Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3137302e3234372e38302e302f32322d3332203d3e203631383035.roa
File:                     3137302e3234372e38302e302f32322d3332203d3e203631383035.roa (raw, json)
Hash identifier:          K384e2CdvXpNMiIX9W7fQRr9UeSqEvH25WwkQ81qvaI=
Subject key identifier:   3B:CA:AF:0C:06:DD:63:EC:CC:36:16:D0:8D:BA:78:A0:7E:8D:AF:C3
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       7D5C8A9A48FDBAD642FB30DB8A7912F8518A73C7
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3137302e3234372e38302e302f32322d3332203d3e203631383035.roa
Signing time:             Thu 09 Oct 2025 12:35:29 +0000
ROA not before:           Thu 09 Oct 2025 12:30:29 +0000
ROA not after:            Thu 08 Oct 2026 12:35:29 +0000
asID:                     61805
IP address blocks:        170.247.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5c:8a:9a:48:fd:ba:d6:42:fb:30:db:8a:79:12:f8:51:8a:73:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Oct  9 12:30:29 2025 GMT
            Not After : Oct  8 12:35:29 2026 GMT
        Subject: CN=3BCAAF0C06DD63ECCC3616D08DBA78A07E8DAFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b5:9e:ab:b8:df:a8:66:92:f3:11:88:29:22:
                    3a:b9:00:3e:30:f4:b4:bf:6a:e3:3c:3d:de:12:22:
                    b3:6f:a7:92:00:cf:9b:04:ba:d6:9a:5b:ae:7a:e6:
                    13:93:6a:4a:98:64:15:7f:91:91:9d:51:aa:e6:9c:
                    fa:90:33:d1:f9:bd:36:85:f5:4a:88:9c:ab:ec:bc:
                    18:7e:b9:d5:13:61:9c:73:67:51:32:91:d1:e2:09:
                    2c:c7:bb:3d:96:06:b9:fe:25:e6:bb:ab:c9:40:88:
                    8a:44:40:63:5c:dd:0c:62:db:3e:d5:93:14:8f:02:
                    2e:1b:3b:05:fb:b3:96:3d:46:67:6d:b2:1c:e9:e3:
                    a9:ee:77:3e:fc:0c:37:3e:c3:51:40:8c:11:81:f7:
                    d3:99:2d:5b:21:e1:13:6d:5b:d9:f3:7d:c7:17:fd:
                    c0:d8:05:d3:1d:44:ae:21:db:bb:01:2b:f1:02:ca:
                    a8:a9:e8:51:36:8c:63:47:52:ed:a2:80:99:13:8a:
                    e2:96:5b:02:39:bc:3f:6c:6c:0e:41:02:6d:bb:7d:
                    e8:f7:00:87:0f:12:e4:30:8d:76:e9:30:a7:30:d5:
                    f3:51:26:e7:41:52:35:b9:78:26:6e:ff:44:45:bc:
                    79:fc:ba:15:f9:40:e8:ee:5c:0f:31:33:a7:bb:c1:
                    ca:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CA:AF:0C:06:DD:63:EC:CC:36:16:D0:8D:BA:78:A0:7E:8D:AF:C3
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3137302e3234372e38302e302f32322d3332203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:10:f5:88:73:f0:47:59:09:2d:4d:17:3d:24:67:c1:1c:98:
         aa:86:3d:02:33:9b:04:3b:75:78:c4:4d:5b:56:4c:b3:40:5d:
         38:7a:fe:93:08:e9:48:9f:37:23:c2:21:8d:cc:b3:5c:68:ae:
         69:91:cd:81:69:db:1f:a9:29:09:0c:cc:f3:d8:98:29:d1:0f:
         c5:a4:7a:0f:34:74:35:0f:97:c7:34:43:3d:fb:4a:94:14:aa:
         cd:c1:09:97:33:3e:ba:07:32:57:f2:9b:43:be:42:09:04:83:
         b0:33:ba:18:a3:8b:8f:e4:b9:d3:33:07:35:4d:7b:97:bb:0d:
         cd:45:6b:14:89:fb:7e:3d:0a:d1:48:d5:59:bc:e9:f5:2d:7e:
         26:49:bd:23:5b:3c:b6:80:16:ed:f9:45:f8:eb:8c:67:c1:8c:
         19:ac:42:74:d5:ca:be:16:39:9d:10:15:14:d9:65:b5:62:16:
         27:2e:00:3e:47:3b:c7:65:c5:6c:ec:25:fe:1a:39:54:c0:8e:
         aa:c1:11:e7:f1:27:49:f0:61:8b:be:d3:a3:cc:81:b2:cd:d2:
         70:bf:c2:b1:32:3f:16:9e:0a:3b:2c:a5:2c:c4:24:8c:df:c3:
         99:04:9b:82:4c:1a:49:a1:d9:f2:f9:6f:42:33:2b:97:73:b3:
         84:9f:a5:bd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfVyKmkj9utZC+zDbinkS+FGKc8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU3MEJGNDgyMUIyMURDNTkwNUZERDc0RUQwM0MxMzZB
MTZBMjgzMDAeFw0yNTEwMDkxMjMwMjlaFw0yNjEwMDgxMjM1MjlaMDMxMTAvBgNV
BAMTKDNCQ0FBRjBDMDZERDYzRUNDQzM2MTZEMDhEQkE3OEEwN0U4REFGQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhtZ6ruN+oZpLzEYgpIjq5AD4w
9LS/auM8Pd4SIrNvp5IAz5sEutaaW6565hOTakqYZBV/kZGdUarmnPqQM9H5vTaF
9UqInKvsvBh+udUTYZxzZ1EykdHiCSzHuz2WBrn+Jea7q8lAiIpEQGNc3Qxi2z7V
kxSPAi4bOwX7s5Y9Rmdtshzp46nudz78DDc+w1FAjBGB99OZLVsh4RNtW9nzfccX
/cDYBdMdRK4h27sBK/ECyqip6FE2jGNHUu2igJkTiuKWWwI5vD9sbA5BAm27fej3
AIcPEuQwjXbpMKcw1fNRJudBUjW5eCZu/0RFvHn8uhX5QOjuXA8xM6e7wcqfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUO8qvDAbdY+zMNhbQjbp4oH6Nr8MwHwYDVR0j
BBgwFoAU/nC/SCGyHcWQX9107QPBNqFqKDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzREWnQ4cEdoOUZYTU5XTDhNd3V1QXBzQnNBZDNMSFZ2THpka0Fxc1FC
OUgvMC9GRTcwQkY0ODIxQjIxREM1OTA1RkRENzRFRDAzQzEzNkExNkEyODMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFNzBCRjQ4MjFCMjFEQzU5
MDVGREQ3NEVEMDNDMTM2QTE2QTI4MzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c0RFp0OHBHaDlGWE1OV0w4TXd1dUFwc0JzQWQzTEhWdkx6ZGtBcXNRQjlILzAv
MzEzNzMwMmUzMjM0MzcyZTM4MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNjMx
MzgzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqvdQMA0GCSqGSIb3DQEBCwUAA4IBAQCFEPWIc/BH
WQktTRc9JGfBHJiqhj0CM5sEO3V4xE1bVkyzQF04ev6TCOlInzcjwiGNzLNcaK5p
kc2BadsfqSkJDMzz2Jgp0Q/FpHoPNHQ1D5fHNEM9+0qUFKrNwQmXMz66BzJX8ptD
vkIJBIOwM7oYo4uP5LnTMwc1TXuXuw3NRWsUift+PQrRSNVZvOn1LX4mSb0jWzy2
gBbt+UX464xnwYwZrEJ01cq+FjmdEBUU2WW1YhYnLgA+RzvHZcVs7CX+GjlUwI6q
wRHn8SdJ8GGLvtOjzIGyzdJwv8KxMj8Wngo7LKUsxCSM38OZBJuCTBpJodny+W9C
MyuXc7OEn6W9
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:02:38 2025 by rpki-client