Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132302e302f32332d3233203d3e20323635303535.roa
File:                     3137302e3233312e3132302e302f32332d3233203d3e20323635303535.roa (raw, json)
Hash identifier:          pNQo3A10GTQLN+cyPRg5n0zIfrseNOrv6KmdH4aGU4M=
Subject key identifier:   83:4F:F0:A1:84:92:0D:98:D7:8C:E9:7E:F1:C1:A2:95:C7:11:D2:38
Certificate issuer:       /CN=A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3
Certificate serial:       1FFA8DB0B7B3E3690C547960626424F360A65596
Authority key identifier: A0:BD:39:FF:72:B4:E3:DA:FE:35:21:F4:0F:4E:43:89:CB:58:87:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132302e302f32332d3233203d3e20323635303535.roa
Signing time:             Wed 08 Oct 2025 20:03:24 +0000
ROA not before:           Wed 08 Oct 2025 19:58:24 +0000
ROA not after:            Wed 07 Oct 2026 20:03:24 +0000
asID:                     265055
IP address blocks:        170.231.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.crl
                          rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fa:8d:b0:b7:b3:e3:69:0c:54:79:60:62:64:24:f3:60:a6:55:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3
        Validity
            Not Before: Oct  8 19:58:24 2025 GMT
            Not After : Oct  7 20:03:24 2026 GMT
        Subject: CN=834FF0A184920D98D78CE97EF1C1A295C711D238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:22:91:de:3e:ba:6d:32:8b:80:ad:14:90:
                    c8:6f:40:74:63:d4:7b:ef:f4:38:9b:19:cc:d2:5e:
                    04:d0:73:17:c3:26:27:f1:c6:37:c8:e0:b9:6f:b1:
                    ba:c2:f2:aa:f9:3b:b6:e7:04:e6:40:75:f8:cb:2a:
                    b2:86:28:7b:77:58:b6:08:ac:cb:b2:ca:f2:fe:98:
                    c1:db:1d:80:8a:d5:31:51:8f:44:60:ea:7e:f3:34:
                    34:64:b7:32:e5:19:9d:93:94:45:89:e1:6b:53:b8:
                    f2:cc:35:78:7e:b6:8b:4f:56:16:10:02:5e:1f:c5:
                    42:a8:99:f5:55:2a:42:bb:f1:7c:3f:98:91:4c:26:
                    65:e0:3f:16:ef:35:33:06:1b:7a:c7:86:86:16:03:
                    54:12:57:a2:03:e2:8a:52:0f:0a:38:03:e2:9f:72:
                    0f:8d:46:9e:2c:d1:47:a0:e5:7d:92:d0:a4:82:9f:
                    55:c3:ea:82:33:37:43:b9:c4:26:b6:e8:0b:c4:79:
                    27:20:06:e5:73:3a:4f:0d:b3:87:d6:37:8f:bc:78:
                    f7:c7:6b:38:32:d4:01:b7:ba:f3:bd:76:54:ad:d9:
                    41:af:8e:54:75:f2:f4:d9:4e:0a:c1:5c:d1:de:ce:
                    4f:a9:b5:95:01:5c:51:27:ee:e7:72:5a:f7:1f:fc:
                    99:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4F:F0:A1:84:92:0D:98:D7:8C:E9:7E:F1:C1:A2:95:C7:11:D2:38
            X509v3 Authority Key Identifier:
                keyid:A0:BD:39:FF:72:B4:E3:DA:FE:35:21:F4:0F:4E:43:89:CB:58:87:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0BD39FF72B4E3DAFE3521F40F4E4389CB5887F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/0/3137302e3233312e3132302e302f32332d3233203d3e20323635303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:b8:77:95:62:1c:c8:8f:20:ba:92:d3:58:ba:07:82:27:3b:
         3f:6c:2d:c3:7f:86:13:ce:f2:13:18:9f:2f:07:26:f4:24:d7:
         ee:4f:28:d4:0d:a0:d6:65:03:e2:b6:09:84:8c:bf:6b:0a:5a:
         38:2f:ef:7f:8e:ee:1c:ba:31:f9:cf:f1:d3:68:9e:e9:d9:07:
         e0:6a:5e:db:88:47:46:77:7d:e1:ca:03:20:a6:89:01:4c:0d:
         97:ef:59:0c:d3:ef:22:28:1a:c7:19:b9:64:f9:e1:14:ff:e3:
         5e:15:bd:50:b3:89:37:69:21:78:54:12:04:b0:c6:50:79:0c:
         11:aa:d2:04:8b:66:67:98:5a:48:b5:5a:14:86:3e:b6:2b:2d:
         9b:e6:05:b1:3d:45:c9:36:d9:d2:a0:d6:84:26:13:fe:6b:ca:
         d3:d7:f6:d9:b7:ed:0b:d4:2d:4f:76:bb:d4:f7:18:6d:2d:0a:
         d3:15:5e:43:38:3e:1c:56:89:59:c7:91:01:a9:6e:85:7c:b8:
         47:da:f8:fd:c9:b7:06:b6:b5:b6:1d:6e:ad:73:3d:e0:2b:e0:
         58:31:eb:d8:9c:82:0d:42:62:09:4e:9d:19:41:de:8b:c5:ba:
         33:c7:48:73:fd:c1:38:7d:12:dd:87:98:e1:2e:e6:5c:fa:a2:
         f0:d3:64:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:44:10 2025 by rpki-client