Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/3137302e38342e3234342e302f32322d3234203d3e20323639373135.roa
File:                     3137302e38342e3234342e302f32322d3234203d3e20323639373135.roa (raw, json)
Hash identifier:          N2kzmpKz/XsLxZdKGVEVlRYm6la1trrEg1XZMBrlgmE=
Subject key identifier:   4F:40:E4:4C:77:6D:28:E1:69:8E:ED:44:13:8C:B4:84:A5:88:87:25
Certificate issuer:       /CN=2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F
Certificate serial:       315A44AECA6B8CB67FA7A7D2C0353AFA8D2C44D2
Authority key identifier: 25:67:BA:1F:37:C1:9D:60:81:BA:21:7D:8C:AF:5D:F0:6F:DD:9F:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/3137302e38342e3234342e302f32322d3234203d3e20323639373135.roa
Signing time:             Mon 23 Jun 2025 19:12:34 +0000
ROA not before:           Mon 23 Jun 2025 19:07:34 +0000
ROA not after:            Mon 22 Jun 2026 19:12:34 +0000
asID:                     269715
IP address blocks:        170.84.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.crl
                          rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 18:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5a:44:ae:ca:6b:8c:b6:7f:a7:a7:d2:c0:35:3a:fa:8d:2c:44:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F
        Validity
            Not Before: Jun 23 19:07:34 2025 GMT
            Not After : Jun 22 19:12:34 2026 GMT
        Subject: CN=4F40E44C776D28E1698EED44138CB484A5888725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:97:07:d2:9c:6f:fa:cf:60:db:e4:12:ec:
                    41:c4:fd:e6:da:b0:a6:e1:49:c6:00:bc:bb:a4:aa:
                    6c:8e:4a:73:75:6b:fc:3e:69:c5:51:3e:c5:96:eb:
                    63:5b:38:e5:c1:2b:5b:81:41:9e:e8:26:7e:a6:71:
                    47:c8:46:0a:f0:69:b6:a0:1b:08:31:1e:0c:38:bb:
                    6b:60:91:de:96:76:1b:06:dd:69:a6:97:24:13:7a:
                    ef:b2:48:43:54:e8:fc:53:72:75:b0:41:f1:dd:30:
                    41:7d:7f:2f:a7:27:5f:af:97:9d:d2:49:12:98:84:
                    25:00:a8:6e:bc:ad:f1:16:bb:6a:8c:4a:b3:99:60:
                    a9:b5:d1:d7:15:91:0a:67:d1:b3:1f:bf:0f:ef:e7:
                    7d:48:c9:f0:29:5f:ad:c9:58:a2:cf:0f:a2:d6:a1:
                    f8:20:4e:8b:36:80:eb:23:ef:b8:78:4f:21:f8:d3:
                    c2:a9:c2:49:8a:53:c4:8e:d0:af:ef:e9:f3:63:a0:
                    e5:ae:43:de:83:d4:d3:b5:51:1c:d5:55:49:be:3f:
                    72:22:a8:a2:80:42:2a:ce:29:a4:4a:96:c4:60:c9:
                    a9:bb:f7:75:85:2d:17:a6:20:df:ae:79:09:12:c4:
                    cb:12:02:6b:95:ab:68:b4:fd:02:a1:8b:a1:03:33:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:40:E4:4C:77:6D:28:E1:69:8E:ED:44:13:8C:B4:84:A5:88:87:25
            X509v3 Authority Key Identifier:
                keyid:25:67:BA:1F:37:C1:9D:60:81:BA:21:7D:8C:AF:5D:F0:6F:DD:9F:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/3137302e38342e3234342e302f32322d3234203d3e20323639373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:50:2c:d9:5f:6c:a0:28:4a:43:da:c1:80:20:02:2e:ef:4e:
         8b:dd:db:bc:e7:1e:35:d5:d5:5c:de:08:e7:c5:31:5b:ed:d8:
         76:da:39:a2:21:c8:18:52:c3:3c:a7:6c:11:a1:30:4c:aa:ac:
         8a:3f:22:38:e3:55:30:e2:36:b1:21:bd:2d:5d:db:94:5f:4d:
         5b:4f:39:ac:63:5d:e6:3e:5b:c7:38:8b:6a:0d:d8:33:dc:52:
         a9:d4:1a:fb:18:af:f1:18:b8:69:83:2e:80:95:48:77:08:ed:
         22:81:e6:07:aa:30:2c:03:b6:59:03:81:45:53:51:8d:41:0e:
         e8:47:23:3d:d0:2e:e3:14:86:1d:2b:43:c7:73:54:35:81:b3:
         67:9b:9e:44:75:c7:82:20:13:e6:ea:53:b7:47:3b:29:2d:f0:
         77:a6:77:31:63:1f:2c:9e:56:c9:71:57:49:a6:f7:dc:af:3b:
         15:f2:d4:71:94:cb:e7:c5:cd:43:54:00:41:6a:96:ad:63:52:
         42:22:f0:b4:52:d0:00:47:86:55:5e:57:24:24:76:84:bf:9f:
         3e:09:78:f1:30:b3:c5:bd:9e:e7:f2:20:0c:69:5b:96:af:52:
         19:c0:9c:86:11:32:df:53:78:55:f3:c7:80:0b:f3:9e:fa:88:
         7d:31:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:16:10 2025 by rpki-client