Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232332e302f32342d3234203d3e20323634313337.roa
File:                     3137302e302e3232332e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          FbB5no+K4fr+YpXwmugLVdrnIJvNlkx/zHrswVL3Fx0=
Subject key identifier:   30:12:58:A7:AA:DB:49:27:D3:AB:D8:37:B2:7D:6E:93:EB:A4:69:BE
Certificate issuer:       /CN=4D619024AD8A4913FDD5314422929A34F6B4B740
Certificate serial:       1DA1FDCBB59A063DE0D27147A167B69D006A5D2B
Authority key identifier: 4D:61:90:24:AD:8A:49:13:FD:D5:31:44:22:92:9A:34:F6:B4:B7:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D619024AD8A4913FDD5314422929A34F6B4B740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232332e302f32342d3234203d3e20323634313337.roa
Signing time:             Tue 04 Nov 2025 12:19:08 +0000
ROA not before:           Tue 04 Nov 2025 12:14:08 +0000
ROA not after:            Tue 03 Nov 2026 12:19:08 +0000
asID:                     264137
IP address blocks:        170.0.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/4D619024AD8A4913FDD5314422929A34F6B4B740.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/4D619024AD8A4913FDD5314422929A34F6B4B740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D619024AD8A4913FDD5314422929A34F6B4B740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 15:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a1:fd:cb:b5:9a:06:3d:e0:d2:71:47:a1:67:b6:9d:00:6a:5d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D619024AD8A4913FDD5314422929A34F6B4B740
        Validity
            Not Before: Nov  4 12:14:08 2025 GMT
            Not After : Nov  3 12:19:08 2026 GMT
        Subject: CN=301258A7AADB4927D3ABD837B27D6E93EBA469BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:3f:7d:de:4a:fe:3c:44:99:16:8f:6b:ca:
                    17:15:4d:b1:f8:43:a9:50:01:1a:21:bc:c9:fe:eb:
                    cb:59:0e:cc:a8:d5:36:f5:93:12:ae:9b:f9:c7:e1:
                    92:11:fc:02:8f:fe:6b:63:9d:76:e0:29:f9:cb:bf:
                    ed:46:d0:20:47:a8:f0:6b:f6:21:a8:03:cc:44:ae:
                    63:e3:51:07:9e:9c:e2:a2:f9:12:58:92:ff:b6:c6:
                    59:07:79:15:b5:c3:c4:0c:6b:1b:10:62:dc:e6:59:
                    fe:4f:d8:31:85:ea:89:d8:ed:6d:da:99:35:0e:d1:
                    f0:9a:30:da:63:dc:dc:06:aa:c5:76:c8:8c:01:ff:
                    89:41:7a:03:34:69:cf:cf:5d:03:1a:4f:ca:5d:be:
                    70:eb:b3:47:ad:c0:5b:1b:fa:ff:ea:58:b6:18:9e:
                    73:da:f9:e8:a3:3f:52:4b:92:bd:7b:95:b3:a6:cb:
                    33:c1:39:3f:6f:ff:4f:a9:be:6f:23:06:28:8e:8a:
                    3f:63:e1:22:db:61:cc:d4:45:90:8f:ca:a6:41:08:
                    47:d8:a3:90:5a:89:04:51:2a:3f:f7:50:a8:6c:98:
                    35:f8:12:67:fa:ed:1c:0b:15:57:45:e4:63:06:cd:
                    0d:b0:7f:8e:48:55:39:4f:08:3d:47:5a:eb:18:f1:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:12:58:A7:AA:DB:49:27:D3:AB:D8:37:B2:7D:6E:93:EB:A4:69:BE
            X509v3 Authority Key Identifier:
                keyid:4D:61:90:24:AD:8A:49:13:FD:D5:31:44:22:92:9A:34:F6:B4:B7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/4D619024AD8A4913FDD5314422929A34F6B4B740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D619024AD8A4913FDD5314422929A34F6B4B740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232332e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:d3:ca:31:08:5a:b9:ff:da:c3:61:bc:1f:93:3e:f1:e0:a7:
         1f:ab:a8:f8:a6:25:b3:cf:a2:f5:b9:c7:0e:9b:c0:5b:c0:b1:
         69:71:e2:24:8b:27:89:f4:a9:1d:00:95:49:f1:15:3a:0f:31:
         db:9d:18:7e:10:91:a8:5b:67:2c:e9:ee:33:5b:95:ce:61:a7:
         5a:44:9f:07:e0:2d:22:df:49:8b:d5:78:30:87:dc:0c:54:3e:
         ef:0d:73:f1:76:a3:63:aa:28:13:ff:6e:3b:c8:97:b4:bb:94:
         cc:8e:98:ed:b2:a9:f9:5f:62:5b:eb:77:0d:8b:ff:84:09:1c:
         09:22:ea:3f:47:73:2c:d0:5d:d7:51:32:f0:3f:c3:ca:c4:92:
         7a:7d:4b:5a:ec:c3:64:b8:d4:41:92:45:45:21:5f:4f:d7:4f:
         12:15:b7:17:87:df:93:c7:52:18:b1:81:bc:fb:8a:72:a7:e5:
         77:7b:c2:77:e1:5e:da:0e:1e:f0:bd:77:cc:89:b8:9f:26:b1:
         a0:c1:d3:e6:2e:92:b1:df:2c:7d:1b:65:37:a6:d6:2b:81:56:
         e2:c6:f9:bc:05:fc:fd:e4:c0:58:b0:2e:96:45:da:72:69:b6:
         00:5d:68:7b:7b:ea:56:8e:0b:63:be:1d:cf:e9:4d:8a:60:32:
         7d:63:70:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:21:45 2025 by rpki-client