Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fpTzLBb25mKad2Rhf62sZYFXm7BsWFtUL5h8JuCUNvz/0/3137302e37392e3234342e302f32322d3332203d3e20323636333335.roa
File:                     3137302e37392e3234342e302f32322d3332203d3e20323636333335.roa (raw, json)
Hash identifier:          bXb/D8Hkp/WTs/PuscQ9j9C3s4qU6WcUD/PFEskcbag=
Subject key identifier:   97:85:B9:7F:05:04:87:30:FB:D4:4F:10:B0:C8:07:EB:D5:89:79:BB
Certificate issuer:       /CN=61A2C988D20D4462257750A044EF6E1C859E89A1
Certificate serial:       295FA0BF041A0A346868909B94ABCB4D5EF2D963
Authority key identifier: 61:A2:C9:88:D2:0D:44:62:25:77:50:A0:44:EF:6E:1C:85:9E:89:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61A2C988D20D4462257750A044EF6E1C859E89A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fpTzLBb25mKad2Rhf62sZYFXm7BsWFtUL5h8JuCUNvz/0/3137302e37392e3234342e302f32322d3332203d3e20323636333335.roa
Signing time:             Fri 15 Aug 2025 03:43:43 +0000
ROA not before:           Fri 15 Aug 2025 03:38:43 +0000
ROA not after:            Fri 14 Aug 2026 03:43:43 +0000
asID:                     266335
IP address blocks:        170.79.244.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fpTzLBb25mKad2Rhf62sZYFXm7BsWFtUL5h8JuCUNvz/0/61A2C988D20D4462257750A044EF6E1C859E89A1.crl
                          rsync://rpki-repo.registro.br/repo/fpTzLBb25mKad2Rhf62sZYFXm7BsWFtUL5h8JuCUNvz/0/61A2C988D20D4462257750A044EF6E1C859E89A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61A2C988D20D4462257750A044EF6E1C859E89A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 05:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5f:a0:bf:04:1a:0a:34:68:68:90:9b:94:ab:cb:4d:5e:f2:d9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61A2C988D20D4462257750A044EF6E1C859E89A1
        Validity
            Not Before: Aug 15 03:38:43 2025 GMT
            Not After : Aug 14 03:43:43 2026 GMT
        Subject: CN=9785B97F05048730FBD44F10B0C807EBD58979BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ab:18:a6:b0:34:d5:7f:44:a1:2c:6b:90:8c:
                    e7:44:f0:80:50:86:f6:fa:b5:f5:f8:7f:57:93:fb:
                    8c:71:9d:52:6b:d0:7e:77:86:8c:db:66:b2:93:8f:
                    7e:f0:a6:68:8b:9a:86:3f:a9:98:14:01:97:f9:5c:
                    a0:0f:df:0c:e9:cd:be:3b:1f:dc:34:cf:bb:21:ff:
                    4e:7f:02:67:0c:95:2d:66:e4:aa:70:a5:af:2e:59:
                    2e:a2:14:3a:f1:13:9d:c8:98:fe:6e:fe:0e:02:c7:
                    ad:84:45:56:49:8a:70:fe:4b:67:2c:5e:d1:b0:81:
                    0e:7d:61:25:ab:33:1d:b6:c8:82:db:31:4a:20:97:
                    ea:d1:c0:41:51:c4:6e:fa:4c:84:27:d6:d4:72:56:
                    e6:0a:79:a4:09:fc:55:14:dd:03:70:06:97:04:e0:
                    0c:41:81:57:50:03:8a:e0:8b:d5:d8:03:0e:5b:ac:
                    ba:a7:22:1a:b6:f9:ed:bc:19:c8:1d:d0:92:4e:f8:
                    5c:72:42:69:45:f4:4a:ad:99:40:a7:69:46:ff:d1:
                    48:79:68:19:fa:df:ad:da:5b:80:bf:2d:14:a5:0a:
                    d2:27:c9:c7:3d:c6:02:8b:6b:9f:1d:09:1b:2b:16:
                    f4:a3:8b:13:97:06:42:ce:1d:7f:a8:c5:f5:d7:04:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:85:B9:7F:05:04:87:30:FB:D4:4F:10:B0:C8:07:EB:D5:89:79:BB
            X509v3 Authority Key Identifier:
                keyid:61:A2:C9:88:D2:0D:44:62:25:77:50:A0:44:EF:6E:1C:85:9E:89:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fpTzLBb25mKad2Rhf62sZYFXm7BsWFtUL5h8JuCUNvz/0/61A2C988D20D4462257750A044EF6E1C859E89A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61A2C988D20D4462257750A044EF6E1C859E89A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fpTzLBb25mKad2Rhf62sZYFXm7BsWFtUL5h8JuCUNvz/0/3137302e37392e3234342e302f32322d3332203d3e20323636333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:3d:81:d1:ae:c4:c5:ca:cb:e5:93:71:32:94:10:d4:83:9b:
         0e:34:e3:9c:5a:26:83:2d:0d:0a:fb:9f:20:be:d2:82:23:00:
         fc:4f:38:90:a6:25:72:2a:31:9b:b9:2f:43:6b:5c:8f:79:a2:
         fe:68:e5:d7:c5:1f:9f:02:da:55:2d:73:d0:46:0f:1a:5f:d6:
         6d:cc:d4:19:28:e6:59:e5:5c:20:fc:a9:51:2d:1e:1f:7e:8d:
         af:84:3f:0b:00:44:ff:96:d2:fa:46:c4:f7:3f:a9:08:d2:07:
         70:e6:08:d6:28:bd:f8:71:a1:01:af:e9:3f:2c:a5:fe:91:e1:
         fc:1e:d7:c5:90:77:40:88:09:d7:18:96:48:78:e8:37:31:b7:
         43:6e:27:06:2f:19:40:b5:15:f9:a0:47:6f:b9:f0:ea:7c:0c:
         f0:6e:7f:6a:c4:14:7f:88:61:a4:b8:f4:ab:2d:0c:62:f2:de:
         04:29:5d:d6:96:de:56:74:61:2c:2c:f8:a3:2b:2d:16:90:2c:
         39:6d:a6:a7:91:5c:16:93:a4:ca:67:db:fd:93:f7:ed:3b:e9:
         f4:01:bb:f5:35:eb:b2:d7:91:e5:ca:13:a4:ee:d7:5a:8d:1e:
         a1:c2:26:9d:e2:44:b3:f8:b6:55:91:43:0f:61:fb:c7:31:af:
         d5:ca:db:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:08:33 2025 by rpki-client