Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e382e302f32322d3332203d3e20323632373733.roa
File:                     3137302e3233312e382e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          mHx8T+GHTOPLxrz0J3AGm3HWyGt+gPfyu4OGCFXbkqY=
Subject key identifier:   F1:06:B2:FF:A5:9A:86:13:BF:4F:08:02:86:86:09:7E:5F:23:AD:42
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       067B51F2F074543ABDFEF934E318532818BAD039
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e382e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:46:58 +0000
ROA not before:           Mon 11 Aug 2025 15:41:58 +0000
ROA not after:            Mon 10 Aug 2026 15:46:58 +0000
asID:                     262773
IP address blocks:        170.231.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7b:51:f2:f0:74:54:3a:bd:fe:f9:34:e3:18:53:28:18:ba:d0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:41:58 2025 GMT
            Not After : Aug 10 15:46:58 2026 GMT
        Subject: CN=F106B2FFA59A8613BF4F08028686097E5F23AD42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:4c:cf:36:bb:58:6c:e5:06:c3:a6:87:7e:
                    2f:53:de:d9:c6:21:40:00:9f:52:31:bc:6d:29:07:
                    80:92:10:ab:33:0d:aa:24:24:a5:f2:fa:35:1b:f3:
                    89:00:87:f6:d8:93:58:f4:f3:1e:31:3c:bc:67:14:
                    ab:e8:85:dc:07:66:f1:5d:d4:65:b8:90:b9:21:85:
                    48:63:b1:c4:89:f6:74:7a:62:e6:fb:cd:e0:c0:82:
                    4e:42:c8:7f:45:70:f7:c0:08:21:28:b2:24:81:e0:
                    7d:22:7f:8e:fd:65:d0:7f:d4:d4:22:63:53:31:2b:
                    fa:69:51:18:0f:42:0c:f6:76:f4:e3:c2:53:b6:93:
                    42:4f:55:d3:8f:25:6b:9f:c2:a9:73:5c:65:a9:7a:
                    f8:c2:3c:0d:55:de:24:77:5a:cb:43:f5:7a:ca:ed:
                    8d:73:ec:5a:14:4b:66:36:ed:b6:7e:07:10:38:0b:
                    e8:b7:31:7f:56:62:49:0e:e7:9d:33:e3:a8:94:ba:
                    d8:7d:0c:dd:d1:85:7b:fe:87:fe:86:1a:91:a7:6b:
                    64:71:b1:8e:8d:94:55:82:84:33:7a:22:a0:7a:a9:
                    3f:b5:91:e4:a8:a9:43:8a:a1:bc:59:8a:ec:29:dc:
                    59:9c:f7:dc:16:75:4d:5a:3a:79:15:e4:13:4b:87:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:06:B2:FF:A5:9A:86:13:BF:4F:08:02:86:86:09:7E:5F:23:AD:42
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e382e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:c5:1a:a3:e9:61:ab:79:44:56:c1:49:a1:91:00:77:66:45:
         79:c0:a8:ca:49:eb:83:1e:9b:41:55:26:70:a4:6c:14:f0:de:
         5a:44:23:b7:74:11:5a:5e:e8:a0:dd:f6:0c:fb:f9:f5:9b:18:
         26:78:d5:23:0e:eb:8d:c7:c8:e3:33:62:5e:ba:26:19:d5:ff:
         cb:29:26:f5:62:c5:b4:2f:03:9b:8b:03:82:a0:71:27:a1:f0:
         89:ed:56:f2:29:65:43:da:f8:d0:73:ef:33:c1:58:30:23:9b:
         8d:e7:a2:4e:a4:b3:83:b8:b4:af:d8:31:1c:e8:50:52:bf:e6:
         b2:b5:ee:f4:27:c0:d0:c0:6d:5e:71:6d:98:47:cb:d4:96:d0:
         c9:39:83:9a:5b:61:c2:91:ae:dd:78:15:f3:37:d0:ed:02:34:
         f6:5f:7f:4f:f4:1b:e7:af:88:6f:57:1c:95:f5:e4:b0:54:1f:
         e7:45:49:cb:dd:86:01:00:be:f5:12:94:3e:b0:fd:3a:57:83:
         ca:33:61:d4:2f:be:0e:d0:59:4d:3a:f8:22:51:21:d1:00:4f:
         e4:e4:7e:83:ee:75:3d:be:95:ed:e0:7d:52:ba:d9:7e:80:51:
         a8:a3:6f:07:eb:48:e9:13:26:6c:8c:d9:e9:c6:19:53:d1:8f:
         87:83:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:54 2025 by rpki-client