Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234332e302f32342d3234203d3e20323731323933.roa
File:                     3137302e3233332e3234332e302f32342d3234203d3e20323731323933.roa (raw, json)
Hash identifier:          Q3797xlP4E5NpBRNMVNUoJFYTHdJ1fbubmM1cyIEA60=
Subject key identifier:   C9:6A:B2:C7:77:BE:F4:B1:1D:72:94:04:C2:E2:B8:FE:97:22:1A:25
Certificate issuer:       /CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Certificate serial:       249AEEE63B17FB55A10F05A93EECE3F7716EC473
Authority key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234332e302f32342d3234203d3e20323731323933.roa
Signing time:             Wed 30 Jul 2025 20:54:30 +0000
ROA not before:           Wed 30 Jul 2025 20:49:30 +0000
ROA not after:            Wed 29 Jul 2026 20:54:30 +0000
asID:                     271293
IP address blocks:        170.233.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl
                          rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9a:ee:e6:3b:17:fb:55:a1:0f:05:a9:3e:ec:e3:f7:71:6e:c4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Validity
            Not Before: Jul 30 20:49:30 2025 GMT
            Not After : Jul 29 20:54:30 2026 GMT
        Subject: CN=3082010A0282010100AEEABCEFC96D48165F7A11D242B293DE58ADC382E8701D9673121D0ECAA1DE2890E61435D80CB1AAD8DC5D569B1590E4E0A37E4D67B11E18FFC23FCEEC534783F744009152A08F48E6C4AFC71C183FB3B7179C7E9F587BBE7D02E489F726E15A6A338DF6E4CA9E25BF63A15BD19FB0C68A21C2949D8DBC9FFE8FD6D29991CF576B978B63CBEE6604943F477E49D113B1F1A592680A61F84E8C712701585F7AC9837487F4ACE87F87E3FBFC81A3F8A32E90837E8CFECEE2C1ED45B86239831E0201BDFFCA6E99C75A1B38C15F629533FAEEB95E565906F913420A93BD76B765E27517B97D64E601D8E50A399A630DC784A2D0EA8FFEEDFBA35BE148A13495ABA10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:bc:ef:c9:6d:48:16:5f:7a:11:d2:42:b2:
                    93:de:58:ad:c3:82:e8:70:1d:96:73:12:1d:0e:ca:
                    a1:de:28:90:e6:14:35:d8:0c:b1:aa:d8:dc:5d:56:
                    9b:15:90:e4:e0:a3:7e:4d:67:b1:1e:18:ff:c2:3f:
                    ce:ec:53:47:83:f7:44:00:91:52:a0:8f:48:e6:c4:
                    af:c7:1c:18:3f:b3:b7:17:9c:7e:9f:58:7b:be:7d:
                    02:e4:89:f7:26:e1:5a:6a:33:8d:f6:e4:ca:9e:25:
                    bf:63:a1:5b:d1:9f:b0:c6:8a:21:c2:94:9d:8d:bc:
                    9f:fe:8f:d6:d2:99:91:cf:57:6b:97:8b:63:cb:ee:
                    66:04:94:3f:47:7e:49:d1:13:b1:f1:a5:92:68:0a:
                    61:f8:4e:8c:71:27:01:58:5f:7a:c9:83:74:87:f4:
                    ac:e8:7f:87:e3:fb:fc:81:a3:f8:a3:2e:90:83:7e:
                    8c:fe:ce:e2:c1:ed:45:b8:62:39:83:1e:02:01:bd:
                    ff:ca:6e:99:c7:5a:1b:38:c1:5f:62:95:33:fa:ee:
                    b9:5e:56:59:06:f9:13:42:0a:93:bd:76:b7:65:e2:
                    75:17:b9:7d:64:e6:01:d8:e5:0a:39:9a:63:0d:c7:
                    84:a2:d0:ea:8f:fe:ed:fb:a3:5b:e1:48:a1:34:95:
                    ab:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6A:B2:C7:77:BE:F4:B1:1D:72:94:04:C2:E2:B8:FE:97:22:1A:25
            X509v3 Authority Key Identifier:
                keyid:D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234332e302f32342d3234203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:9a:37:81:ea:bb:db:86:27:a8:0c:0a:8e:f5:3d:3d:8c:c9:
         16:c3:eb:a1:26:d2:2a:bc:3e:9d:ba:bd:1e:ce:14:88:69:a5:
         86:2c:6e:6a:80:ce:12:8c:67:0a:ba:7e:67:50:99:3e:f5:1b:
         4a:08:02:16:12:1c:86:85:33:e5:e5:f0:cd:0d:31:3b:03:89:
         ca:eb:5f:94:2e:53:08:e1:49:78:50:06:75:c3:36:d6:bf:01:
         d4:fe:51:63:d0:d6:0e:95:4e:1b:fa:53:9a:7b:03:8e:c4:a9:
         74:d3:aa:3c:4c:bc:96:a5:11:24:7b:2e:4f:29:b4:66:ae:54:
         2f:2b:ef:93:a3:12:bb:a9:01:38:6c:a3:41:c0:f5:f9:34:16:
         0c:d9:47:0e:7b:43:b9:ca:a3:66:07:91:57:ca:d5:90:83:13:
         52:30:56:81:09:c0:22:57:2e:d1:b3:56:e6:64:0d:33:4d:1a:
         8f:d5:4e:6e:3e:b0:1e:a3:13:46:ac:3a:fd:ce:42:2c:e7:fd:
         8e:fa:9e:58:bc:68:b4:30:dc:14:48:c0:12:91:a8:4d:72:83:
         8d:cf:ea:78:c5:24:5d:be:cc:d8:64:69:e9:22:d4:da:41:8f:
         a1:bd:02:4c:e8:90:36:ad:b7:e7:ec:b5:ed:9d:ae:d5:2e:94:
         13:87:4e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:11:21 2025 by rpki-client