Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3137302e3135302e39362e302f32342d3234203d3e20323635303237.roa
File:                     3137302e3135302e39362e302f32342d3234203d3e20323635303237.roa (raw, json)
Hash identifier:          O0+xCiFXKIcGM2drV8ZnEJYBzXCSvAJnpoe1dUCG+RA=
Subject key identifier:   39:05:D9:B3:57:1A:AA:7F:55:04:02:A1:A3:D9:46:AE:E3:61:F1:8D
Certificate issuer:       /CN=69898DB798EFDA31C8F92C7A244EA917C3DEA08C
Certificate serial:       04E59F65E8888FCE5FD361723B23CEE2A7693823
Authority key identifier: 69:89:8D:B7:98:EF:DA:31:C8:F9:2C:7A:24:4E:A9:17:C3:DE:A0:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3137302e3135302e39362e302f32342d3234203d3e20323635303237.roa
Signing time:             Tue 15 Jul 2025 21:43:16 +0000
ROA not before:           Tue 15 Jul 2025 21:38:16 +0000
ROA not after:            Tue 14 Jul 2026 21:43:16 +0000
asID:                     265027
IP address blocks:        170.150.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.crl
                          rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 17:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e5:9f:65:e8:88:8f:ce:5f:d3:61:72:3b:23:ce:e2:a7:69:38:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69898DB798EFDA31C8F92C7A244EA917C3DEA08C
        Validity
            Not Before: Jul 15 21:38:16 2025 GMT
            Not After : Jul 14 21:43:16 2026 GMT
        Subject: CN=3905D9B3571AAA7F550402A1A3D946AEE361F18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d9:10:59:17:bb:f9:24:38:34:13:f9:2f:dc:
                    fc:10:22:31:df:47:ba:3b:7a:50:14:e7:42:f1:58:
                    c9:7d:0d:b7:aa:5c:85:ab:59:0e:bf:dc:f6:d7:43:
                    48:59:7b:ca:30:47:e1:f2:1d:ed:1c:5c:54:11:79:
                    4e:70:b2:e4:72:8a:48:3c:ee:aa:9f:a4:8d:6b:7f:
                    de:d2:23:18:91:cc:e7:f1:67:f8:04:73:35:16:4d:
                    3c:bf:54:43:0a:2b:78:f6:fe:38:b9:36:4a:a8:3e:
                    68:0f:95:0d:23:02:0a:c3:3a:5b:05:0d:8e:19:14:
                    74:da:96:65:4e:7f:12:c8:90:02:c8:e3:1d:97:81:
                    f7:c4:64:5f:01:fd:d9:7e:81:79:73:2d:92:05:cd:
                    a9:3f:d4:cc:b5:b7:cb:cb:41:d4:68:22:a2:b9:be:
                    89:42:5e:58:bc:e7:99:08:b2:a2:0f:4f:50:d7:29:
                    2a:d9:cb:09:04:65:8b:c4:ef:68:06:95:a8:35:48:
                    c6:d8:f6:66:33:96:00:ef:00:d9:fc:f7:a9:46:af:
                    65:35:cc:0a:3a:15:42:08:1b:c3:55:94:a5:e4:0e:
                    0b:2b:ad:48:52:bc:5c:9a:0b:c6:35:ec:1c:90:6f:
                    b6:10:15:74:0d:c1:bd:15:8d:1c:b3:1f:9c:f8:39:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:05:D9:B3:57:1A:AA:7F:55:04:02:A1:A3:D9:46:AE:E3:61:F1:8D
            X509v3 Authority Key Identifier:
                keyid:69:89:8D:B7:98:EF:DA:31:C8:F9:2C:7A:24:4E:A9:17:C3:DE:A0:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3137302e3135302e39362e302f32342d3234203d3e20323635303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:aa:d7:2c:77:9f:cb:23:d7:f4:8e:4e:76:02:31:4e:6a:ec:
         9b:da:79:63:18:7f:0a:af:55:d1:20:36:65:07:ae:d7:59:25:
         e9:ce:7f:ed:31:d0:8d:40:24:ca:d2:0d:38:68:96:80:8c:72:
         a7:79:93:d3:4b:15:a6:4d:b3:29:03:c2:e4:ef:81:44:b4:37:
         91:63:78:82:91:cc:15:fd:94:b2:be:f4:a2:44:4e:82:ba:36:
         bb:6e:04:12:5e:4d:33:9b:5e:c4:eb:29:7b:48:91:4c:68:85:
         15:bc:e1:f6:d1:5d:b8:aa:c3:e6:d8:75:c0:1d:e8:96:71:c4:
         9a:0a:f7:55:04:69:1d:a9:65:83:37:9c:00:65:e8:80:06:b8:
         28:69:aa:51:33:99:7c:a7:6b:be:e8:2c:9b:3f:ba:d0:27:d2:
         10:79:36:c4:75:1a:4f:73:0d:44:ce:a8:b8:87:96:24:57:d8:
         04:de:8a:d2:7a:c8:c4:e5:be:7f:0f:3e:62:36:5a:a6:46:ab:
         e0:06:25:e8:b4:a0:69:6f:78:91:d5:2b:8e:30:dc:99:ec:75:
         a3:f3:09:c7:05:91:38:42:d1:d6:0b:af:5f:2a:18:10:4a:09:
         5e:eb:e9:ca:5f:80:6b:ab:74:ec:9d:49:6e:83:7b:c0:b8:c5:
         72:e5:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:06:50 2025 by rpki-client