Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa
File:                     3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier:          y1QhIZbdYepzcdoxIZqGNBMxC53wsudaiKNsqEV9cH0=
Subject key identifier:   90:C4:34:38:C6:7C:F3:6F:9E:92:B4:7A:AD:F4:56:CB:E8:F7:95:DB
Certificate issuer:       /CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
Certificate serial:       7D396E06EFF893080EC05612B69252A720FFBDFD
Authority key identifier: BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa
Signing time:             Tue 04 Nov 2025 12:21:21 +0000
ROA not before:           Tue 04 Nov 2025 12:16:21 +0000
ROA not after:            Tue 03 Nov 2026 12:21:21 +0000
asID:                     265080
IP address blocks:        170.233.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl
                          rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 16:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:39:6e:06:ef:f8:93:08:0e:c0:56:12:b6:92:52:a7:20:ff:bd:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
        Validity
            Not Before: Nov  4 12:16:21 2025 GMT
            Not After : Nov  3 12:21:21 2026 GMT
        Subject: CN=90C43438C67CF36F9E92B47AADF456CBE8F795DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:57:aa:36:fc:8f:6d:76:79:dc:57:3f:b0:
                    19:f5:67:42:93:de:32:e9:00:f9:f8:5b:52:86:3c:
                    57:c9:98:51:62:61:6a:92:f0:d8:a2:fa:1a:d3:18:
                    c2:7f:8b:dd:28:82:13:49:bd:f0:cc:ca:ea:92:9b:
                    ef:5f:b4:cd:a9:a5:d8:04:fc:0f:aa:5b:19:b9:06:
                    53:7e:a3:76:b2:71:41:06:66:04:f7:55:de:e0:d2:
                    5b:ac:e7:0d:54:e1:59:ce:30:54:8f:c4:44:14:c3:
                    97:ea:5d:97:8d:85:ed:9e:29:7b:9e:53:bf:6a:d3:
                    37:37:d4:b1:f6:2e:25:39:46:13:f0:a1:e4:58:50:
                    b2:b0:57:dd:a3:41:e8:00:da:2b:70:53:36:ea:c8:
                    fa:08:f6:9d:9c:2b:46:34:22:85:6c:b3:83:dd:39:
                    65:13:b8:92:a4:49:04:40:1a:64:eb:24:b2:a1:ce:
                    d2:f1:e3:db:e6:07:e5:81:bf:a5:48:f3:bc:a3:48:
                    6a:dc:d9:29:33:ae:40:7f:8a:ec:bb:1c:f6:1d:bd:
                    42:f4:18:4f:fe:9e:46:1c:5b:b1:24:9c:b3:5c:6f:
                    b6:c3:a8:9a:a2:a1:dc:5b:5b:90:ca:d2:88:27:79:
                    56:ef:be:5a:9f:6a:7a:90:76:b0:39:f0:36:e1:0c:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C4:34:38:C6:7C:F3:6F:9E:92:B4:7A:AD:F4:56:CB:E8:F7:95:DB
            X509v3 Authority Key Identifier:
                keyid:BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:57:64:4d:c2:80:15:4f:de:bc:55:b5:27:a5:4f:e6:a7:c3:
         b3:02:f3:e3:09:14:87:0d:0f:5a:3f:54:92:3c:a0:65:f8:0e:
         37:e9:76:ae:ef:8e:cd:ed:2c:16:c7:37:63:e9:58:3a:5b:d1:
         bb:60:b0:57:b8:27:90:fd:eb:2f:ce:23:a0:9d:84:c4:43:c2:
         3f:62:45:de:b2:ed:b7:90:1c:64:18:2e:72:c9:fa:ad:3a:dc:
         3c:39:ef:40:7f:1c:33:a9:6f:a4:97:a1:31:94:a2:6d:bb:13:
         24:08:a1:50:60:fc:7e:0b:d4:21:79:dd:4a:98:0e:d1:32:e3:
         45:49:86:44:eb:56:20:e9:a3:01:33:71:70:34:85:20:e7:bb:
         88:1f:09:5e:c5:8e:e0:47:66:9b:6c:eb:47:89:a9:0a:3d:8d:
         be:34:b3:d9:c0:be:f9:84:f5:d6:78:6f:0e:14:9e:0c:8d:a5:
         79:06:a1:21:23:8b:63:7b:28:98:02:2f:92:f7:f8:cd:c8:3a:
         4a:79:23:5a:f8:a5:6f:d5:1d:c4:34:c0:34:db:2e:41:65:da:
         b8:f1:59:f8:58:d3:1f:38:8a:2d:ac:da:84:ba:90:e7:3c:86:
         61:4a:25:ab:f1:c3:cb:d2:05:a8:40:ef:05:09:9a:6c:1a:a7:
         1f:e4:83:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:34:44 2025 by rpki-client