Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3133312e3235352e3136382e302f32332d3233203d3e20323632343730.roa
File:                     3133312e3235352e3136382e302f32332d3233203d3e20323632343730.roa (raw, json)
Hash identifier:          U9/4iymP/0L3mVIVjUrx/nw23IDNtaqIvQgEz9oMpRE=
Subject key identifier:   12:7C:76:C2:AD:B7:60:72:9D:DB:03:25:04:33:1C:6C:02:65:67:55
Certificate issuer:       /CN=970837BD94B7C2456C803FB74190973C3A36E88E
Certificate serial:       66F67D4A798C541FD8136F3389637B9CC0B467BD
Authority key identifier: 97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3133312e3235352e3136382e302f32332d3233203d3e20323632343730.roa
Signing time:             Sat 26 Jul 2025 10:35:02 +0000
ROA not before:           Sat 26 Jul 2025 10:30:02 +0000
ROA not after:            Sat 25 Jul 2026 10:35:02 +0000
asID:                     262470
IP address blocks:        131.255.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl
                          rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 21:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f6:7d:4a:79:8c:54:1f:d8:13:6f:33:89:63:7b:9c:c0:b4:67:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970837BD94B7C2456C803FB74190973C3A36E88E
        Validity
            Not Before: Jul 26 10:30:02 2025 GMT
            Not After : Jul 25 10:35:02 2026 GMT
        Subject: CN=127C76C2ADB760729DDB032504331C6C02656755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:20:6a:0c:99:64:b7:59:73:ca:bc:03:a2:
                    9e:31:58:0f:f0:91:67:5f:bc:b7:33:3d:3d:2d:b2:
                    0a:e8:0e:fb:8f:a0:2b:c3:b6:55:98:1c:23:93:f4:
                    92:9b:d4:2d:85:0e:1a:26:ac:54:ff:b5:53:94:48:
                    e5:b4:a4:e8:c9:48:1f:74:2e:35:ad:8e:ee:bd:1c:
                    10:93:d4:ff:76:da:19:21:8c:b4:50:fd:6d:84:a5:
                    63:35:93:b9:b3:a7:f7:27:af:9e:ee:32:5e:3e:df:
                    fc:e4:2f:7a:75:27:ff:ca:52:c6:c0:43:e4:44:3b:
                    1d:4f:bd:48:c2:0e:2b:85:79:a1:f1:86:ae:5d:dd:
                    67:1c:62:97:27:62:9e:e6:64:35:c0:95:8f:60:83:
                    1e:b4:39:39:bb:64:6b:22:2c:72:10:a9:0b:52:69:
                    2b:5d:e1:db:db:6b:69:fb:a4:9f:f1:82:82:54:d1:
                    2e:5c:8f:80:92:73:7c:11:22:e9:db:ea:fd:f2:67:
                    e8:3f:6a:fd:1f:0d:4b:0a:5f:88:d4:33:da:fc:0c:
                    fa:2f:3e:b0:fa:fa:7e:b4:81:24:82:2d:eb:d7:e9:
                    2d:63:4b:e4:77:d3:71:36:34:99:db:0f:74:2f:04:
                    8e:d7:e4:b2:60:b5:8c:1b:14:3e:0c:0e:01:83:07:
                    4d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7C:76:C2:AD:B7:60:72:9D:DB:03:25:04:33:1C:6C:02:65:67:55
            X509v3 Authority Key Identifier:
                keyid:97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3133312e3235352e3136382e302f32332d3233203d3e20323632343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:f8:ef:67:c0:d5:08:bf:10:cb:f4:ee:05:e6:b5:52:77:8a:
         f8:e0:7f:3f:c8:d0:97:61:bf:72:2e:f7:e3:14:0f:76:e1:73:
         86:c6:ec:ce:7b:d9:62:c5:c3:8f:f8:d7:81:89:1d:65:eb:68:
         60:b5:6f:48:aa:95:9e:3b:36:28:b3:07:59:09:45:ce:17:6c:
         f6:de:d6:4c:5b:b4:84:f4:9f:67:6a:44:a4:92:5c:dc:49:09:
         1f:cc:b0:29:a2:a4:05:98:f5:16:30:e1:73:1d:f9:0f:69:89:
         52:8c:d6:e3:dc:7c:49:3a:5f:28:a6:93:da:d2:29:00:56:34:
         2b:4c:65:f6:28:45:2c:9b:c4:9b:be:aa:03:67:17:7e:4f:c7:
         06:2c:ef:ce:93:be:99:e1:5e:37:3c:f1:d6:28:7a:71:6f:7f:
         84:20:6f:74:1d:58:c0:cc:e7:b1:5c:02:60:70:fd:2d:bd:3a:
         6d:c2:ea:47:be:14:15:ce:81:94:51:53:f3:01:d5:af:48:bc:
         d3:2c:a7:13:5d:eb:55:19:ba:3f:3e:be:89:62:ca:97:6e:67:
         b7:29:c4:28:e8:78:13:6b:10:7e:ae:f0:b4:7b:97:ae:64:85:
         e2:fe:e8:60:2f:be:81:c1:9b:96:20:85:ed:a9:8b:f4:38:3a:
         04:a8:14:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:47:57 2025 by rpki-client