D8E330A36D2EDA12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:19:5b:af:21:a2:37:d4:46:4b:45:d2:4d:
                    b8:2f:54:56:09:e2:57:48:fd:3c:0c:6c:19:1a:6e:
                    95:c6:aa:5f:65:37:eb:cb:a9:f3:74:d9:ba:93:9f:
                    31:a2:7c:42:f3:b8:b0:cf:39:c4:bc:aa:a4:01:6a:
                    8b:af:13:31:85:5f:1a:9f:37:d3:92:5c:96:45:c2:
                    6e:d3:6d:a2:ab:13:2c:77:06:a4:8d:b6:6c:65:ef:
                    67:14:3e:fd:c2:d6:31:17:48:1a:9c:8c:a8:b4:a5:
                    55:d3:32:de:11:e0:1d:5a:19:e9:db:a4:c5:7c:92:
                    34:cc:b4:d1:e7:18:ad:ff:75:1e:f6:73:a4:54:4d:
                    7e:fa:80:32:c9:bf:c1:ba:37:ff:96:eb:3a:28:9d:
                    69:7a:3f:3b:a6:0d:36:01:c9:51:3a:22:7b:89:37:
                    6e:9b:1e:46:18:8e:d1:a4:5d:f8:60:66:9e:8f:b4:
                    0a:2b:3b:f4:06:4b:2e:f7:52:07:96:a1:d0:55:05:
                    42:f0:3f:61:55:5b:02:70:36:0d:b3:ca:33:49:4e:
                    d3:b6:ff:6e:97:63:64:c9:e6:0b:dc:14:91:dc:fc:
                    ae:3b:bd:26:72:e9:91:1a:ca:95:98:89:33:11:58:
                    45:66:58:7b:fa:f5:06:d4:02:81:47:c2:a9:a1:66:
                    ab:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E4:E7:7E:C3:37:77:11:48:46:D8:77:D8:E3:30:A3:6D:2E:DA:12
            X509v3 Authority Key Identifier:
                keyid:0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3137302e3233392e3136302e302f32322d3234203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:e0:38:2f:14:48:6c:7c:a2:65:38:4e:93:a2:9c:df:8e:22:
         4e:6a:78:a0:14:f1:4e:84:b1:65:a1:bb:b5:96:43:55:5f:ed:
         cc:f3:3e:00:f5:52:45:5e:38:d8:f4:e8:e3:ae:b0:15:01:bc:
         ee:84:79:96:3c:77:c9:c1:e7:87:e5:d1:46:46:b5:81:ed:5f:
         f9:0c:e1:ad:ef:52:a4:c1:c2:b4:a4:52:c3:6c:5d:d8:6a:80:
         80:e2:a2:bb:9d:9e:2d:2a:3e:fb:9d:69:0e:c7:6b:f0:7c:74:
         a4:c6:13:36:07:32:fd:0a:dd:4d:8e:9a:39:26:55:64:ef:26:
         14:21:e2:62:0c:19:90:85:b7:94:c0:3f:40:d5:3d:3e:19:70:
         cc:e8:a9:b9:03:a6:21:08:d3:0f:bd:4b:e0:08:a3:73:70:6e:
         11:3c:e8:d1:7b:00:e2:0b:04:8c:61:2a:25:5f:13:20:f9:90:
         94:0a:5a:b0:42:eb:dc:de:2c:42:3d:52:3a:41:e6:6c:e9:af:
         f5:67:b3:09:0e:c9:74:f8:7a:6b:cf:3e:fb:74:80:97:6c:8f:
         1a:fe:3c:2c:06:c4:84:b1:64:43:6d:3b:25:30:61:78:e1:e4:
         5d:35:d5:49:26:98:46:65:40:b4:4a:36:ca:c6:05:54:7f:28:
         55:6e:99:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:13:41 2025 by rpki-client