Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/3137302e3234372e34302e302f32322d3234203d3e203631353931.roa
File:                     3137302e3234372e34302e302f32322d3234203d3e203631353931.roa (raw, json)
Hash identifier:          qF8mRKCxkxDflvKM/8XYbwKB3OFHAOAmkE1iHhHOJWU=
Subject key identifier:   0F:59:C3:DF:98:52:7A:CA:9B:2E:ED:EA:B8:F9:80:8A:E0:CE:59:4A
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       33275E2C1C59F3B4B09F18DE702C77B2CE5E0C0D
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/3137302e3234372e34302e302f32322d3234203d3e203631353931.roa
Signing time:             Mon 14 Jul 2025 21:00:01 +0000
ROA not before:           Mon 14 Jul 2025 20:55:01 +0000
ROA not after:            Mon 13 Jul 2026 21:00:01 +0000
asID:                     61591
IP address blocks:        170.247.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:27:5e:2c:1c:59:f3:b4:b0:9f:18:de:70:2c:77:b2:ce:5e:0c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Jul 14 20:55:01 2025 GMT
            Not After : Jul 13 21:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7a:8b:c3:39:ff:38:a7:4c:bf:9d:3b:55:69:
                    a2:95:55:bb:61:9e:18:d0:c6:f3:8e:99:c6:f4:fa:
                    24:aa:f5:1e:49:40:94:84:15:0c:2d:4f:f8:99:c9:
                    0c:b9:40:4b:35:3d:68:8d:b3:d7:c4:a6:c2:08:6d:
                    0a:e5:71:21:07:e8:06:35:e9:ec:7d:c2:12:4d:a7:
                    8f:28:2e:8d:40:1e:4b:4f:7e:23:86:75:57:c7:f4:
                    04:77:46:e5:80:55:e4:53:35:92:ab:0d:63:55:b6:
                    c6:12:ed:68:64:db:82:a1:b9:5f:26:2d:1f:84:c6:
                    9f:fb:b2:50:85:4a:21:28:db:f4:4b:2e:23:20:91:
                    69:cb:8a:1d:c8:05:c6:d1:4e:66:5f:a3:01:91:7e:
                    c9:4f:56:86:b7:bf:d6:51:a1:e7:1a:59:f8:70:ef:
                    32:d3:04:66:23:54:a6:55:26:de:21:8f:67:5f:54:
                    3d:03:40:3e:4e:a9:85:8a:20:7f:ab:db:31:72:1e:
                    7c:ee:1e:de:f6:93:1e:a4:c5:30:95:8b:48:7e:cf:
                    40:16:b5:0a:bf:68:24:3b:61:5c:d9:3c:f5:99:de:
                    5a:05:01:b1:25:34:a7:3d:09:72:f2:7c:4b:46:fa:
                    c8:5b:48:1e:0e:58:46:2e:2f:7c:73:98:7b:eb:1a:
                    1b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:59:C3:DF:98:52:7A:CA:9B:2E:ED:EA:B8:F9:80:8A:E0:CE:59:4A
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/3137302e3234372e34302e302f32322d3234203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:bf:13:3b:d0:ed:50:85:89:85:4d:9d:a0:fe:0d:dc:2c:9d:
         0b:46:10:c5:c4:c5:d5:79:da:c3:46:1c:96:76:fd:76:40:15:
         fc:03:61:0c:ec:10:c6:05:d2:11:25:1d:a4:bb:21:a9:5d:9c:
         f5:b8:51:6f:35:f8:dc:fe:2b:d3:42:fa:51:31:c0:10:32:87:
         72:13:99:d6:03:5e:cb:19:38:3c:a0:aa:b9:43:85:78:3d:2d:
         5a:d8:b0:42:65:21:da:b5:6c:89:96:dc:00:05:be:a9:ae:d2:
         94:0b:27:7c:ab:8a:3d:3a:ef:91:83:9f:cd:27:2e:8e:c6:6b:
         e6:90:e4:71:e0:16:41:5a:ef:d0:b2:7a:e4:2e:be:3a:06:dd:
         63:53:50:68:d8:5a:2a:07:a2:5a:a4:2c:57:5e:d5:0d:8e:66:
         dd:d5:e6:07:0d:4e:92:be:ca:17:e4:53:16:f3:bf:37:fd:08:
         60:6d:f9:f9:73:3a:f8:7d:51:9c:c8:8e:09:79:65:a7:30:f3:
         32:a4:40:5c:97:bc:c2:63:9e:54:d8:c1:ec:93:70:20:90:09:
         4f:c8:b9:cc:79:44:e1:1d:80:49:61:56:c4:0e:67:de:39:3f:
         bb:c7:19:62:99:b1:48:2a:77:39:34:e8:79:ac:b4:39:99:b7:
         24:7a:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:36:45 2025 by rpki-client