Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3234362e3230342e302f32322d3332203d3e20323632373733.roa
File:                     3137302e3234362e3230342e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          WDhycxbMfwKZhLMXlBTXPowESwhugZ0r9lnpWRqJW8k=
Subject key identifier:   31:61:05:BF:F4:BE:70:55:A4:D0:B1:37:D2:1B:3A:E7:59:85:D9:6D
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       56B5BBE710A27267D47ED6B5F5B2E588D7374C13
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3234362e3230342e302f32322d3332203d3e20323632373733.roa
Signing time:             Wed 29 Oct 2025 14:28:33 +0000
ROA not before:           Wed 29 Oct 2025 14:23:33 +0000
ROA not after:            Wed 28 Oct 2026 14:28:33 +0000
asID:                     262773
IP address blocks:        170.246.204.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 13:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b5:bb:e7:10:a2:72:67:d4:7e:d6:b5:f5:b2:e5:88:d7:37:4c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Oct 29 14:23:33 2025 GMT
            Not After : Oct 28 14:28:33 2026 GMT
        Subject: CN=316105BFF4BE7055A4D0B137D21B3AE75985D96D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:b0:8b:cf:c6:2c:fb:de:cb:f1:20:ca:4b:
                    be:0f:53:aa:ec:b7:c0:94:96:5c:b9:f4:8d:71:30:
                    62:92:1e:3c:66:d1:2d:51:c8:44:01:bd:30:c9:20:
                    d2:ae:47:38:e2:10:64:fb:0a:33:43:d4:e4:ad:4c:
                    08:1b:e9:6b:fe:54:b1:05:3b:3c:46:5f:04:79:38:
                    ea:4a:31:3c:cd:1d:7f:9a:73:e7:95:00:3e:bf:29:
                    b7:99:a2:f0:83:59:6a:68:b6:71:3d:ec:da:da:bc:
                    9b:d7:d0:2f:0a:a4:32:c4:52:af:6e:7b:b7:4e:47:
                    9a:e7:8c:ee:b0:bd:f2:fb:5d:40:53:85:55:1d:53:
                    48:77:aa:92:b0:0e:bb:49:b3:24:12:c9:3a:69:d5:
                    d0:51:81:df:e8:a9:50:f2:28:31:7f:fb:65:b6:8e:
                    e9:1a:11:f4:b2:26:4c:47:36:09:df:cc:9d:1e:2f:
                    7c:9d:c1:b6:2d:67:50:49:40:ac:24:7d:68:e1:38:
                    a1:85:e5:4b:9d:91:48:9c:82:b0:56:5c:41:8e:72:
                    21:00:b5:c9:58:11:bd:10:b5:4a:5a:97:29:06:84:
                    03:10:f4:2e:d6:d9:31:67:54:84:48:e4:9f:27:ca:
                    4d:ad:87:58:74:75:40:6a:d1:45:2e:ad:cc:26:6a:
                    69:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:61:05:BF:F4:BE:70:55:A4:D0:B1:37:D2:1B:3A:E7:59:85:D9:6D
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3234362e3230342e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:41:4f:23:b2:31:6d:8e:cf:77:13:8b:80:b5:b2:d9:57:a8:
         90:ed:be:d5:54:55:48:96:72:41:72:73:91:3d:99:47:b1:fc:
         7f:da:f8:83:c5:c7:7a:cc:e7:be:04:77:30:84:2d:15:61:39:
         a9:c6:35:96:5a:f5:b0:6d:b6:05:cf:73:2a:ca:2e:08:82:fd:
         5f:0b:0c:26:cd:33:16:54:d2:cc:48:07:f2:4c:66:f6:a0:82:
         49:4d:93:a5:67:27:0f:97:5b:bc:45:1e:54:d0:f2:05:42:7b:
         77:5e:37:6e:ae:af:84:7b:77:9f:dd:49:7a:3c:78:38:13:fe:
         81:9e:74:be:d4:5f:2d:dd:e1:51:c2:eb:0e:8a:09:8f:2d:2d:
         1d:42:53:a4:84:fb:7f:79:d3:06:cd:b5:78:53:62:36:2d:32:
         4f:5a:3c:b3:1c:ae:95:6f:e3:7b:05:c9:98:0e:3c:9d:dc:c7:
         d6:db:ab:76:c1:28:a7:96:3f:b7:6a:b3:a5:6c:7f:9f:a9:c7:
         82:65:59:6c:25:b8:bb:84:02:69:3c:f7:bc:73:af:7f:16:61:
         34:86:fd:7f:1d:a8:41:68:98:a1:52:4b:7e:31:34:06:15:44:
         08:6d:fd:df:e8:b4:b7:7d:18:22:ae:e9:ad:4f:ee:00:42:21:
         81:f1:14:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:31:24 2025 by rpki-client