Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
File:                     3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (raw, json)
Hash identifier:          CVrB2TH1zLHYU+jog8KsMgf4ayPUj0ZJlpK+xRR50gE=
Subject key identifier:   F2:3A:DC:03:BE:21:D6:9C:5D:80:2D:34:7D:CE:4E:E0:87:86:DF:DB
Certificate issuer:       /CN=4B994881FDDD6F476745B62FD48604002A6D30C5
Certificate serial:       11CF4E317A2C4FFA395C0DCD64796219FFCA26E0
Authority key identifier: 4B:99:48:81:FD:DD:6F:47:67:45:B6:2F:D4:86:04:00:2A:6D:30:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B994881FDDD6F476745B62FD48604002A6D30C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
Signing time:             Thu 31 Jul 2025 17:26:14 +0000
ROA not before:           Thu 31 Jul 2025 17:21:14 +0000
ROA not after:            Thu 30 Jul 2026 17:26:14 +0000
asID:                     263256
IP address blocks:        170.247.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.crl
                          rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B994881FDDD6F476745B62FD48604002A6D30C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 14:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cf:4e:31:7a:2c:4f:fa:39:5c:0d:cd:64:79:62:19:ff:ca:26:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B994881FDDD6F476745B62FD48604002A6D30C5
        Validity
            Not Before: Jul 31 17:21:14 2025 GMT
            Not After : Jul 30 17:26:14 2026 GMT
        Subject: CN=F23ADC03BE21D69C5D802D347DCE4EE08786DFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:8b:7f:d7:83:02:8a:f5:5b:6f:c9:e4:71:
                    7c:8e:7f:39:b9:21:8e:9d:c3:13:5d:09:ef:56:c1:
                    c8:8b:6e:77:ae:45:14:59:81:88:e6:ac:7b:01:e2:
                    31:ba:46:8c:7d:7c:ab:46:e3:3f:a6:7f:6a:8a:e7:
                    4e:ca:02:29:99:b7:ec:43:a7:f8:7e:46:0d:7f:fe:
                    00:6a:d4:b7:47:88:d2:5b:39:d9:0e:e0:e5:87:39:
                    9f:02:8d:4a:bf:99:26:b7:cf:bb:63:64:b3:45:aa:
                    ac:8d:fb:54:e4:46:4d:b4:5d:c9:23:a4:06:0f:1f:
                    31:88:58:ba:21:ad:fa:a6:a0:42:8c:5a:7b:34:00:
                    3a:b7:65:58:60:ce:08:a2:a2:48:2e:c2:2a:68:2b:
                    8b:7b:ac:4d:b9:60:f0:57:4e:f7:38:59:c7:04:e6:
                    c6:62:bc:03:bc:80:55:5b:ff:08:fd:dc:02:fe:e3:
                    47:72:9b:ae:e3:08:a2:9d:6f:a7:18:27:c7:79:c0:
                    ca:e0:1a:94:84:36:5e:90:37:99:37:15:c7:a0:b4:
                    98:1b:68:1a:c6:46:89:ae:fa:be:3b:fc:5a:35:58:
                    10:6b:40:33:d1:a9:da:b0:7d:47:8a:fb:a9:c4:5d:
                    86:89:35:49:4d:ae:0d:09:a1:54:17:88:99:19:33:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3A:DC:03:BE:21:D6:9C:5D:80:2D:34:7D:CE:4E:E0:87:86:DF:DB
            X509v3 Authority Key Identifier:
                keyid:4B:99:48:81:FD:DD:6F:47:67:45:B6:2F:D4:86:04:00:2A:6D:30:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B994881FDDD6F476745B62FD48604002A6D30C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:04:da:3d:9f:e6:5d:dc:f7:cf:5b:34:0f:80:a6:ac:ae:01:
         1b:e0:af:39:e2:d3:21:af:62:a7:1a:fc:ec:4d:e5:3c:d3:34:
         c6:86:18:05:df:d4:cc:71:27:e7:f6:37:b4:d5:d6:3c:f3:ac:
         f3:e3:43:5b:c2:31:99:61:84:0d:84:2e:ec:f6:12:e7:f1:76:
         d9:67:b5:89:be:67:9e:91:86:80:98:b4:40:48:a6:44:22:c7:
         f8:c2:b6:e4:b1:46:51:20:71:86:8e:5a:f3:2a:61:12:1a:8f:
         5b:43:07:0e:90:f2:67:11:ec:23:0e:5c:19:a0:48:96:33:d4:
         96:02:53:2b:2d:93:74:43:0d:6d:0c:7a:5d:24:66:d5:cc:10:
         9a:bb:30:38:32:64:3a:59:05:17:b0:77:43:ac:e6:2c:0c:cc:
         86:e2:bc:3f:9f:f7:63:eb:af:f5:bf:89:7f:c7:3b:0a:e6:98:
         84:55:26:8b:99:d5:f8:76:7a:34:9f:f6:0f:18:9c:72:df:e8:
         2a:14:10:26:2e:e1:2a:56:9f:e6:31:58:95:12:74:f3:98:9b:
         40:43:a0:81:70:f8:8b:80:c9:de:fe:ff:4e:64:0a:76:bd:12:
         d1:34:bf:75:a4:02:f7:d8:f6:c6:1a:52:44:95:19:b1:6c:45:
         e0:18:c6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:32:35 2025 by rpki-client