Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3234362e3136342e302f32322d3234203d3e203532393133.roa
File:                     3137302e3234362e3136342e302f32322d3234203d3e203532393133.roa (raw, json)
Hash identifier:          VZaCZ3ebyaWdEUoK4mzRAm6MlWlqSOyew/pvMu6utBg=
Subject key identifier:   B7:EB:3A:12:CC:95:75:09:E4:0B:23:65:2A:4A:B4:D4:12:27:23:12
Certificate issuer:       /CN=EEC7B2AB6EB8213B1305F252517D9CCE88713337
Certificate serial:       0EBA048DEFA9AD1D65603977183CB7540EE0F229
Authority key identifier: EE:C7:B2:AB:6E:B8:21:3B:13:05:F2:52:51:7D:9C:CE:88:71:33:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC7B2AB6EB8213B1305F252517D9CCE88713337.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3234362e3136342e302f32322d3234203d3e203532393133.roa
Signing time:             Thu 07 Aug 2025 19:31:56 +0000
ROA not before:           Thu 07 Aug 2025 19:26:56 +0000
ROA not after:            Thu 06 Aug 2026 19:31:56 +0000
asID:                     52913
IP address blocks:        170.246.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/EEC7B2AB6EB8213B1305F252517D9CCE88713337.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/EEC7B2AB6EB8213B1305F252517D9CCE88713337.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC7B2AB6EB8213B1305F252517D9CCE88713337.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ba:04:8d:ef:a9:ad:1d:65:60:39:77:18:3c:b7:54:0e:e0:f2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC7B2AB6EB8213B1305F252517D9CCE88713337
        Validity
            Not Before: Aug  7 19:26:56 2025 GMT
            Not After : Aug  6 19:31:56 2026 GMT
        Subject: CN=B7EB3A12CC957509E40B23652A4AB4D412272312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f5:c4:ae:e7:67:44:11:bb:c2:de:93:04:dc:
                    2f:6d:5b:37:e9:76:be:d6:02:8e:3d:d0:28:57:de:
                    26:b3:00:e7:f6:1d:3e:13:42:3d:9c:74:5d:aa:e3:
                    44:bc:e8:79:98:62:46:60:73:88:e3:74:57:76:71:
                    bf:be:eb:35:e9:31:41:52:a5:82:6b:67:91:0a:6e:
                    ab:51:98:b7:d3:f0:da:5a:12:05:b2:75:83:1e:ec:
                    ab:d2:3c:07:70:ba:33:55:3a:96:fc:16:1b:a0:94:
                    62:b3:31:24:2e:35:54:d4:cb:8f:97:ef:59:26:13:
                    0f:c9:61:dc:8b:d2:89:91:76:64:7f:a3:bf:fe:37:
                    f5:09:42:df:7b:7c:ad:73:b5:58:96:54:eb:95:e3:
                    7e:6e:44:b6:da:92:76:ce:e8:7d:4c:f6:9a:63:2f:
                    65:8d:a8:95:21:17:ea:b4:7b:92:82:73:28:c5:60:
                    8e:ed:f7:ab:a1:61:97:ba:46:f9:2b:a4:7b:ea:fd:
                    7c:ea:cb:4a:2a:a7:62:af:e2:be:d0:55:30:17:38:
                    a2:df:cd:41:28:2f:fa:92:e7:c6:0c:1e:30:e0:7a:
                    bd:43:e7:0e:5b:fa:89:0e:a5:55:a4:fa:9e:45:3b:
                    f4:56:e1:20:40:37:0e:3f:c6:10:3e:4b:58:aa:2c:
                    a1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EB:3A:12:CC:95:75:09:E4:0B:23:65:2A:4A:B4:D4:12:27:23:12
            X509v3 Authority Key Identifier:
                keyid:EE:C7:B2:AB:6E:B8:21:3B:13:05:F2:52:51:7D:9C:CE:88:71:33:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/EEC7B2AB6EB8213B1305F252517D9CCE88713337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEC7B2AB6EB8213B1305F252517D9CCE88713337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3234362e3136342e302f32322d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:bc:4b:ae:d9:3d:4b:5b:ef:80:0c:e6:20:19:5d:4f:95:16:
         88:70:42:2e:fb:5f:c6:99:06:03:ea:b4:a8:70:c7:51:bb:34:
         c1:79:02:48:db:d5:e2:80:66:4f:69:82:b3:26:73:84:3d:9d:
         1d:1b:a5:8d:27:aa:7d:4b:a4:22:1e:4a:23:c5:9d:fb:ab:a8:
         8f:df:54:16:eb:bc:35:7f:f0:a2:3f:89:e5:38:f2:15:36:0d:
         fa:92:04:5a:14:58:10:12:1f:4e:eb:28:5e:4a:b6:3f:c6:29:
         4f:53:78:cf:ac:ec:b4:3d:7c:35:1e:ab:5d:e3:17:cb:f0:fc:
         7f:87:cc:fa:37:bf:9a:b3:9f:6d:78:c9:b1:68:6a:ce:d6:19:
         43:a8:54:6b:63:9d:bf:e4:0a:32:f3:1b:af:47:fb:e5:c4:dc:
         b4:f2:4b:8b:c1:10:39:7d:b9:22:0a:ae:58:c3:0e:18:38:4e:
         02:0b:99:34:9d:48:0f:e1:9e:5c:97:ca:dd:eb:b2:8f:e5:fb:
         9f:2c:fc:4a:2c:32:ed:05:40:c4:ef:3b:41:bf:fe:8f:10:50:
         cf:e2:b4:dc:44:6d:be:7d:f6:16:14:9d:6f:ae:5f:98:37:3f:
         b9:c3:b5:5e:ad:ab:9e:44:9a:6a:57:2b:46:88:4d:4e:6e:63:
         39:5d:a2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:15 2025 by rpki-client