Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232322e302f32332d3233203d3e20323634313337.roa
File:                     3137302e302e3232322e302f32332d3233203d3e20323634313337.roa (raw, json)
Hash identifier:          QcO8X4l+6e8NCeAjhhKMsTDAHkgfIAgXxcopuF7bPws=
Subject key identifier:   38:AA:F5:36:CB:6E:AF:A0:C8:5F:E8:52:33:2C:C8:2B:B2:65:52:B2
Certificate issuer:       /CN=4D619024AD8A4913FDD5314422929A34F6B4B740
Certificate serial:       05F92D2934FCC4C80D830F15269766E3B9E39869
Authority key identifier: 4D:61:90:24:AD:8A:49:13:FD:D5:31:44:22:92:9A:34:F6:B4:B7:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D619024AD8A4913FDD5314422929A34F6B4B740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232322e302f32332d3233203d3e20323634313337.roa
Signing time:             Tue 04 Nov 2025 12:19:03 +0000
ROA not before:           Tue 04 Nov 2025 12:14:03 +0000
ROA not after:            Tue 03 Nov 2026 12:19:03 +0000
asID:                     264137
IP address blocks:        170.0.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/4D619024AD8A4913FDD5314422929A34F6B4B740.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/4D619024AD8A4913FDD5314422929A34F6B4B740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D619024AD8A4913FDD5314422929A34F6B4B740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f9:2d:29:34:fc:c4:c8:0d:83:0f:15:26:97:66:e3:b9:e3:98:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D619024AD8A4913FDD5314422929A34F6B4B740
        Validity
            Not Before: Nov  4 12:14:03 2025 GMT
            Not After : Nov  3 12:19:03 2026 GMT
        Subject: CN=38AAF536CB6EAFA0C85FE852332CC82BB26552B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:b9:fc:e8:91:1f:37:b1:33:e6:3f:e5:51:
                    b1:46:b3:2b:15:93:fb:ad:a9:1d:58:10:14:7d:da:
                    65:cb:4d:fc:3b:79:b4:6a:7f:76:5e:46:76:fc:c7:
                    f4:02:d6:fb:77:00:31:b4:bc:9a:33:01:79:55:e2:
                    78:1f:6c:e3:c7:43:97:42:60:4d:9c:1f:e6:ce:b3:
                    15:e5:a7:79:4b:9d:fe:42:62:03:ea:44:9f:b1:bc:
                    ec:07:90:04:d6:ed:2e:1f:ad:c0:1d:a1:13:17:84:
                    8e:18:ea:b2:5c:86:f3:20:76:11:a1:0c:d8:8a:b0:
                    03:2f:e8:32:eb:23:79:83:ed:ca:0f:80:f6:76:b8:
                    f6:83:5a:d2:5f:28:03:f9:a2:b3:4b:74:f4:56:ad:
                    56:b4:b7:6a:6f:6b:4c:87:f5:06:0c:bb:75:8c:dd:
                    4a:1b:1b:93:3c:21:19:23:af:30:6e:a4:b3:00:30:
                    fa:0b:a7:d1:9e:85:02:9f:b0:89:80:ac:30:b0:9c:
                    43:a5:db:37:5b:87:43:e1:51:27:10:21:b0:17:ad:
                    6f:58:a7:7c:98:c6:86:c0:1a:8f:fe:60:c1:22:10:
                    12:1f:0f:6a:7c:68:df:a4:e4:b5:db:cf:84:62:f9:
                    cf:31:e8:5c:19:70:3d:41:fe:6c:a7:9b:10:77:52:
                    3b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AA:F5:36:CB:6E:AF:A0:C8:5F:E8:52:33:2C:C8:2B:B2:65:52:B2
            X509v3 Authority Key Identifier:
                keyid:4D:61:90:24:AD:8A:49:13:FD:D5:31:44:22:92:9A:34:F6:B4:B7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/4D619024AD8A4913FDD5314422929A34F6B4B740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D619024AD8A4913FDD5314422929A34F6B4B740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232322e302f32332d3233203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:92:ab:6a:30:5f:1c:cc:b8:a4:84:0c:6d:39:cf:36:72:b2:
         b8:35:fb:8b:2a:61:bd:0f:36:4b:c8:5e:0f:01:52:a7:db:56:
         24:78:15:8d:ed:17:95:0d:69:d3:12:57:11:95:d6:a9:a6:18:
         23:9c:c2:24:3a:59:d2:b5:8b:6c:2c:e7:ab:be:f0:6c:dc:94:
         33:09:a0:52:01:c1:41:54:03:8e:43:3a:25:f0:0d:5b:a9:ea:
         18:84:e7:15:41:98:20:84:5d:b2:cf:25:26:88:b1:2a:4f:43:
         32:c4:62:96:db:38:32:fa:2c:60:e7:2d:a8:84:aa:02:05:90:
         04:aa:8f:2a:5a:c3:d8:18:c7:e9:94:d8:a2:3d:9c:dd:1c:fb:
         a4:f5:82:b3:05:67:0a:3c:1d:c5:b3:8b:11:d8:68:ab:92:76:
         f5:b4:3c:bb:cf:5f:ae:39:7e:36:5f:ab:fa:41:e1:1f:3b:13:
         00:09:3f:60:19:35:8f:29:3e:42:16:10:83:d5:d7:2d:f2:f7:
         c4:f6:8e:dd:7f:22:63:59:a9:7a:0e:c0:eb:4f:4d:40:f2:ea:
         c3:08:be:f4:2f:26:2a:2d:49:d4:5a:0f:ca:9a:15:1f:36:f7:
         30:ae:48:75:43:34:5b:5a:72:f6:51:58:8d:0c:d8:98:db:34:
         ef:d9:60:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:06:15 2025 by rpki-client