Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32332d3233203d3e20323731323435.roa
File:                     3137302e3234372e3138342e302f32332d3233203d3e20323731323435.roa (raw, json)
Hash identifier:          DFb86hLP8RFFVaFra6bPGGN4pznKE9jAgGVmZ0SyXec=
Subject key identifier:   01:41:05:57:4A:39:19:EF:31:0E:5E:17:34:74:2A:49:8E:D7:3F:BA
Certificate issuer:       /CN=ED33640A82E7F8F1250ABE59F8C020031AE986A3
Certificate serial:       66E8500EEC3863C7016FC0E100018D202DDA6F95
Authority key identifier: ED:33:64:0A:82:E7:F8:F1:25:0A:BE:59:F8:C0:20:03:1A:E9:86:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32332d3233203d3e20323731323435.roa
Signing time:             Thu 31 Jul 2025 13:37:10 +0000
ROA not before:           Thu 31 Jul 2025 13:32:10 +0000
ROA not after:            Thu 30 Jul 2026 13:37:10 +0000
asID:                     271245
IP address blocks:        170.247.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.crl
                          rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 09:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e8:50:0e:ec:38:63:c7:01:6f:c0:e1:00:01:8d:20:2d:da:6f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED33640A82E7F8F1250ABE59F8C020031AE986A3
        Validity
            Not Before: Jul 31 13:32:10 2025 GMT
            Not After : Jul 30 13:37:10 2026 GMT
        Subject: CN=014105574A3919EF310E5E1734742A498ED73FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:46:1e:ed:bc:8b:84:96:fc:2d:b0:c1:ce:
                    a2:64:29:e3:82:f0:e2:c1:d6:9f:3d:47:e2:bd:da:
                    d2:cc:c7:23:21:12:41:f6:60:a6:fc:cb:d9:cb:6a:
                    8d:98:6b:bf:a9:6d:27:21:dd:1e:90:2a:45:82:2e:
                    ab:ff:36:fc:15:2b:92:14:64:60:96:5d:4f:89:a9:
                    49:9f:27:6b:36:a9:6f:c3:89:76:52:54:1a:5f:a0:
                    2d:45:78:6c:01:0e:61:36:c9:a1:68:84:e3:62:9a:
                    cf:a6:c2:f5:99:02:b3:7a:99:e4:67:e6:6d:c1:e5:
                    68:31:23:1e:bc:b5:93:8d:79:70:34:2e:25:ec:3f:
                    bc:34:0c:55:92:bc:b4:96:bf:84:b3:0e:64:d5:de:
                    51:9a:e5:2e:74:dc:7e:8c:3c:62:a2:8b:59:c9:63:
                    6d:00:d3:2d:26:80:50:0a:da:b9:dd:f7:01:86:69:
                    86:a1:a9:37:b3:48:3b:f5:97:6c:6b:c3:59:de:81:
                    8e:d0:80:e0:2a:b2:17:2a:8c:79:df:f4:56:ce:b1:
                    b0:34:0d:bb:f3:d2:e0:01:69:8c:f0:8c:57:79:4b:
                    31:f1:f5:86:7c:b7:a6:32:a1:a7:28:03:b8:6f:20:
                    32:ec:75:a6:cb:3f:f8:52:b3:a1:ba:5b:c3:5c:20:
                    03:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:41:05:57:4A:39:19:EF:31:0E:5E:17:34:74:2A:49:8E:D7:3F:BA
            X509v3 Authority Key Identifier:
                keyid:ED:33:64:0A:82:E7:F8:F1:25:0A:BE:59:F8:C0:20:03:1A:E9:86:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138342e302f32332d3233203d3e20323731323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:23:e0:0f:41:66:61:9e:5f:cb:14:5c:6e:ff:d6:49:75:5f:
         ba:15:07:75:a9:80:61:95:85:1a:36:35:a4:5d:8b:b0:3f:13:
         ac:b4:51:9e:7f:4b:04:79:08:56:d2:07:bf:44:84:40:24:16:
         35:fc:6a:e5:c4:c9:0a:ae:5c:90:93:67:85:5d:66:f4:2c:36:
         ae:b4:e4:ef:b6:77:66:2b:de:92:d7:1d:3f:8d:9d:f1:73:df:
         c4:a9:da:56:f2:5b:ff:ba:cb:3d:a3:97:93:06:07:c7:d0:04:
         b5:80:6a:00:ab:80:44:4b:52:75:35:91:af:53:e2:61:fe:94:
         2f:03:ef:47:5e:25:bc:5a:e7:ab:cc:b5:1a:76:83:4f:80:d3:
         d5:b3:54:f5:5a:ab:8e:ca:e6:f5:0f:6c:c2:29:df:bb:71:e3:
         66:f3:17:4b:62:c3:56:8b:d3:53:b6:9b:43:a9:aa:0a:b9:38:
         83:8a:61:aa:ad:e8:6d:e2:66:05:da:0c:1d:ca:06:35:ee:40:
         91:25:e6:08:23:09:8f:4a:22:37:3b:66:3f:a2:c0:e2:a2:21:
         4e:c6:0c:69:f3:47:fc:fd:c5:93:b1:fe:1c:81:19:25:3d:45:
         99:7a:7f:c9:f8:c9:6e:ca:17:80:52:c4:b8:62:e2:41:17:19:
         6d:14:d3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:49:24 2025 by rpki-client