Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3137302e3234362e33322e302f32322d3332203d3e203631383035.roa
File:                     3137302e3234362e33322e302f32322d3332203d3e203631383035.roa (raw, json)
Hash identifier:          SBGAv4ZfBm0EW7CBbuSRt4GCH36OO74KVgEuKivqpmc=
Subject key identifier:   4A:3F:33:F7:2A:4E:37:AB:08:C3:18:CD:4F:19:1F:A3:05:64:5E:CB
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       6866EFC380FAA035E9A22B4F2762DDDD47258F0D
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3137302e3234362e33322e302f32322d3332203d3e203631383035.roa
Signing time:             Thu 09 Oct 2025 12:35:23 +0000
ROA not before:           Thu 09 Oct 2025 12:30:23 +0000
ROA not after:            Thu 08 Oct 2026 12:35:23 +0000
asID:                     61805
IP address blocks:        170.246.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:66:ef:c3:80:fa:a0:35:e9:a2:2b:4f:27:62:dd:dd:47:25:8f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Oct  9 12:30:23 2025 GMT
            Not After : Oct  8 12:35:23 2026 GMT
        Subject: CN=4A3F33F72A4E37AB08C318CD4F191FA305645ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:c1:f4:22:99:c2:0e:c5:34:b4:61:1c:59:
                    1f:ed:6d:d7:71:3a:93:72:40:a9:0f:20:1f:13:b3:
                    8b:bc:45:84:16:86:a2:ce:71:d3:92:29:fa:33:d3:
                    16:6e:41:e5:fd:e6:76:89:aa:ef:df:60:51:ec:4f:
                    26:45:6a:92:ed:7b:18:89:78:58:db:85:eb:76:70:
                    07:c5:1f:67:5f:a5:ad:5c:b6:f1:2d:82:ba:60:05:
                    8a:83:43:85:5e:7f:f3:c5:aa:74:c9:c3:a6:a2:63:
                    89:6c:65:df:e8:c2:09:d9:35:ec:a5:9f:4e:25:27:
                    e1:b9:11:db:a3:e4:c1:7c:0c:47:d3:4d:2a:4e:a0:
                    31:73:93:15:f4:1a:72:7d:26:88:a2:f0:7b:48:53:
                    60:a4:17:02:a0:dd:e0:bb:b8:3f:41:23:59:14:d1:
                    89:70:86:5c:67:7e:92:f0:3b:6d:0d:6b:02:a1:43:
                    09:be:68:1b:48:30:01:46:87:48:53:a3:28:36:19:
                    45:c8:a9:48:7c:29:d0:39:3a:5f:69:ff:51:30:04:
                    40:e9:d3:67:8c:2e:70:11:15:65:70:46:bf:87:01:
                    48:e6:45:ae:0c:2c:3c:7e:23:fb:c1:e6:b3:73:b6:
                    2b:dc:43:53:d4:2f:c3:d6:de:8e:42:b3:f2:f2:5f:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3F:33:F7:2A:4E:37:AB:08:C3:18:CD:4F:19:1F:A3:05:64:5E:CB
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3137302e3234362e33322e302f32322d3332203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:c1:96:1e:84:6e:38:a3:4a:ed:fa:6f:1c:53:49:0b:a6:80:
         68:42:75:53:b7:a2:92:61:15:36:0c:b8:eb:e0:84:df:fa:70:
         77:d0:de:5c:86:ef:d2:bf:d3:27:be:96:36:56:90:b3:ba:7b:
         20:92:d3:3b:c8:7f:26:65:e0:75:80:d3:fe:b5:f1:7a:b5:c7:
         a4:75:d4:88:bb:85:31:ec:c4:bb:f8:58:55:78:b0:02:3a:69:
         b1:15:b2:2a:29:4d:53:66:6b:c2:2c:09:06:81:d5:b7:70:e0:
         16:da:f3:63:83:a7:2b:9e:1e:c3:6e:5c:d2:9c:3c:57:64:b9:
         8a:82:71:3d:92:f0:20:46:ef:f4:ed:83:01:99:5d:d7:1a:3e:
         eb:f4:ba:27:73:9e:6f:ff:19:2e:0f:ee:3f:23:04:40:1c:eb:
         38:51:d0:57:73:1c:f2:7c:74:3e:d5:8d:b0:68:98:45:58:ac:
         d4:d4:c9:f6:f3:f3:44:37:db:5b:69:7e:3f:ea:88:3f:c7:83:
         f0:28:28:31:6f:1c:08:b6:7f:80:42:75:ac:5e:1e:68:56:6a:
         96:96:c2:50:f8:be:a4:41:ee:3c:1c:f4:38:47:21:d9:18:ba:
         3f:7e:17:f7:5f:0a:ce:02:8d:c5:76:4b:88:a1:f1:42:28:ed:
         ae:53:6b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:27 2025 by rpki-client