Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233352e302f32342d3234203d3e203631373937.roa
File:                     3137302e3234362e3233352e302f32342d3234203d3e203631373937.roa (raw, json)
Hash identifier:          0Xu7FZQWXQ73LoHbMCPoRgxBA5p1dp6k4dfyteq7HwY=
Subject key identifier:   21:AE:19:33:02:25:B2:DD:DF:D8:AB:F5:D8:15:28:39:B7:A9:E9:4D
Certificate issuer:       /CN=698DD058CC44A7087C5B128356D10FB024C7D778
Certificate serial:       799853AF465874A29B6BA7D2554A081047EB2439
Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233352e302f32342d3234203d3e203631373937.roa
Signing time:             Mon 03 Nov 2025 15:07:20 +0000
ROA not before:           Mon 03 Nov 2025 15:02:20 +0000
ROA not after:            Mon 02 Nov 2026 15:07:20 +0000
asID:                     61797
IP address blocks:        170.246.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:98:53:af:46:58:74:a2:9b:6b:a7:d2:55:4a:08:10:47:eb:24:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778
        Validity
            Not Before: Nov  3 15:02:20 2025 GMT
            Not After : Nov  2 15:07:20 2026 GMT
        Subject: CN=21AE19330225B2DDDFD8ABF5D8152839B7A9E94D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:2c:1c:08:b9:25:37:a6:17:4f:85:00:0e:
                    86:49:93:b6:52:90:04:69:8e:ce:40:be:03:8c:15:
                    52:81:f1:53:26:44:e3:79:f2:a0:54:1d:45:2b:3d:
                    54:0d:5b:ac:4a:48:c8:83:1c:a2:93:06:19:b9:17:
                    0f:97:22:6b:f5:f3:19:34:33:8e:c5:39:2b:40:75:
                    d0:5b:7d:31:d4:5a:f9:92:bd:06:b4:2f:f6:4d:58:
                    cd:e3:0c:a9:89:08:04:dc:82:95:bd:ed:4a:74:ae:
                    e0:6e:1a:f5:b7:e7:38:20:70:5d:db:30:a6:a4:68:
                    ae:23:0c:6b:d0:ff:4b:09:00:3d:3a:05:4c:f4:58:
                    b2:54:50:be:70:82:ae:eb:43:76:8d:82:b7:dc:56:
                    4a:9d:ba:c6:c4:2d:49:5c:a3:3b:80:2c:b9:cd:3e:
                    e1:12:c8:af:79:bf:0f:12:b4:63:d5:d1:9a:fe:35:
                    91:3f:e4:76:9d:b0:ec:5d:25:8d:a7:58:dd:d2:76:
                    c7:77:5b:cd:58:df:75:30:74:17:5a:0d:fd:15:58:
                    ec:44:28:06:0e:56:35:a7:07:3f:cb:60:22:72:33:
                    4f:12:96:3b:dc:8f:76:01:63:98:4d:a6:41:82:e8:
                    40:5e:cc:d5:9f:a2:81:5b:bc:63:a9:83:fc:6e:dc:
                    ff:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AE:19:33:02:25:B2:DD:DF:D8:AB:F5:D8:15:28:39:B7:A9:E9:4D
            X509v3 Authority Key Identifier:
                keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233352e302f32342d3234203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:19:c5:49:da:61:48:19:76:60:ef:fa:46:1d:3e:f3:c4:6f:
         86:b9:82:4c:b0:c2:a6:b3:52:18:9c:a6:66:26:5f:f0:67:fc:
         ba:cc:ac:2a:9d:4f:b7:1a:50:c7:ff:c0:36:b4:09:72:94:15:
         03:09:f3:c0:c2:db:10:34:f5:78:fd:8a:2c:05:d0:2b:e4:9c:
         37:24:1c:69:4d:86:e3:11:e9:69:d2:b4:c5:ed:31:5a:c8:3a:
         f2:f0:18:53:10:25:58:93:cf:3b:23:be:cc:2f:b0:ca:5c:37:
         e0:2f:82:0f:af:c4:92:17:06:86:d5:97:e3:b6:b5:3d:01:9c:
         27:3e:a4:8c:26:04:3c:10:9b:77:36:17:8c:99:4f:e7:10:68:
         b6:be:06:ae:07:7f:74:07:fc:b8:08:0d:9a:5b:a5:c7:f6:15:
         d3:a3:62:14:b1:59:ba:35:72:85:98:63:0e:e5:4f:bf:db:87:
         6e:02:11:10:ec:d2:32:f1:1a:a0:d7:f8:a7:94:a1:3a:f6:9f:
         29:a5:22:d5:30:05:b0:07:d4:1e:49:0a:5a:b1:d8:fb:60:89:
         30:78:07:86:6c:3c:1b:73:c5:92:5a:05:49:89:cf:d7:d2:ce:
         65:48:c5:16:ee:23:bb:92:05:91:69:a6:5b:c8:95:f2:98:cf:
         79:bb:e1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:37:26 2025 by rpki-client