Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e38322e3131382e302f32332d3332203d3e20323633343234.roa
File:                     3137302e38322e3131382e302f32332d3332203d3e20323633343234.roa (raw, json)
Hash identifier:          1jta44mu/zlfbwXxD7Gy6UKj7meMi0HKPBfE1PnTAqg=
Subject key identifier:   B5:7F:71:95:E4:D1:2A:C5:D2:18:9B:57:1E:C8:55:63:59:A4:B2:8C
Certificate issuer:       /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial:       55BDB0925D6983EA77D333F779D5E4A93210F684
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e38322e3131382e302f32332d3332203d3e20323633343234.roa
Signing time:             Fri 08 Aug 2025 18:03:58 +0000
ROA not before:           Fri 08 Aug 2025 17:58:58 +0000
ROA not after:            Fri 07 Aug 2026 18:03:58 +0000
asID:                     263424
IP address blocks:        170.82.118.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
                          rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 00:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bd:b0:92:5d:69:83:ea:77:d3:33:f7:79:d5:e4:a9:32:10:f6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
        Validity
            Not Before: Aug  8 17:58:58 2025 GMT
            Not After : Aug  7 18:03:58 2026 GMT
        Subject: CN=B57F7195E4D12AC5D2189B571EC8556359A4B28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ba:70:cc:e7:11:38:0d:ca:b2:06:63:54:1e:
                    29:c6:b3:c3:03:34:e1:32:7e:db:87:d9:39:ec:77:
                    44:58:66:5d:87:f9:19:4f:98:45:ea:32:2f:f2:83:
                    52:37:31:d8:a3:08:e8:0d:0e:34:a5:31:b8:35:5c:
                    b2:1b:85:e7:42:6c:43:c9:78:a9:1f:ea:5c:a3:f1:
                    9f:5c:9a:3a:8f:a9:cf:e7:1b:74:f6:f4:36:63:c0:
                    02:ca:17:07:a8:97:03:c0:0d:45:10:55:7b:52:fb:
                    a4:48:f0:ae:1e:4d:ca:d9:2c:a3:e6:10:65:aa:1b:
                    af:9d:18:31:e1:2e:34:db:96:9e:87:19:f8:ed:8f:
                    0d:68:50:f0:d2:22:83:ec:25:19:6f:21:a8:0b:3c:
                    f3:a9:a0:47:29:23:99:df:36:59:01:4e:40:1c:e6:
                    87:6d:8d:03:2b:b6:1c:30:95:bf:bd:f8:f6:29:ee:
                    56:d0:bf:aa:0d:23:f8:cb:f1:c1:36:ba:c2:05:9f:
                    2c:84:ce:10:d8:91:47:be:10:30:de:eb:35:3e:7f:
                    ce:bb:52:a8:dc:ab:44:79:e4:90:cb:44:bf:ff:be:
                    9b:f6:0c:3b:e6:43:8e:76:51:fa:5a:13:cf:2e:f6:
                    04:44:02:ba:af:4f:5a:c0:84:24:d3:a4:b1:a5:3e:
                    ac:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7F:71:95:E4:D1:2A:C5:D2:18:9B:57:1E:C8:55:63:59:A4:B2:8C
            X509v3 Authority Key Identifier:
                keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3137302e38322e3131382e302f32332d3332203d3e20323633343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:44:e4:dc:29:5c:58:6a:4e:da:32:ed:52:dd:53:ee:95:28:
         cf:0f:28:96:45:e1:ea:d3:57:1c:d1:90:71:bd:bd:71:7c:c4:
         d6:31:a6:1c:25:c7:1c:64:c8:09:33:e4:c4:77:9b:b8:5f:ca:
         fa:ba:c0:5c:2c:76:d9:38:61:c0:83:26:40:d7:cc:69:aa:b5:
         6f:01:3f:9c:15:83:5e:56:32:4f:27:ff:91:5c:2b:ce:a5:5f:
         6e:fe:74:90:67:2e:2e:8c:bd:16:4e:93:17:e7:a3:b3:28:1c:
         39:ec:9e:aa:97:36:b0:65:34:4a:6e:56:56:97:ee:20:71:0a:
         b2:c8:9b:0c:4c:fd:74:54:eb:6f:13:62:ed:c6:ac:c6:b5:48:
         b9:9e:4a:29:56:e9:bd:21:9c:e3:21:80:0c:85:86:75:15:81:
         e5:b1:dd:8c:b2:85:20:24:a6:c7:3d:03:44:32:0e:a4:6e:a0:
         f6:e3:2d:6f:01:93:1e:0c:35:b7:f8:4e:be:33:76:e1:6f:1f:
         51:c5:45:2b:ce:13:e4:c7:11:d3:d6:c8:dc:57:91:f0:2e:4b:
         e6:40:06:bf:0a:34:a1:df:5b:47:9e:2f:db:22:2b:9e:de:79:
         3b:c1:d9:b9:0d:ec:b4:db:37:4c:45:1a:7b:de:4d:8b:49:b2:
         8c:19:b6:8e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVb2wkl1pg+p30zP3edXkqTIQ9oQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk1QTI4RkMxMzNFQjU0MDhCOUJBMTI2RDlGRkUyMDg4
NEVERUNEMjAeFw0yNTA4MDgxNzU4NThaFw0yNjA4MDcxODAzNThaMDMxMTAvBgNV
BAMTKEI1N0Y3MTk1RTREMTJBQzVEMjE4OUI1NzFFQzg1NTYzNTlBNEIyOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjunDM5xE4DcqyBmNUHinGs8MD
NOEyftuH2Tnsd0RYZl2H+RlPmEXqMi/yg1I3MdijCOgNDjSlMbg1XLIbhedCbEPJ
eKkf6lyj8Z9cmjqPqc/nG3T29DZjwALKFweolwPADUUQVXtS+6RI8K4eTcrZLKPm
EGWqG6+dGDHhLjTblp6HGfjtjw1oUPDSIoPsJRlvIagLPPOpoEcpI5nfNlkBTkAc
5odtjQMrthwwlb+9+PYp7lbQv6oNI/jL8cE2usIFnyyEzhDYkUe+EDDe6zU+f867
Uqjcq0R55JDLRL//vpv2DDvmQ452UfpaE88u9gREArqvT1rAhCTTpLGlPqzBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtX9xleTRKsXSGJtXHshVY1mksowwHwYDVR0j
BBgwFoAUaVoo/BM+tUCLm6Em2f/iCITt7NIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUhFWVJMOHlrV3hBNWFNMnZqbjdqWTI1WHYzYnF2bXk5dGlnRkJOcVJr
TjgvMi82OTVBMjhGQzEzM0VCNTQwOEI5QkExMjZEOUZGRTIwODg0RURFQ0QyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NUEyOEZDMTMzRUI1NDA4
QjlCQTEyNkQ5RkZFMjA4ODRFREVDRDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVIRVlSTDh5a1d4QTVhTTJ2am43alkyNVh2M2Jxdm15OXRpZ0ZCTnFSa044LzIv
MzEzNzMwMmUzODMyMmUzMTMxMzgyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMjM2
MzMzNDMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGqUnYwDQYJKoZIhvcNAQELBQADggEBAD1E5Nwp
XFhqTtoy7VLdU+6VKM8PKJZF4erTVxzRkHG9vXF8xNYxphwlxxxkyAkz5MR3m7hf
yvq6wFwsdtk4YcCDJkDXzGmqtW8BP5wVg15WMk8n/5FcK86lX27+dJBnLi6MvRZO
kxfno7MoHDnsnqqXNrBlNEpuVlaX7iBxCrLImwxM/XRU628TYu3GrMa1SLmeSilW
6b0hnOMhgAyFhnUVgeWx3YyyhSAkpsc9A0QyDqRuoPbjLW8Bkx4MNbf4Tr4zduFv
H1HFRSvOE+THEdPWyNxXkfAuS+ZABr8KNKHfW0eeL9siK57eeTvB2bkN7LTbN0xF
GnveTYtJsowZto4=
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:15:59 2025 by rpki-client