Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3133312e3235352e3137302e302f32332d3233203d3e20323632343730.roa
File:                     3133312e3235352e3137302e302f32332d3233203d3e20323632343730.roa (raw, json)
Hash identifier:          /qcF46WW0k9cbCV4TO5mvuIDOaiKfcfGmTDlq/yIgsU=
Subject key identifier:   38:8C:DF:3B:2D:FD:34:3F:02:BF:FC:2D:1F:09:39:EF:99:0A:FF:0A
Certificate issuer:       /CN=970837BD94B7C2456C803FB74190973C3A36E88E
Certificate serial:       15FC5B483959222A188F8388F1AC578F89904016
Authority key identifier: 97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3133312e3235352e3137302e302f32332d3233203d3e20323632343730.roa
Signing time:             Sat 26 Jul 2025 10:35:10 +0000
ROA not before:           Sat 26 Jul 2025 10:30:10 +0000
ROA not after:            Sat 25 Jul 2026 10:35:10 +0000
asID:                     262470
IP address blocks:        131.255.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl
                          rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 21:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fc:5b:48:39:59:22:2a:18:8f:83:88:f1:ac:57:8f:89:90:40:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970837BD94B7C2456C803FB74190973C3A36E88E
        Validity
            Not Before: Jul 26 10:30:10 2025 GMT
            Not After : Jul 25 10:35:10 2026 GMT
        Subject: CN=388CDF3B2DFD343F02BFFC2D1F0939EF990AFF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:a8:70:4e:c8:df:87:2c:6d:fc:bf:9f:40:
                    3e:7f:47:fa:9e:5a:b5:3e:b7:ad:1c:73:89:17:8f:
                    fe:40:20:15:65:64:20:c6:22:f2:c5:cd:8a:4e:e9:
                    81:bc:a3:6a:ad:11:08:75:c3:8c:33:bd:90:e0:88:
                    0f:f6:7f:c7:31:2b:3f:dc:66:01:57:c1:b9:70:e4:
                    7c:ec:6c:df:49:0a:24:1d:cb:08:9e:72:2a:b8:08:
                    c4:2a:fb:45:bf:15:13:cb:24:27:c3:91:a7:7a:23:
                    c9:fa:97:2d:eb:f4:09:83:10:21:93:7e:b0:a3:fe:
                    5a:9f:86:69:45:85:ad:de:3b:09:b2:de:07:27:02:
                    df:92:bf:8d:86:e8:ed:80:fa:ca:64:d2:38:82:b0:
                    5a:58:d0:a0:9e:a3:b7:4e:d3:75:b3:2e:bc:00:28:
                    dc:25:60:0e:5c:6a:36:74:23:d9:26:c2:ac:9a:2a:
                    93:52:eb:05:46:f9:f7:8d:d7:7a:f2:b5:80:eb:34:
                    07:5f:be:89:6a:3c:fe:37:ee:5d:c5:93:f6:6c:03:
                    54:46:a2:1a:21:96:9c:4a:8b:dc:2e:ee:6b:1c:5c:
                    57:1e:dd:87:e4:04:b6:80:60:01:98:f7:4f:c9:c1:
                    f0:42:be:45:16:91:28:78:00:66:de:7c:6b:ae:4c:
                    ee:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8C:DF:3B:2D:FD:34:3F:02:BF:FC:2D:1F:09:39:EF:99:0A:FF:0A
            X509v3 Authority Key Identifier:
                keyid:97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3133312e3235352e3137302e302f32332d3233203d3e20323632343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:1d:49:9f:dd:b1:9b:52:ac:db:aa:50:6a:8e:4a:a9:c8:63:
         b3:97:06:3c:61:46:ed:a6:0e:36:5c:56:ca:b4:ad:cf:40:9b:
         52:18:a1:e5:fa:a1:e8:78:60:a1:20:75:d8:f7:92:10:39:ed:
         62:45:74:30:1c:27:df:e6:98:48:b3:0f:8c:88:4e:d4:0a:f3:
         f4:74:76:aa:57:5c:e0:da:22:c2:ad:b0:af:48:0a:da:bc:90:
         2d:0e:60:b6:99:79:2b:4b:da:b1:ed:6f:41:1c:2d:ce:c0:28:
         10:8a:82:7c:b7:d8:84:69:6b:2b:35:67:30:90:73:19:73:4f:
         83:85:ad:06:6c:b7:63:cb:a2:b1:5d:b0:d8:e6:84:e9:9d:be:
         c9:06:dc:96:8c:16:3b:19:c4:d1:f1:18:42:71:99:f5:36:60:
         2a:90:88:b6:4a:bc:d2:0a:1a:a3:7f:70:c5:21:39:18:7b:9a:
         c1:4b:d3:65:5d:38:ec:dc:55:2a:dc:f2:ad:b6:cd:d8:4c:56:
         10:47:a7:8e:ef:a7:f1:34:03:e4:ae:75:bb:c8:59:d8:f2:5e:
         d6:1c:6b:9b:25:83:b8:fd:0c:f5:4d:55:13:da:58:02:73:fb:
         a8:a1:10:f5:ab:ce:11:f0:58:4b:a5:6c:da:ed:77:01:f1:0c:
         1f:f0:13:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:08:35 2025 by rpki-client