Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B94A2XbG7XkqzoPZJvT4Pf8tV47EPCGhqFyQ9W3bjuEn/0/3137302e3233392e32342e302f32322d3234203d3e20323634333231.roa
File:                     3137302e3233392e32342e302f32322d3234203d3e20323634333231.roa (raw, json)
Hash identifier:          tNHiJOBOBOFdjbb6swq5mPAf/0zJPi9YoD3BR9LaZKs=
Subject key identifier:   88:04:BC:98:D9:D8:43:18:D7:C9:EC:F4:5C:4B:26:30:2A:61:E7:2D
Certificate issuer:       /CN=59E696BAE5160768BDE69392D8DEFB030D173082
Certificate serial:       06BE72E33188F96AF7F7FA7CE9B55F368566887C
Authority key identifier: 59:E6:96:BA:E5:16:07:68:BD:E6:93:92:D8:DE:FB:03:0D:17:30:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59E696BAE5160768BDE69392D8DEFB030D173082.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B94A2XbG7XkqzoPZJvT4Pf8tV47EPCGhqFyQ9W3bjuEn/0/3137302e3233392e32342e302f32322d3234203d3e20323634333231.roa
Signing time:             Thu 24 Jul 2025 17:42:55 +0000
ROA not before:           Thu 24 Jul 2025 17:37:55 +0000
ROA not after:            Thu 23 Jul 2026 17:42:55 +0000
asID:                     264321
IP address blocks:        170.239.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B94A2XbG7XkqzoPZJvT4Pf8tV47EPCGhqFyQ9W3bjuEn/0/59E696BAE5160768BDE69392D8DEFB030D173082.crl
                          rsync://rpki-repo.registro.br/repo/B94A2XbG7XkqzoPZJvT4Pf8tV47EPCGhqFyQ9W3bjuEn/0/59E696BAE5160768BDE69392D8DEFB030D173082.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59E696BAE5160768BDE69392D8DEFB030D173082.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 22:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:be:72:e3:31:88:f9:6a:f7:f7:fa:7c:e9:b5:5f:36:85:66:88:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E696BAE5160768BDE69392D8DEFB030D173082
        Validity
            Not Before: Jul 24 17:37:55 2025 GMT
            Not After : Jul 23 17:42:55 2026 GMT
        Subject: CN=8804BC98D9D84318D7C9ECF45C4B26302A61E72D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:00:97:1a:e9:4e:25:6a:64:38:49:42:c4:
                    25:44:6a:fd:98:26:13:bf:20:de:23:96:d5:4d:19:
                    45:1a:27:8a:ab:7e:8c:d4:54:a3:92:0d:f1:62:95:
                    8f:c5:79:8f:b6:78:2c:23:c9:1c:04:3f:16:f7:4e:
                    eb:05:01:6d:b5:59:20:da:22:26:25:7a:d8:3a:fb:
                    e6:1e:7b:39:d3:eb:82:2f:58:b8:02:cd:2f:9c:e1:
                    3b:90:45:2e:42:40:0d:52:65:29:2e:28:48:72:1c:
                    d2:82:68:de:a4:99:5e:c2:da:41:b3:24:b1:99:d2:
                    8a:25:1e:aa:9c:d0:c3:d8:d9:65:d6:63:28:da:66:
                    45:0a:f1:31:7b:87:98:2f:57:11:c9:c9:1b:cd:fb:
                    ce:d1:57:b7:89:80:01:14:c0:c3:24:b1:cc:a0:8d:
                    8d:70:ad:17:c9:55:0f:43:fa:20:ce:11:5c:91:aa:
                    db:4b:d8:fc:cb:d0:b4:3c:15:c9:88:f1:bc:8e:bd:
                    e1:e4:01:dd:d8:39:cc:7a:a3:e6:b3:d2:07:78:89:
                    09:26:fd:5b:5a:68:2d:77:67:17:9b:40:9c:06:f0:
                    98:8b:58:f1:d7:fd:f6:25:da:42:d0:65:5a:d0:9f:
                    27:06:73:14:d1:c9:1f:9a:7d:7c:82:c1:4a:e9:55:
                    48:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:04:BC:98:D9:D8:43:18:D7:C9:EC:F4:5C:4B:26:30:2A:61:E7:2D
            X509v3 Authority Key Identifier:
                keyid:59:E6:96:BA:E5:16:07:68:BD:E6:93:92:D8:DE:FB:03:0D:17:30:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B94A2XbG7XkqzoPZJvT4Pf8tV47EPCGhqFyQ9W3bjuEn/0/59E696BAE5160768BDE69392D8DEFB030D173082.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59E696BAE5160768BDE69392D8DEFB030D173082.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B94A2XbG7XkqzoPZJvT4Pf8tV47EPCGhqFyQ9W3bjuEn/0/3137302e3233392e32342e302f32322d3234203d3e20323634333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:83:e5:17:07:84:4f:71:25:f0:d6:c9:c3:5c:a2:a1:00:e5:
         11:0d:8f:d9:37:cb:9c:a7:11:67:87:f6:17:e8:36:d4:76:88:
         4d:ca:a6:fc:80:68:0b:d6:eb:15:bf:43:48:d9:60:6e:e1:c9:
         86:ac:a2:a7:e9:c7:81:dd:04:0d:c0:4d:cd:c3:c6:82:ca:54:
         59:b2:5c:7a:44:04:01:6e:d2:c9:76:3f:7b:01:78:67:32:bf:
         e4:b6:2f:ab:13:89:7f:6a:e5:f0:7a:45:df:b6:1b:9a:38:29:
         83:c0:a6:32:51:13:bf:e2:8f:f8:a5:16:15:75:c6:bb:ce:77:
         63:20:4b:b8:5a:aa:4b:e9:be:bd:d9:c4:22:92:1a:9a:a9:3c:
         9a:1f:f2:00:99:c1:ba:3c:14:a9:58:f4:30:5b:da:df:c0:b7:
         65:b9:c6:71:1d:bb:db:bd:7d:b9:f0:da:89:ab:dd:ba:19:44:
         a7:5e:c5:56:2d:b8:ee:cb:32:b0:da:ad:7d:3f:4d:b6:55:64:
         ff:1c:bf:7b:0f:69:1e:1e:d5:f7:89:66:b3:c2:0e:bf:63:0f:
         d1:ec:78:fe:7f:d3:58:8c:b1:51:4e:78:23:65:c0:c9:1a:9c:
         c4:97:6e:46:37:cc:e3:5f:b2:f1:83:cb:8e:c8:86:30:d7:8f:
         a3:91:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:18 2025 by rpki-client