Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137302e3233332e3133342e302f32332d3233203d3e20323632343730.roa
File:                     3137302e3233332e3133342e302f32332d3233203d3e20323632343730.roa (raw, json)
Hash identifier:          4vve+10KbtRLnXgtWe1sf7NoOk6TIBud4gAChzw4Abw=
Subject key identifier:   08:12:DE:BB:00:DF:8D:CB:07:93:7B:EF:C3:02:4A:F9:6C:0E:A0:97
Certificate issuer:       /CN=970837BD94B7C2456C803FB74190973C3A36E88E
Certificate serial:       7BC37CA1CCD6A9CB92163A01A27C7B6A63EF6891
Authority key identifier: 97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137302e3233332e3133342e302f32332d3233203d3e20323632343730.roa
Signing time:             Sat 26 Jul 2025 10:33:05 +0000
ROA not before:           Sat 26 Jul 2025 10:28:05 +0000
ROA not after:            Sat 25 Jul 2026 10:33:05 +0000
asID:                     262470
IP address blocks:        170.233.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl
                          rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c3:7c:a1:cc:d6:a9:cb:92:16:3a:01:a2:7c:7b:6a:63:ef:68:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970837BD94B7C2456C803FB74190973C3A36E88E
        Validity
            Not Before: Jul 26 10:28:05 2025 GMT
            Not After : Jul 25 10:33:05 2026 GMT
        Subject: CN=0812DEBB00DF8DCB07937BEFC3024AF96C0EA097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:39:51:2d:8f:fe:8e:da:38:18:f2:fd:62:
                    04:d6:0c:3b:5a:a7:52:d7:e9:f4:aa:4b:76:54:eb:
                    55:55:9a:25:17:20:4e:58:db:25:e9:c0:1b:11:3b:
                    d8:55:8c:ac:2e:85:c9:74:14:a7:3e:c2:bd:71:26:
                    f1:33:8f:04:e5:93:61:95:47:82:5e:25:1c:05:d8:
                    fe:92:fa:9e:40:a7:af:a8:2d:f0:f7:dd:59:14:85:
                    d1:53:81:4b:14:c3:a5:9a:d7:29:f4:b7:6f:75:0f:
                    f4:67:59:1c:95:f1:c8:87:6c:c7:37:6d:7d:85:5c:
                    db:5d:61:65:87:2c:c1:98:c8:a9:5e:0f:2e:d1:f9:
                    f5:da:04:59:b4:e3:5b:fc:6f:58:1f:bd:4b:fe:78:
                    69:73:79:14:24:ea:e7:cb:f4:99:b0:11:e1:24:73:
                    83:12:4e:bf:b7:07:b5:19:76:a0:13:0f:d5:27:1d:
                    1a:54:d8:19:bf:7d:ad:30:25:18:8c:ba:bd:6d:da:
                    5f:8e:e5:e0:5b:4d:51:a2:3a:32:88:84:5a:7d:5e:
                    ec:04:c3:2e:7b:a1:b7:55:55:a6:da:0e:8d:00:db:
                    b7:63:80:3f:75:0c:57:27:a5:e8:9b:35:51:14:2c:
                    16:fe:b2:18:52:de:38:78:20:3a:37:04:55:66:1d:
                    1a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:12:DE:BB:00:DF:8D:CB:07:93:7B:EF:C3:02:4A:F9:6C:0E:A0:97
            X509v3 Authority Key Identifier:
                keyid:97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137302e3233332e3133342e302f32332d3233203d3e20323632343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:74:1e:69:fb:97:65:cb:97:02:a3:8b:19:ec:62:f9:8e:7b:
         52:ab:53:59:24:79:57:2c:fc:1d:08:cf:49:14:68:e7:8c:cd:
         f6:cd:50:26:1d:99:13:9f:0b:28:35:47:db:2c:b8:fc:ca:cf:
         f7:1e:63:8a:4d:99:0f:b0:2d:b4:80:e1:f6:4d:72:0e:8a:c7:
         42:e8:88:99:66:10:2b:c9:a6:9b:07:a0:9b:42:c0:8a:f9:55:
         7f:a2:3b:63:86:65:cb:be:6f:a1:68:22:bf:37:a7:81:d9:5d:
         3f:a6:ab:48:ab:5e:72:ec:93:dd:26:27:32:bb:66:aa:3d:71:
         57:09:42:28:4c:41:ba:a4:83:7f:fd:2f:be:91:ca:34:e9:82:
         b3:2d:86:42:a3:65:1a:2e:e6:f8:ff:00:12:f6:74:fd:00:00:
         73:70:82:61:81:07:1b:57:98:c5:58:0f:30:2d:74:50:ad:cf:
         9f:6e:09:62:02:e6:fb:49:28:11:65:92:f7:6d:d8:af:18:e4:
         89:f1:d0:95:8f:70:8d:b9:89:89:d3:a8:18:0f:83:26:0c:db:
         95:2a:19:c2:1c:2e:45:7f:02:e3:81:98:8c:ca:08:eb:5f:cf:
         b8:45:98:d3:a0:30:67:f2:1c:91:ed:b8:cd:41:d7:79:ad:04:
         9d:b8:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:45:18 2025 by rpki-client