Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3137302e3135302e39362e302f32332d3233203d3e20323635303237.roa
File:                     3137302e3135302e39362e302f32332d3233203d3e20323635303237.roa (raw, json)
Hash identifier:          5OHgrtO51vzBynVs9OcBYbRLMz0DJ6pDiBBAYBII/Q8=
Subject key identifier:   C6:3E:A9:55:B2:A0:03:9A:85:F0:2E:C3:E1:57:A1:5B:8A:A8:0A:F2
Certificate issuer:       /CN=69898DB798EFDA31C8F92C7A244EA917C3DEA08C
Certificate serial:       53FD7312FFC9E0E772F324F2423C53044C93B9F5
Authority key identifier: 69:89:8D:B7:98:EF:DA:31:C8:F9:2C:7A:24:4E:A9:17:C3:DE:A0:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3137302e3135302e39362e302f32332d3233203d3e20323635303237.roa
Signing time:             Tue 15 Jul 2025 21:43:12 +0000
ROA not before:           Tue 15 Jul 2025 21:38:12 +0000
ROA not after:            Tue 14 Jul 2026 21:43:12 +0000
asID:                     265027
IP address blocks:        170.150.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.crl
                          rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 17:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fd:73:12:ff:c9:e0:e7:72:f3:24:f2:42:3c:53:04:4c:93:b9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69898DB798EFDA31C8F92C7A244EA917C3DEA08C
        Validity
            Not Before: Jul 15 21:38:12 2025 GMT
            Not After : Jul 14 21:43:12 2026 GMT
        Subject: CN=C63EA955B2A0039A85F02EC3E157A15B8AA80AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cd:6b:44:6a:ec:eb:3c:bc:cc:0b:ed:2b:c7:
                    55:25:b1:1f:ac:f9:91:22:6d:13:41:62:d3:5e:80:
                    1e:07:c6:8b:26:a6:e5:c1:1f:91:68:a5:62:df:87:
                    f2:73:d6:5f:48:ce:76:79:3a:75:e3:cb:ce:68:79:
                    67:d7:98:5a:16:98:6e:51:1e:f9:96:e5:27:4a:b0:
                    04:27:e5:91:bc:3a:4a:52:88:50:85:94:54:42:64:
                    96:75:94:c4:68:59:a5:66:1d:94:6e:72:86:f1:b5:
                    2a:1a:63:8f:d4:de:71:59:a0:90:d9:23:f3:74:bb:
                    4f:fd:a9:e2:19:51:15:85:21:7e:e8:ab:23:14:ad:
                    33:a6:65:79:d4:8a:af:de:00:86:cc:63:83:d9:c3:
                    6b:1c:34:ad:62:8c:1b:fd:48:8c:c7:79:8a:e8:b3:
                    7f:3d:7b:ad:24:a4:f9:72:a7:db:86:d6:ce:c6:f3:
                    05:1b:0d:79:69:89:85:99:ef:fa:bb:d1:f8:8b:fe:
                    bd:e6:66:a2:f0:af:69:73:2e:d6:4b:31:c5:bf:49:
                    79:34:eb:df:78:a2:59:ad:25:ce:a4:86:6c:6d:57:
                    a2:6f:b4:9e:9c:66:82:a8:ac:b9:98:e8:4a:09:b8:
                    3f:9e:82:7b:1d:48:49:8d:63:98:51:a3:a8:2f:e4:
                    1f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3E:A9:55:B2:A0:03:9A:85:F0:2E:C3:E1:57:A1:5B:8A:A8:0A:F2
            X509v3 Authority Key Identifier:
                keyid:69:89:8D:B7:98:EF:DA:31:C8:F9:2C:7A:24:4E:A9:17:C3:DE:A0:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3137302e3135302e39362e302f32332d3233203d3e20323635303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:c5:05:e5:b9:42:cd:f8:a1:c6:d2:3d:5c:13:9c:75:4c:0d:
         94:93:8d:cd:5e:37:b2:7b:21:87:ce:8f:f0:80:bb:30:b3:e6:
         e1:7a:1f:e7:3a:e6:0f:77:ff:33:16:2f:c4:b6:4b:d8:5e:f3:
         a6:df:65:69:e1:95:8e:88:54:12:b4:94:84:b7:0f:07:0b:0c:
         84:ac:12:17:89:23:5d:dd:95:69:2b:72:24:22:93:ac:c8:79:
         19:04:23:3a:9f:ed:5e:74:94:c0:45:6b:85:88:26:2f:6b:e6:
         2b:74:89:ea:63:d8:95:5b:18:01:57:b7:9a:38:a2:f6:68:1d:
         1d:36:9e:6d:6e:b4:7e:e0:4d:63:17:eb:d3:7f:d3:77:5f:fa:
         f6:86:7f:01:20:5f:60:87:f6:c6:95:5a:6e:14:72:a6:eb:6b:
         fe:5f:8c:e6:20:e0:0e:8f:34:18:f0:5d:a9:6e:79:b1:07:66:
         a6:8a:36:a8:34:1b:a1:f3:3c:97:9b:dd:80:27:ae:38:70:10:
         e0:a0:40:12:30:f5:b1:cc:4a:5f:f2:21:6b:c1:c1:94:37:b5:
         83:0b:f1:d3:48:7f:93:79:f3:dd:78:c1:47:f1:84:9f:0a:e8:
         26:8f:a9:92:49:9a:cc:a3:e9:ee:3e:96:5a:16:03:11:fc:fb:
         59:d7:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:14 2025 by rpki-client