Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32342d3234203d3e20323730363330.roa
File:                     3137372e37302e3234342e302f32342d3234203d3e20323730363330.roa (raw, json)
Hash identifier:          y1cW+ptQUnexeSPoLRzfy4U00Qi0eHhZdtBNZAVr/MM=
Subject key identifier:   61:7B:46:F6:D3:E5:AD:67:2D:D4:4A:0B:8C:E3:C9:43:6D:AF:F5:E6
Certificate issuer:       /CN=3F7549EDF416F00B8C66D00FDF39133770716DFF
Certificate serial:       691761BFCD81CE96E160E415DEACB5730B9D36A6
Authority key identifier: 3F:75:49:ED:F4:16:F0:0B:8C:66:D0:0F:DF:39:13:37:70:71:6D:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32342d3234203d3e20323730363330.roa
Signing time:             Wed 16 Jul 2025 21:15:01 +0000
ROA not before:           Wed 16 Jul 2025 21:10:01 +0000
ROA not after:            Wed 15 Jul 2026 21:15:01 +0000
asID:                     270630
IP address blocks:        177.70.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.crl
                          rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 16:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:17:61:bf:cd:81:ce:96:e1:60:e4:15:de:ac:b5:73:0b:9d:36:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F7549EDF416F00B8C66D00FDF39133770716DFF
        Validity
            Not Before: Jul 16 21:10:01 2025 GMT
            Not After : Jul 15 21:15:01 2026 GMT
        Subject: CN=617B46F6D3E5AD672DD44A0B8CE3C9436DAFF5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:92:91:33:76:44:c6:08:e7:f1:44:cb:89:
                    b7:c8:fd:d3:ed:e3:a7:60:b5:a0:65:41:6f:99:f7:
                    30:16:30:de:0f:6f:2d:f8:32:15:ee:1e:dc:73:9f:
                    df:66:c3:db:ca:bd:28:84:07:db:db:9c:b4:64:13:
                    c8:93:94:ac:15:4a:29:12:a9:a2:20:82:a1:70:70:
                    9e:d6:61:cc:3c:a3:81:9c:dd:17:b9:92:2b:22:1e:
                    c6:91:97:67:2b:1d:33:68:71:82:05:b8:8a:41:c1:
                    81:94:02:3f:99:1f:35:15:0e:29:e6:f2:0b:d3:ba:
                    cb:28:51:ea:69:d1:7d:cb:04:3b:70:f3:2b:11:58:
                    1b:07:28:0f:66:78:b8:93:f9:21:a9:5c:b9:3e:e0:
                    1d:52:27:ed:3e:0b:36:64:75:3c:b9:df:ff:a9:48:
                    a5:14:6e:73:bd:25:e2:cc:fa:22:5e:15:d7:16:b4:
                    0c:ee:4f:7b:77:af:b4:93:34:73:f5:aa:cb:34:73:
                    db:da:c4:24:ce:49:76:c0:6c:d3:0f:8a:2c:08:65:
                    60:87:3c:16:92:4e:26:a1:07:2c:43:03:65:0f:06:
                    ca:f8:08:ea:10:71:1f:c3:cd:7e:a4:66:d9:04:2a:
                    d1:33:3e:b2:64:ad:3e:1a:0f:8c:da:01:db:b7:ee:
                    a9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7B:46:F6:D3:E5:AD:67:2D:D4:4A:0B:8C:E3:C9:43:6D:AF:F5:E6
            X509v3 Authority Key Identifier:
                keyid:3F:75:49:ED:F4:16:F0:0B:8C:66:D0:0F:DF:39:13:37:70:71:6D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32342d3234203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:04:61:f9:b0:fd:52:54:26:f7:3f:d4:76:e4:c6:da:9c:83:
         88:ae:4b:ee:79:61:34:2e:1c:11:29:a0:39:43:cd:95:76:b7:
         09:25:75:07:87:9e:e9:cf:ce:82:06:f7:63:e4:33:e5:86:4c:
         ea:51:f3:b3:96:33:9c:ea:58:b9:3e:65:23:30:c0:eb:d4:82:
         87:de:c8:a4:09:ca:23:0a:6d:c9:0a:74:5a:e4:09:70:0d:39:
         b1:32:59:12:1a:92:45:9a:fa:c7:64:84:99:cc:f0:72:2c:49:
         ca:6b:c1:eb:a1:84:6e:a1:c3:3f:9e:cc:61:59:5a:89:d5:f3:
         2c:30:ba:c7:c3:f5:f2:d4:d4:d5:19:5b:91:87:ab:6d:5b:38:
         54:a5:4d:9c:3c:0e:24:e2:9e:09:75:83:9f:ad:1d:38:d3:8e:
         5b:8d:cd:e4:88:56:46:14:84:e7:96:80:6b:0c:4f:1d:51:73:
         2b:59:e5:04:97:5a:e3:3d:0e:52:f8:f4:30:7e:82:52:d5:63:
         eb:3b:54:3a:75:85:39:a6:ad:f7:5e:f3:55:f1:2a:aa:cf:f2:
         35:a2:60:f6:ca:c5:e9:3e:e5:f0:bd:d4:83:c5:71:fa:6d:1b:
         3c:db:2f:57:e0:f2:cd:d0:1e:5e:f3:a9:51:ed:03:17:76:12:
         ff:b5:0d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:20:54 2025 by rpki-client