Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3137302e38312e3232342e302f32322d3234203d3e203631363636.roa
File:                     3137302e38312e3232342e302f32322d3234203d3e203631363636.roa (raw, json)
Hash identifier:          Pdb7mbhX26kdMlfyAnZuAT2+JceqdCpTzGz0H37xIMA=
Subject key identifier:   B4:6E:E8:FB:7B:BB:DA:AE:86:C4:C5:46:5A:3F:61:D2:A9:6E:59:3B
Certificate issuer:       /CN=2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E
Certificate serial:       7C39F1F8E49E2308CC35F7BBF9B23E288FF50977
Authority key identifier: 2E:B6:CD:E4:EC:23:50:B1:F6:AF:D7:4A:E7:BE:DE:60:0B:7C:68:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3137302e38312e3232342e302f32322d3234203d3e203631363636.roa
Signing time:             Mon 29 Sep 2025 14:50:59 +0000
ROA not before:           Mon 29 Sep 2025 14:45:59 +0000
ROA not after:            Mon 28 Sep 2026 14:50:59 +0000
asID:                     61666
IP address blocks:        170.81.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 16:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:39:f1:f8:e4:9e:23:08:cc:35:f7:bb:f9:b2:3e:28:8f:f5:09:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E
        Validity
            Not Before: Sep 29 14:45:59 2025 GMT
            Not After : Sep 28 14:50:59 2026 GMT
        Subject: CN=B46EE8FB7BBBDAAE86C4C5465A3F61D2A96E593B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:18:24:a1:d3:69:98:64:67:58:7e:d6:8a:ae:
                    34:b8:b3:ee:ea:95:db:30:67:3c:ed:d9:89:2d:4a:
                    a7:6f:56:61:6b:98:bd:01:a5:03:81:d5:6f:ec:30:
                    15:65:f6:c9:c4:d9:f3:37:ef:23:e2:09:72:fe:3f:
                    3c:c1:d0:8f:7e:4e:42:e6:b2:c7:60:fd:eb:c7:c0:
                    7e:87:fc:07:82:78:b0:e1:e5:0c:c0:60:7b:5d:5e:
                    2f:63:f1:1c:08:14:38:0c:eb:b6:97:2b:0e:8a:a0:
                    cb:f0:58:e0:fc:56:e4:39:97:91:2e:39:53:4c:5a:
                    ce:f8:7d:a6:0a:2c:6b:ab:ff:86:51:f3:e6:a3:13:
                    24:0e:b7:c0:75:45:eb:24:73:34:29:64:d0:53:d5:
                    4e:66:7b:ec:7f:9a:ac:29:b1:0d:48:90:b4:0e:f2:
                    1d:f7:a1:0d:ac:7d:42:17:fd:2a:93:f4:06:c0:a2:
                    a9:88:fa:e9:80:ef:61:cb:25:37:15:3e:d2:59:1a:
                    ca:d9:fc:a5:47:c2:d5:02:8e:1c:66:ad:0e:0d:f4:
                    e6:cd:3b:b4:91:02:39:c0:eb:cf:ed:5a:90:95:3d:
                    1d:64:3f:dd:17:4b:af:da:9e:4f:8b:22:d2:05:7e:
                    21:c4:6a:29:10:31:04:a5:60:4e:21:17:bb:b1:48:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6E:E8:FB:7B:BB:DA:AE:86:C4:C5:46:5A:3F:61:D2:A9:6E:59:3B
            X509v3 Authority Key Identifier:
                keyid:2E:B6:CD:E4:EC:23:50:B1:F6:AF:D7:4A:E7:BE:DE:60:0B:7C:68:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB6CDE4EC2350B1F6AFD74AE7BEDE600B7C684E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3137302e38312e3232342e302f32322d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:50:68:86:33:a2:75:c6:12:26:63:81:c6:2b:a4:0b:a8:49:
         de:df:ee:18:9e:7e:6c:36:b9:18:df:d0:8e:47:23:c0:12:0e:
         61:57:41:d2:bb:da:05:2f:20:15:7a:c7:c7:1f:97:50:e0:b9:
         43:29:c2:a9:d7:da:d6:20:eb:7c:2f:1e:97:56:fe:77:22:0f:
         6c:5f:16:39:a6:ce:10:17:73:96:1e:43:c3:eb:b5:3b:ac:db:
         fb:a0:1a:f4:25:cc:f2:c9:d2:61:cc:a1:b8:f4:f6:f0:29:33:
         bf:1f:85:58:c1:77:d9:92:1c:d3:ee:0d:ee:3d:f0:ce:8b:c4:
         36:c9:f5:69:8a:70:e5:65:68:4d:b0:d4:a7:19:1b:45:9f:53:
         45:6f:12:f3:91:c8:33:6c:41:00:f2:64:e4:64:e4:f4:42:69:
         50:d0:47:b0:d9:c9:63:ca:6f:8a:35:59:ba:67:ad:96:e8:b5:
         13:32:5d:e6:74:d3:84:31:6d:77:3d:e3:c7:4d:0c:1a:6a:ac:
         13:98:24:44:9e:17:97:7b:83:11:ec:1a:a9:a3:a9:a1:e8:d2:
         72:f6:73:77:a6:ff:98:15:99:f1:8d:8f:a1:1a:4b:87:24:7d:
         6a:ca:1d:38:08:6c:13:23:82:ac:33:9f:24:fb:a2:49:4f:39:
         5b:fc:eb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:29:27 2025 by rpki-client