Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3137302e3135302e39382e302f32332d3233203d3e20323635303237.roa
File:                     3137302e3135302e39382e302f32332d3233203d3e20323635303237.roa (raw, json)
Hash identifier:          IhX8G+VRIdBcEJiYMlDbTcn57be2w8bJgLfqI65hxp4=
Subject key identifier:   8A:74:47:FE:C3:6E:7D:12:60:90:43:50:0F:26:A5:25:3C:EA:7A:3A
Certificate issuer:       /CN=69898DB798EFDA31C8F92C7A244EA917C3DEA08C
Certificate serial:       3EA5FC27B62C2806D1E66C102FDC653376F61006
Authority key identifier: 69:89:8D:B7:98:EF:DA:31:C8:F9:2C:7A:24:4E:A9:17:C3:DE:A0:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3137302e3135302e39382e302f32332d3233203d3e20323635303237.roa
Signing time:             Tue 15 Jul 2025 21:43:22 +0000
ROA not before:           Tue 15 Jul 2025 21:38:22 +0000
ROA not after:            Tue 14 Jul 2026 21:43:22 +0000
asID:                     265027
IP address blocks:        170.150.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.crl
                          rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 21:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a5:fc:27:b6:2c:28:06:d1:e6:6c:10:2f:dc:65:33:76:f6:10:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69898DB798EFDA31C8F92C7A244EA917C3DEA08C
        Validity
            Not Before: Jul 15 21:38:22 2025 GMT
            Not After : Jul 14 21:43:22 2026 GMT
        Subject: CN=8A7447FEC36E7D12609043500F26A5253CEA7A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:82:86:d7:73:82:4b:8f:7e:68:43:ec:8c:
                    92:09:3c:8c:05:50:6b:55:0b:45:0f:49:da:75:4a:
                    f5:ec:74:11:a0:ac:3d:b4:d2:2a:f0:dc:ff:fc:7d:
                    a1:b4:f4:54:8e:7e:b4:a9:a9:22:d7:39:78:f2:53:
                    2b:e3:20:10:1f:2b:77:df:4c:d0:a9:2c:93:21:41:
                    33:6c:97:c9:56:10:a1:51:ea:d2:59:98:3d:f7:a1:
                    c5:b5:c8:c1:27:79:77:f6:5d:ba:80:c0:8f:bd:65:
                    f2:f4:a5:6a:46:2a:b3:78:3b:30:27:cf:c4:cb:13:
                    b4:e9:64:05:d7:95:61:2f:32:e2:0d:3f:df:f6:48:
                    f5:65:39:4d:3e:d4:45:39:7e:42:a7:e7:2a:71:fb:
                    dc:8b:75:8d:83:b4:4c:cc:ed:61:5a:be:c4:5d:13:
                    93:9f:27:58:cd:de:a6:57:3e:85:26:ad:ec:d6:10:
                    4b:3e:7a:1e:98:04:70:e0:33:00:d3:6e:41:68:2b:
                    70:94:8c:2a:41:e9:ad:ec:5c:15:13:c2:d3:a7:bd:
                    8d:5f:62:db:30:3e:d5:d5:a5:f1:b7:e2:29:0c:c4:
                    d7:af:68:59:23:5a:ec:f2:c4:e2:0a:bb:24:e2:ae:
                    23:b0:d3:45:0a:ee:29:b5:d7:8d:e9:ca:30:67:65:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:74:47:FE:C3:6E:7D:12:60:90:43:50:0F:26:A5:25:3C:EA:7A:3A
            X509v3 Authority Key Identifier:
                keyid:69:89:8D:B7:98:EF:DA:31:C8:F9:2C:7A:24:4E:A9:17:C3:DE:A0:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69898DB798EFDA31C8F92C7A244EA917C3DEA08C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/3137302e3135302e39382e302f32332d3233203d3e20323635303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:49:22:a2:77:08:0f:64:1b:3a:99:64:3c:a2:09:ba:f2:b5:
         7e:9e:0c:2a:07:d3:02:2d:94:bd:99:a1:dd:23:25:12:d8:33:
         59:74:89:94:62:a6:07:90:9f:a3:80:eb:68:db:56:26:eb:b6:
         2b:cd:9e:72:dc:7d:55:4a:29:d7:ef:da:f6:a8:fd:e8:70:da:
         d9:ea:67:25:57:a8:d5:86:6e:8f:5d:82:7b:53:f6:9c:6f:87:
         f7:af:ab:a2:9e:07:b5:74:47:37:4d:ba:97:d6:b8:87:76:e4:
         91:34:2b:f1:59:2d:0d:d5:45:f9:e4:c8:61:54:40:7a:da:0c:
         a4:51:a7:6c:c1:16:69:ce:4e:6e:85:dc:ce:50:8e:42:b3:4f:
         16:79:9f:66:ef:0c:68:4e:01:8d:7f:dd:b3:ef:09:ef:cb:68:
         9f:18:cd:f1:d1:8c:e3:b3:fb:4e:ef:7a:5c:30:4f:d8:fe:d9:
         b7:67:1c:aa:4d:c3:d6:b3:9b:ad:26:74:25:f5:35:27:d1:38:
         c4:79:78:bb:a7:43:25:fe:40:fb:09:1f:84:b7:5f:f7:3d:21:
         6e:22:ea:24:9b:d2:93:13:60:2f:0d:d1:35:45:18:52:18:0c:
         48:a6:87:f4:34:3c:fa:96:73:2c:16:59:d8:98:8c:d8:26:0f:
         1f:d9:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:57:14 2025 by rpki-client