Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231332e302f32342d3234203d3e20323731323635.roa
File:                     3137302e3234352e3231332e302f32342d3234203d3e20323731323635.roa (raw, json)
Hash identifier:          SBYQUi1USZ4NHHSwD75sfNFYTsRjKPE//xEjJpCZ5bA=
Subject key identifier:   0C:A7:7D:C7:D4:4B:50:EC:25:88:61:5B:3D:9D:B9:23:E3:A6:8E:35
Certificate issuer:       /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial:       330C12B05D05572EAA7390523ED47700912CEAC9
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231332e302f32342d3234203d3e20323731323635.roa
Signing time:             Tue 15 Jul 2025 12:10:22 +0000
ROA not before:           Tue 15 Jul 2025 12:05:22 +0000
ROA not after:            Tue 14 Jul 2026 12:10:22 +0000
asID:                     271265
IP address blocks:        170.245.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
                          rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 10:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0c:12:b0:5d:05:57:2e:aa:73:90:52:3e:d4:77:00:91:2c:ea:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
        Validity
            Not Before: Jul 15 12:05:22 2025 GMT
            Not After : Jul 14 12:10:22 2026 GMT
        Subject: CN=0CA77DC7D44B50EC2588615B3D9DB923E3A68E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:32:12:bb:38:49:4f:37:15:67:46:2b:3e:
                    11:02:1e:6c:05:9c:66:a2:e4:56:be:46:cb:18:8b:
                    f3:0f:42:95:a8:77:57:c3:4d:d7:ec:3c:05:56:6f:
                    f9:67:e4:84:f9:f1:94:1b:0b:7b:f7:40:41:e9:96:
                    51:b2:2e:4e:9c:3e:08:5e:c0:49:51:5a:e9:b6:59:
                    9c:83:ec:72:75:8d:93:b6:fa:d7:d4:ae:f6:21:ab:
                    85:c1:e6:e4:7a:4a:b4:3b:93:f8:25:ef:44:43:57:
                    d0:79:f1:c2:5e:4b:e5:27:9f:0e:b3:23:c8:36:8c:
                    c8:13:05:5c:e2:ca:9b:d6:c3:57:4f:58:94:6b:6e:
                    7a:7d:b8:e2:3e:bc:0d:07:6d:30:38:66:97:5c:a1:
                    7b:59:67:be:6e:6f:d4:fd:91:ef:4e:0c:00:f1:a0:
                    cc:03:b0:56:a1:e9:2a:34:19:97:ca:18:71:38:cf:
                    79:d2:46:67:43:26:8a:33:cf:71:30:de:2c:1a:f3:
                    7a:47:16:cb:66:94:ee:39:58:75:ca:df:85:0e:15:
                    91:5b:92:3f:6d:0d:e7:81:67:c6:91:d2:4f:f2:c4:
                    52:05:aa:4b:08:be:cc:d1:96:da:f5:cb:de:28:95:
                    d6:5a:1b:82:58:5a:9d:9e:fe:83:9a:b7:42:8f:6f:
                    0a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A7:7D:C7:D4:4B:50:EC:25:88:61:5B:3D:9D:B9:23:E3:A6:8E:35
            X509v3 Authority Key Identifier:
                keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231332e302f32342d3234203d3e20323731323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:9e:b9:5e:71:db:45:23:24:d5:72:d4:87:56:c1:71:b4:dd:
         ca:7d:4b:e1:a7:52:81:3c:20:ca:13:63:66:cb:42:7c:f8:53:
         03:f9:49:36:51:f9:8e:08:20:6d:dd:0a:f7:56:9a:7c:a8:30:
         1a:d1:4a:77:bc:38:b0:f1:b1:43:82:ee:cc:7f:51:35:30:83:
         87:6d:06:c8:d3:32:df:df:3e:91:bb:3c:10:50:9f:4e:e6:00:
         da:8e:1c:27:1c:cc:fd:a0:89:eb:bb:4f:d9:d4:bd:6a:e9:1f:
         b1:17:0b:de:4d:51:36:2c:f8:97:64:05:ed:16:98:02:36:53:
         a1:35:2c:d5:6f:aa:e1:5c:2a:e4:b7:93:56:5f:8d:0a:33:19:
         aa:3c:72:01:63:eb:0d:08:7e:6a:72:93:98:a7:0e:75:f9:e2:
         d9:85:49:a4:d6:6d:ae:c6:94:12:04:77:31:6e:74:24:9c:7c:
         f6:75:04:b6:be:de:09:5a:18:33:6c:b6:6a:d5:64:6b:eb:1e:
         da:75:7d:b3:56:cb:68:23:ff:09:eb:3b:c8:7c:85:58:92:ce:
         44:8b:d3:c5:c0:70:77:7d:24:ad:02:4d:41:de:b3:9c:0f:93:
         e5:64:dc:cf:7a:d6:e0:3f:a2:eb:9d:99:3d:45:53:37:18:1b:
         2b:61:35:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:08:44 2025 by rpki-client