Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3136382e302f32322d3232203d3e20323636333032.roa
File:                     3137302e37392e3136382e302f32322d3232203d3e20323636333032.roa (raw, json)
Hash identifier:          RKNZ52xvEQIRc6tjbCkbB2w4nMIkEQltxS2VPlOBL34=
Subject key identifier:   FE:E6:2C:8F:A6:CE:2D:ED:E0:C6:64:F6:BA:8A:1F:6B:18:A2:8D:42
Certificate issuer:       /CN=180D5A022BF9B64C2D3DB9A99B100E4173AF515C
Certificate serial:       7D6361DC4A5732AAC2187B1C299D51A3C702C83C
Authority key identifier: 18:0D:5A:02:2B:F9:B6:4C:2D:3D:B9:A9:9B:10:0E:41:73:AF:51:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3136382e302f32322d3232203d3e20323636333032.roa
Signing time:             Tue 08 Jul 2025 13:58:13 +0000
ROA not before:           Tue 08 Jul 2025 13:53:13 +0000
ROA not after:            Tue 07 Jul 2026 13:58:13 +0000
asID:                     266302
IP address blocks:        170.79.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.crl
                          rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:63:61:dc:4a:57:32:aa:c2:18:7b:1c:29:9d:51:a3:c7:02:c8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=180D5A022BF9B64C2D3DB9A99B100E4173AF515C
        Validity
            Not Before: Jul  8 13:53:13 2025 GMT
            Not After : Jul  7 13:58:13 2026 GMT
        Subject: CN=FEE62C8FA6CE2DEDE0C664F6BA8A1F6B18A28D42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:98:b9:a3:09:45:e5:f0:2b:3e:b0:c8:41:
                    b5:d7:cb:0c:10:6a:d2:38:7d:25:d7:68:99:9f:93:
                    dd:cb:24:ab:f1:1b:92:a3:e0:63:19:fa:e5:b3:b0:
                    8e:99:d0:fa:42:82:19:a8:50:26:f9:b7:f0:73:28:
                    b2:2a:15:41:bd:32:5b:e7:66:da:53:a2:43:20:b8:
                    5d:5b:78:83:92:a1:91:e9:f7:54:08:0d:35:88:b1:
                    2a:8b:8c:ce:77:d5:1d:f5:8d:d1:7c:59:75:d2:d8:
                    13:ec:3f:c1:a8:58:03:f9:16:78:f5:9f:e2:fd:3e:
                    cc:34:12:4c:bd:3e:bb:b2:c8:48:7e:46:8e:cd:c0:
                    90:8e:43:6c:e6:78:bf:f8:1e:07:2f:1a:46:2a:e3:
                    18:72:fd:de:97:80:46:fe:b3:19:95:c5:00:07:a1:
                    0f:58:47:31:56:84:1d:68:d8:97:74:bd:62:0a:b0:
                    41:ae:0d:55:dc:a1:47:dd:ae:f7:af:28:fa:20:a6:
                    9f:7c:54:27:d0:98:54:3e:c2:a2:9b:39:67:a2:45:
                    73:c0:b8:00:20:f1:19:5e:7f:f1:26:e5:4b:34:17:
                    e9:60:bd:ad:17:80:c4:13:2a:10:47:79:8f:d6:15:
                    03:59:91:f5:44:d6:38:ac:87:84:07:1a:12:95:47:
                    42:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E6:2C:8F:A6:CE:2D:ED:E0:C6:64:F6:BA:8A:1F:6B:18:A2:8D:42
            X509v3 Authority Key Identifier:
                keyid:18:0D:5A:02:2B:F9:B6:4C:2D:3D:B9:A9:9B:10:0E:41:73:AF:51:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/3137302e37392e3136382e302f32322d3232203d3e20323636333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:2c:76:e8:bd:e8:25:58:b0:89:47:38:7e:69:35:95:74:d6:
         13:01:90:e3:bd:5e:64:f8:16:30:ad:df:95:74:eb:e6:1f:4e:
         c3:17:97:10:0a:bc:17:9c:52:95:cb:2b:0d:12:c9:be:b2:8e:
         a5:3a:88:64:47:aa:22:41:13:e7:76:df:3b:87:e3:3a:91:61:
         73:8a:50:aa:f3:c7:3d:46:ad:9a:40:e4:76:ae:97:90:40:92:
         9c:fd:fe:ca:9b:98:b6:8a:c2:2e:32:03:39:11:a5:be:f1:6e:
         31:fc:bd:38:f5:df:de:64:59:ad:4c:6b:8c:b3:42:29:a9:d9:
         83:39:46:5c:bf:5b:5e:08:61:76:d3:83:f0:bc:1e:61:cd:9e:
         e9:d0:7e:3e:70:4a:8e:a6:03:bf:62:e3:55:c0:6a:6e:f5:bc:
         e5:96:98:a3:80:f8:a7:ed:ed:32:6d:19:00:2e:31:58:4f:0e:
         d1:4c:2f:ac:da:ab:8e:2c:b0:28:f4:a1:e6:32:ee:f9:f4:24:
         c0:f8:fd:c1:2f:46:f3:e4:ed:6d:eb:7c:ff:71:6d:18:c3:46:
         b6:4f:c1:41:8e:81:17:9d:44:47:eb:46:db:f3:69:d8:03:bd:
         b9:0f:c5:ce:d9:67:8f:90:0d:eb:90:73:b4:72:f9:9b:21:8b:
         2f:9c:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:37:48 2025 by rpki-client