Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138362e302f32332d3233203d3e20323731323435.roa
File:                     3137302e3234372e3138362e302f32332d3233203d3e20323731323435.roa (raw, json)
Hash identifier:          VxC9ek/IiQME6RVkfnxqtRySxifRRQ9GAUzrwIGcojI=
Subject key identifier:   4A:9A:25:C1:C3:B7:D1:07:84:56:E5:EE:CC:0B:F6:82:58:CB:58:36
Certificate issuer:       /CN=ED33640A82E7F8F1250ABE59F8C020031AE986A3
Certificate serial:       35CB4E2DC16FE56F942538034884DD9A64AF39F4
Authority key identifier: ED:33:64:0A:82:E7:F8:F1:25:0A:BE:59:F8:C0:20:03:1A:E9:86:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138362e302f32332d3233203d3e20323731323435.roa
Signing time:             Thu 31 Jul 2025 13:37:13 +0000
ROA not before:           Thu 31 Jul 2025 13:32:13 +0000
ROA not after:            Thu 30 Jul 2026 13:37:13 +0000
asID:                     271245
IP address blocks:        170.247.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.crl
                          rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 05:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cb:4e:2d:c1:6f:e5:6f:94:25:38:03:48:84:dd:9a:64:af:39:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED33640A82E7F8F1250ABE59F8C020031AE986A3
        Validity
            Not Before: Jul 31 13:32:13 2025 GMT
            Not After : Jul 30 13:37:13 2026 GMT
        Subject: CN=4A9A25C1C3B7D1078456E5EECC0BF68258CB5836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:14:2b:f6:f5:2d:ed:ba:3c:c2:2c:db:56:c7:
                    ac:db:3e:0f:30:51:d9:e6:2d:53:2c:1d:19:fe:c6:
                    86:3d:96:7a:6a:40:a1:50:6a:9b:65:d1:fe:db:a0:
                    86:35:1f:45:57:50:da:6e:82:2c:34:26:87:b8:8f:
                    be:bd:d0:96:6a:cf:90:aa:5c:56:66:21:7e:68:fa:
                    3c:1e:e2:91:82:f3:42:7a:80:c3:ae:a6:21:b5:c0:
                    12:1b:92:9e:24:37:02:87:d8:33:1c:a5:a9:19:42:
                    2b:97:63:5a:83:cf:6e:94:5c:c1:79:4f:36:cb:c4:
                    ea:e3:76:a5:34:78:2f:17:4d:af:73:02:c1:e8:ae:
                    7f:ad:b0:9e:65:ff:ed:be:4f:eb:94:ce:a6:8b:72:
                    79:6b:1b:a4:af:b3:80:13:b4:49:9e:84:d3:72:a9:
                    5f:d1:30:bf:e0:f1:f1:20:3b:76:da:49:0b:fd:cd:
                    34:41:fa:38:9f:d9:07:8f:80:5c:e2:a3:b5:e8:e0:
                    c5:d3:39:de:96:03:18:cb:c4:d0:22:86:0f:07:2d:
                    4d:88:1c:b7:27:d7:fe:47:e1:36:bc:6c:1f:dc:55:
                    78:80:85:c3:6a:30:84:6f:8b:77:3f:87:2f:16:37:
                    7d:2c:a5:4e:af:fc:c4:5d:0d:db:45:3a:f7:70:3d:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9A:25:C1:C3:B7:D1:07:84:56:E5:EE:CC:0B:F6:82:58:CB:58:36
            X509v3 Authority Key Identifier:
                keyid:ED:33:64:0A:82:E7:F8:F1:25:0A:BE:59:F8:C0:20:03:1A:E9:86:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/ED33640A82E7F8F1250ABE59F8C020031AE986A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED33640A82E7F8F1250ABE59F8C020031AE986A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138362e302f32332d3233203d3e20323731323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:60:f9:64:5e:c9:07:1b:a8:ec:c4:f4:b6:e0:1a:49:85:bf:
         9d:8a:d4:ae:97:08:ad:fb:b9:83:8b:91:6a:76:bb:92:62:e7:
         d2:b2:d8:0c:80:11:50:f5:cf:19:ba:ac:35:cc:89:23:95:01:
         ec:d3:a0:85:92:f6:71:46:a5:d5:04:66:97:e0:22:c7:d7:33:
         5d:2b:f4:b5:7c:05:0d:d7:53:c2:79:41:eb:9f:5a:55:40:fe:
         69:91:52:d0:1c:bf:45:4a:c0:e4:25:c7:5b:ff:f8:78:d5:b4:
         b9:a3:12:72:84:8b:a6:33:0e:2f:84:39:73:9c:9f:bb:8f:cd:
         ad:41:3d:12:41:0f:a3:62:72:9c:6b:69:e6:01:65:35:af:a4:
         32:f8:c5:2a:18:97:5c:a5:36:88:ab:70:2c:da:bc:4c:f9:a2:
         84:ff:84:11:1c:22:3b:74:b7:e9:d9:3b:3e:a6:36:68:fb:00:
         f0:f8:8e:30:23:5e:c6:37:4c:63:5c:fe:76:42:ac:57:0f:38:
         f8:8c:cc:c5:ff:1d:2b:b9:02:8e:34:82:5a:e8:65:82:12:36:
         a8:c8:cb:29:5a:87:15:70:a0:ba:34:e0:7f:1d:41:d4:95:de:
         2b:14:52:5d:fd:b0:bc:c5:bf:1c:b1:9e:cd:db:18:61:f0:01:
         62:f2:34:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:08:09 2025 by rpki-client