Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32322d3232203d3e20323731323435.roa
File:                     3137302e3234372e3138342e302f32322d3232203d3e20323731323435.roa (raw, json)
Hash identifier:          SsXD886T95rYk9iwsu3tA9o0IO4HF37PZLy5bAhP65g=
Subject key identifier:   9A:3C:28:DB:3B:96:A5:58:2C:F2:5D:03:76:1A:B3:86:F9:49:55:E2
Certificate issuer:       /CN=ED33640A82E7F8F1250ABE59F8C020031AE986A3
Certificate serial:       561F0CC02ADB5D16FC197388EF4AA79C415CBEFA
Authority key identifier: ED:33:64:0A:82:E7:F8:F1:25:0A:BE:59:F8:C0:20:03:1A:E9:86:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32322d3232203d3e20323731323435.roa
Signing time:             Thu 31 Jul 2025 13:37:08 +0000
ROA not before:           Thu 31 Jul 2025 13:32:08 +0000
ROA not after:            Thu 30 Jul 2026 13:37:08 +0000
asID:                     271245
IP address blocks:        170.247.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.crl
                          rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 05:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1f:0c:c0:2a:db:5d:16:fc:19:73:88:ef:4a:a7:9c:41:5c:be:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED33640A82E7F8F1250ABE59F8C020031AE986A3
        Validity
            Not Before: Jul 31 13:32:08 2025 GMT
            Not After : Jul 30 13:37:08 2026 GMT
        Subject: CN=9A3C28DB3B96A5582CF25D03761AB386F94955E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a4:f3:75:c9:20:7c:62:32:63:e0:7f:73:aa:
                    a8:31:4e:5f:4e:27:cb:cb:49:2f:52:00:cb:9e:66:
                    3b:a8:96:a5:14:88:87:2a:f5:f4:db:ce:48:90:3b:
                    64:64:20:55:c2:a6:91:59:80:21:09:1d:24:22:9e:
                    09:82:af:34:2e:ee:60:db:7d:e3:07:f6:9d:b1:be:
                    4a:63:81:fc:d0:79:cb:1d:3a:a3:58:14:53:19:b5:
                    a3:af:ff:eb:ca:52:4c:f9:a4:eb:d5:e1:8e:b0:14:
                    ce:ed:ae:ad:85:fa:2c:5d:e4:53:d9:84:97:88:60:
                    f6:5b:03:e7:d3:b2:54:bc:d1:f3:b0:58:b5:6c:ef:
                    d4:15:e0:db:f4:f9:d5:70:58:3d:3c:86:13:eb:82:
                    0c:ca:17:96:15:9e:2c:ff:4b:d3:d5:ff:e2:9e:f1:
                    bb:15:0c:1c:75:ab:14:68:59:80:53:10:d8:33:a9:
                    57:56:e8:22:cf:09:d8:0b:09:2d:44:38:60:75:15:
                    6d:14:56:bb:ff:cb:0b:e4:b2:b3:1d:aa:33:e3:90:
                    34:16:ff:f9:4f:d7:d9:77:4d:31:d2:a0:1b:f3:2f:
                    e4:f2:17:23:9d:b6:63:74:f0:2e:61:10:27:7c:be:
                    10:19:06:74:22:71:ad:5c:be:35:e1:39:9f:4f:25:
                    71:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3C:28:DB:3B:96:A5:58:2C:F2:5D:03:76:1A:B3:86:F9:49:55:E2
            X509v3 Authority Key Identifier:
                keyid:ED:33:64:0A:82:E7:F8:F1:25:0A:BE:59:F8:C0:20:03:1A:E9:86:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32322d3232203d3e20323731323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:c7:81:2b:87:84:d9:59:8c:9e:74:b8:08:5f:71:c4:0d:eb:
         71:53:cc:bc:9b:d0:e6:90:0e:0a:db:b9:2d:f7:28:d2:c2:fe:
         4b:5a:8a:da:ce:d5:df:f5:19:8e:da:c1:4a:79:bb:69:4f:c6:
         93:22:8d:52:15:b2:fa:ab:19:e9:54:14:a9:ad:bd:0c:49:ef:
         31:e6:09:5b:20:94:65:fc:09:be:10:f7:4f:28:ef:1a:7a:21:
         46:1b:11:04:fd:11:15:36:be:30:14:3e:18:6d:66:8d:c0:32:
         3c:c3:df:5c:35:b3:e1:46:91:3b:8a:ca:c5:c5:bc:78:78:2b:
         01:da:e1:9e:0c:69:fe:57:bd:81:58:44:2e:ce:95:85:0c:3d:
         b7:c5:23:ad:9a:ae:f6:14:98:53:e5:43:47:a9:2c:4a:24:e7:
         a6:d7:40:88:e1:1e:71:91:4e:28:b4:8d:0f:fa:b4:d6:c8:26:
         53:b2:23:3d:fc:95:5f:f7:f0:fe:27:60:8b:53:de:a9:bc:4e:
         22:e4:d6:84:ca:a8:85:66:37:2f:4e:41:15:b2:55:f3:ea:5a:
         d0:b7:8e:10:0f:d0:b6:e2:eb:15:ec:71:bd:31:3d:2f:99:60:
         2b:76:3f:4f:89:39:80:ba:30:d7:05:d2:02:20:22:16:d1:4a:
         d8:48:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:25:58 2025 by rpki-client