Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e322e302f32332d3233203d3e203631373937.roa
File:                     3134332e3133372e322e302f32332d3233203d3e203631373937.roa (raw, json)
Hash identifier:          VoDdSr82J44IX02Z/mSyaeWs8fUmYYdKqPgq6rniFNQ=
Subject key identifier:   7F:E7:33:25:30:2F:AE:43:DD:F9:A6:06:20:F4:E8:CF:21:E4:95:A9
Certificate issuer:       /CN=698DD058CC44A7087C5B128356D10FB024C7D778
Certificate serial:       4A2A1A9A0FB1CF309E6E91A0F9C74F45674AB6DC
Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e322e302f32332d3233203d3e203631373937.roa
Signing time:             Mon 03 Nov 2025 15:07:15 +0000
ROA not before:           Mon 03 Nov 2025 15:02:15 +0000
ROA not after:            Mon 02 Nov 2026 15:07:15 +0000
asID:                     61797
IP address blocks:        143.137.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2a:1a:9a:0f:b1:cf:30:9e:6e:91:a0:f9:c7:4f:45:67:4a:b6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778
        Validity
            Not Before: Nov  3 15:02:15 2025 GMT
            Not After : Nov  2 15:07:15 2026 GMT
        Subject: CN=7FE73325302FAE43DDF9A60620F4E8CF21E495A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:12:21:cd:c0:6b:44:ea:9d:dd:03:12:85:
                    44:4d:01:58:05:92:f7:b3:ea:d5:40:90:9e:82:9b:
                    bd:0a:21:f6:b8:bb:40:5b:21:d1:81:96:34:a8:3a:
                    3d:ee:ff:43:8d:a7:45:c8:de:6a:a8:4b:db:87:18:
                    e8:40:df:95:e9:11:dd:24:22:32:a1:81:58:1a:10:
                    bc:b6:f0:b0:f0:2f:6a:a7:b7:a2:0d:ba:17:20:df:
                    fa:54:bd:99:46:ba:55:d0:a4:f6:e0:29:d2:21:b4:
                    31:0a:86:00:e5:77:4c:cd:85:f4:03:74:a9:1e:df:
                    43:a3:99:b8:9a:f5:6a:a7:5e:ba:34:06:ee:d1:a1:
                    8e:1f:79:14:39:70:16:5e:04:60:51:2b:5b:34:ce:
                    25:02:fb:0c:21:37:db:73:54:7f:c2:a6:ea:09:ea:
                    be:33:43:9a:7f:6e:43:e8:43:f9:90:ca:b4:05:58:
                    af:97:04:9f:63:5c:55:67:c8:3f:4f:9d:38:ea:07:
                    ad:3f:26:a6:eb:ab:aa:b1:27:b3:1b:1c:70:7a:53:
                    16:6e:1f:21:34:1b:20:dc:32:8c:be:11:a8:b7:67:
                    4c:ea:25:e7:f6:cc:44:48:2f:a0:25:6d:86:45:4b:
                    68:63:f4:20:e3:95:f2:1c:b5:59:be:d4:2f:fb:41:
                    ce:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E7:33:25:30:2F:AE:43:DD:F9:A6:06:20:F4:E8:CF:21:E4:95:A9
            X509v3 Authority Key Identifier:
                keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e322e302f32332d3233203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:ec:0c:5e:3c:93:31:c6:24:53:98:16:5e:9d:82:5a:15:fb:
         d3:a1:48:e1:59:37:36:1e:b2:99:80:21:81:66:aa:b8:d3:ce:
         5c:51:6f:d7:4a:c2:53:90:85:fb:e6:b8:3c:81:bc:97:db:e9:
         7e:8d:b6:0e:56:55:de:8c:53:ca:d0:09:6b:9d:cd:5b:c4:9a:
         c4:44:7d:67:0a:4d:5f:fb:2d:ea:45:33:21:46:e1:d7:f8:9d:
         81:c6:8d:bb:7d:f2:3d:d0:8d:51:c4:a6:cf:f7:c3:ed:31:74:
         1c:b2:79:10:f7:ef:67:99:63:36:e2:b8:7f:d8:cf:29:e5:6a:
         0c:17:d2:f1:39:93:37:1d:42:b1:9f:2a:06:54:27:f9:f4:7c:
         7b:0e:8f:b1:61:10:34:67:06:3d:5a:0c:52:a9:fe:93:d6:08:
         31:3b:70:49:12:f5:99:14:1f:cc:d8:e5:7f:5a:46:c3:64:22:
         ea:48:ab:2f:37:e2:d3:fd:91:03:8a:45:ec:a5:f5:27:1c:81:
         f7:87:90:8d:07:af:70:82:2d:e7:fb:1a:20:66:14:7c:aa:c7:
         b3:93:a9:39:8d:75:62:4c:45:96:22:68:a5:73:48:6a:23:be:
         70:86:ae:96:bc:94:8a:75:5f:8a:51:81:86:72:33:99:fb:d8:
         28:a3:be:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:46:58 2025 by rpki-client