Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233342e302f32332d3233203d3e203631373937.roa
File:                     3137302e3234362e3233342e302f32332d3233203d3e203631373937.roa (raw, json)
Hash identifier:          j9/8vI9lBLEXY8Uq9TpVtxydUO6KA3MsirtPSt8YD2o=
Subject key identifier:   17:6F:F4:96:CB:40:A5:D8:72:4C:22:D4:3D:8B:C5:03:B3:8F:9E:6A
Certificate issuer:       /CN=698DD058CC44A7087C5B128356D10FB024C7D778
Certificate serial:       562868764B952ECD656A847B52972DCDD8A3D1AC
Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233342e302f32332d3233203d3e203631373937.roa
Signing time:             Mon 03 Nov 2025 15:07:21 +0000
ROA not before:           Mon 03 Nov 2025 15:02:21 +0000
ROA not after:            Mon 02 Nov 2026 15:07:21 +0000
asID:                     61797
IP address blocks:        170.246.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:28:68:76:4b:95:2e:cd:65:6a:84:7b:52:97:2d:cd:d8:a3:d1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778
        Validity
            Not Before: Nov  3 15:02:21 2025 GMT
            Not After : Nov  2 15:07:21 2026 GMT
        Subject: CN=176FF496CB40A5D8724C22D43D8BC503B38F9E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:5b:ef:f8:a6:8a:1c:5e:ca:97:62:c0:1c:
                    05:e1:00:3e:58:74:81:f6:f3:7b:66:a6:04:42:32:
                    f4:33:42:21:f6:0c:00:4e:8a:8a:ed:ef:c1:8d:7c:
                    19:41:79:41:46:c6:94:b8:ce:a3:92:83:9a:54:fb:
                    a5:e0:59:ea:cb:96:67:fb:e7:cf:09:f3:dc:c7:87:
                    de:42:d8:b6:23:8c:dd:f8:89:39:ab:61:6a:5c:cf:
                    a6:15:a5:71:de:67:5f:32:45:f2:f6:fc:0b:a7:ef:
                    5f:af:35:9b:00:36:d0:30:f2:56:c2:99:31:b4:e6:
                    69:52:df:93:54:10:3b:4c:42:32:50:b6:df:b7:49:
                    27:84:97:6a:f4:45:60:0e:d8:f0:f5:d1:06:f0:dd:
                    fe:bb:56:75:42:e0:22:1f:53:f0:70:6f:36:3b:c3:
                    8f:74:99:97:4a:14:3d:21:84:ac:fb:6d:83:92:3a:
                    da:22:f1:99:fb:08:06:aa:ff:5f:41:06:51:fd:f3:
                    ed:e7:cc:ef:af:84:ce:da:e9:6c:b3:63:98:52:e8:
                    bf:19:53:a1:ff:32:62:e7:9b:98:40:42:90:19:c7:
                    b4:b3:d0:6a:57:de:5e:82:7a:34:2f:5d:66:3d:d9:
                    5b:ab:25:23:f0:f1:ae:91:8f:e6:34:09:04:01:32:
                    fa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6F:F4:96:CB:40:A5:D8:72:4C:22:D4:3D:8B:C5:03:B3:8F:9E:6A
            X509v3 Authority Key Identifier:
                keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233342e302f32332d3233203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:82:c5:a4:4b:30:ab:d7:92:64:c2:1b:75:41:8f:83:0b:e0:
         7f:dc:62:ec:3c:cc:6e:de:d7:41:c9:1f:0a:7f:8a:44:d1:d9:
         5b:0e:d2:7c:1a:f3:01:62:14:96:db:96:9b:52:f4:78:fa:a6:
         76:9e:ef:66:59:26:a7:8d:29:78:92:5d:c3:79:c2:c1:5c:bc:
         5a:06:9b:35:76:b2:28:b5:ae:0f:16:2e:3c:94:9e:b5:36:86:
         43:14:91:91:94:f7:8d:66:9b:b6:40:7c:96:84:51:e8:52:b6:
         fb:51:83:b7:2b:24:02:e2:aa:05:d5:31:89:c9:7e:27:1f:68:
         e9:bf:5f:29:ae:1e:09:04:8a:1b:2b:f9:db:64:30:29:15:5a:
         b9:4b:dc:08:b2:42:76:f8:d8:85:31:9a:b7:0d:65:99:29:e1:
         97:ce:31:4e:00:5d:12:85:bc:9d:d8:bf:fc:7d:c2:b1:da:af:
         c3:7e:be:b2:69:87:ae:da:62:50:4a:62:4c:e3:d0:92:0f:b1:
         0a:69:46:36:a0:f9:10:9f:3b:62:ce:c9:0e:aa:99:96:d5:03:
         71:ca:db:3e:65:ef:3c:03:d9:5d:c0:26:0d:2c:03:d1:71:f3:
         0f:bf:ce:e1:74:b2:dc:2b:db:9a:e5:77:18:f6:83:ff:6f:eb:
         e1:de:bd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:37:45 2025 by rpki-client