Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231352e302f32342d3234203d3e20323731323635.roa
File:                     3137302e3234352e3231352e302f32342d3234203d3e20323731323635.roa (raw, json)
Hash identifier:          mhSLxPeGB+6srgrDh5nAAMnxbqVcbCfwSJBEMVQy4tE=
Subject key identifier:   6E:92:90:95:A3:BB:53:1F:B6:B7:F3:66:00:4C:BF:4B:8F:63:13:F3
Certificate issuer:       /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial:       35C077A8688B77654D11C613C252781D95D0EA5B
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231352e302f32342d3234203d3e20323731323635.roa
Signing time:             Tue 15 Jul 2025 12:10:22 +0000
ROA not before:           Tue 15 Jul 2025 12:05:22 +0000
ROA not after:            Tue 14 Jul 2026 12:10:22 +0000
asID:                     271265
IP address blocks:        170.245.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
                          rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c0:77:a8:68:8b:77:65:4d:11:c6:13:c2:52:78:1d:95:d0:ea:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
        Validity
            Not Before: Jul 15 12:05:22 2025 GMT
            Not After : Jul 14 12:10:22 2026 GMT
        Subject: CN=6E929095A3BB531FB6B7F366004CBF4B8F6313F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:41:b7:b8:ee:bf:a3:86:24:ff:af:35:75:75:
                    29:af:f7:d6:5c:8b:9c:65:3a:3b:06:98:69:fb:17:
                    1e:2e:9c:ab:95:c7:82:d0:0b:0f:5e:8d:b1:85:93:
                    33:3b:d2:21:cb:d1:cb:3c:99:34:0f:ff:c7:4c:15:
                    47:de:b8:dc:fe:1c:01:0b:2a:0d:19:02:d2:a5:9e:
                    4f:a7:11:25:dd:11:8b:70:5f:6f:05:8d:49:be:29:
                    f6:d4:69:80:b7:6a:22:b0:09:cf:c3:8c:ed:3e:d9:
                    79:36:a3:f0:8d:3a:77:e1:5a:31:c1:d8:6c:49:ee:
                    56:91:35:cf:ed:8a:f8:65:ad:bd:7c:26:96:de:1b:
                    d3:f5:ef:11:d0:6e:a4:b2:7f:78:5a:64:b4:e0:2f:
                    8f:cb:ce:ef:aa:e9:e9:15:91:7d:13:6b:6e:66:b2:
                    ee:ee:6c:53:ae:d2:a2:01:49:74:e6:05:39:45:fe:
                    63:7c:c0:65:3c:46:eb:29:ea:31:66:25:8b:c3:3a:
                    0e:0a:a6:1f:d5:ba:3d:8e:f9:3e:e4:0d:df:12:bb:
                    bc:a3:6d:ad:ef:8f:eb:7e:eb:a4:9b:8d:ea:29:a4:
                    0e:1c:68:d7:1f:ea:09:7d:f8:2a:1d:ee:78:f6:56:
                    9e:b1:be:95:a8:71:0e:e7:0f:f9:8a:c7:2f:5a:d7:
                    e1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:92:90:95:A3:BB:53:1F:B6:B7:F3:66:00:4C:BF:4B:8F:63:13:F3
            X509v3 Authority Key Identifier:
                keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/3137302e3234352e3231352e302f32342d3234203d3e20323731323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:44:4c:ac:25:79:9d:2d:cc:b9:46:6a:21:8f:29:49:67:56:
         81:ec:a5:6e:f0:d3:c2:99:12:35:2e:b6:a2:69:86:27:eb:31:
         29:de:82:ed:f7:80:c4:af:05:32:7a:96:4f:66:1d:4f:65:14:
         0b:04:26:3b:bb:66:c8:81:6a:84:cd:9c:08:d4:6a:ef:a4:9a:
         4a:e3:36:db:2c:12:76:4f:7b:71:06:f1:8d:e0:a4:29:89:4c:
         92:0d:0c:8c:06:0f:90:41:97:5a:a0:cf:db:09:54:32:82:12:
         1d:42:8c:b8:6e:d3:c0:20:0d:79:ff:12:e1:11:42:14:ca:12:
         4a:1e:6a:95:8f:99:c6:35:07:d7:67:5d:22:c7:9b:84:81:01:
         2f:20:c3:99:f9:e1:1a:e0:c3:3b:74:80:00:4d:e3:f1:cc:b3:
         3e:8c:60:a0:c3:d3:db:1c:43:e1:bf:3b:c7:45:61:5e:86:5e:
         da:ec:f8:c0:9f:67:48:14:8e:9a:de:18:2b:c9:ef:ad:c5:9a:
         f2:8a:ba:f7:7d:78:00:cd:a6:ec:24:35:a0:0e:da:fe:7c:18:
         9f:29:a5:a9:8a:45:7a:5a:3d:59:6b:ad:30:1e:ee:ee:36:71:
         75:5b:0c:4a:10:c5:59:0a:94:23:30:e0:25:b5:34:f8:b1:51:
         5f:45:f6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:33 2025 by rpki-client