Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31362e302f32322d3232203d3e20323636343337.roa
File:                     3137302e38322e31362e302f32322d3232203d3e20323636343337.roa (raw, json)
Hash identifier:          6qy99NXqtPKAZvlNWgca1S3oKTT7bbMojlw2jFYihWk=
Subject key identifier:   ED:14:B7:D8:95:37:52:D0:0F:92:A8:3C:5B:7E:09:33:8B:94:34:84
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       46DE8FEA501549820ADE31388B7AE432B7A34AFD
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31362e302f32322d3232203d3e20323636343337.roa
Signing time:             Tue 08 Jul 2025 21:30:29 +0000
ROA not before:           Tue 08 Jul 2025 21:25:29 +0000
ROA not after:            Tue 07 Jul 2026 21:30:29 +0000
asID:                     266437
IP address blocks:        170.82.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 16:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:de:8f:ea:50:15:49:82:0a:de:31:38:8b:7a:e4:32:b7:a3:4a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Jul  8 21:25:29 2025 GMT
            Not After : Jul  7 21:30:29 2026 GMT
        Subject: CN=ED14B7D8953752D00F92A83C5B7E09338B943484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:54:21:6c:a9:f6:0b:08:93:2d:54:33:fb:
                    b4:a2:97:e6:81:91:dd:e8:09:cb:46:15:e6:15:d2:
                    cb:54:7e:e0:4e:8b:22:c7:1c:8d:fd:86:49:5b:71:
                    51:c9:ba:c9:0b:d4:5e:ce:6e:fc:b2:9a:61:b9:57:
                    c6:53:51:09:9a:1b:7a:f7:ac:0e:57:e6:ce:8b:18:
                    79:23:6f:bd:73:a8:53:6d:c8:b5:74:1d:4b:a6:d2:
                    10:a2:fa:56:b6:1f:7d:42:05:d7:f3:01:8c:17:8e:
                    1e:51:67:34:96:6b:bc:04:7d:cc:46:3c:8a:b4:c6:
                    c2:01:5b:e3:32:cb:1a:11:65:c9:55:03:93:69:90:
                    26:68:ad:2a:13:2e:42:1f:7d:4d:e6:cd:8e:5d:31:
                    12:c6:3f:ad:9e:c2:f3:24:45:3f:fd:a6:e7:48:2e:
                    10:61:b9:ec:8f:8f:ff:35:d9:bd:f4:eb:03:8d:19:
                    5c:3b:fb:29:ba:8e:c2:6a:7c:b5:07:79:6c:39:5e:
                    e7:38:fc:40:b2:29:fb:5a:c1:8f:41:a1:27:8b:92:
                    82:ac:27:97:2c:a1:cf:52:47:2a:22:07:cb:c8:b8:
                    aa:dd:59:22:37:13:2f:bd:bf:0d:07:5a:74:6e:ce:
                    ba:e6:76:52:b0:5d:39:c7:ba:a9:45:5a:58:70:83:
                    4c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:14:B7:D8:95:37:52:D0:0F:92:A8:3C:5B:7E:09:33:8B:94:34:84
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31362e302f32322d3232203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:b5:3f:6e:cc:d0:74:90:72:3b:44:20:ce:ac:29:74:56:58:
         c0:f5:98:f8:83:de:b5:09:4f:04:33:28:eb:95:2d:ae:66:d4:
         fa:88:b3:46:21:b6:38:c8:b7:2c:46:86:fb:f5:62:eb:c9:5e:
         b5:72:40:69:bb:ae:a7:92:b2:9c:b2:a2:15:1d:fc:10:c2:00:
         3a:43:3b:ee:f9:57:54:76:46:b0:8b:5c:ca:52:b0:16:3f:53:
         5f:81:f1:f5:1b:2c:9f:b9:bc:63:f5:11:4c:46:be:82:7c:1c:
         37:45:3c:7f:02:f3:a7:14:88:5a:49:e0:db:67:03:0e:e3:f3:
         97:04:71:c5:97:0d:2e:60:48:d0:50:74:5a:6e:d7:ef:72:30:
         39:a8:d0:7f:75:82:bb:a6:47:4a:d4:23:43:e2:94:d9:29:f1:
         85:34:86:31:4b:11:39:14:39:ed:61:41:b0:a5:e0:0f:dc:7b:
         5f:18:88:50:c6:27:20:02:ab:a0:f0:f4:d3:dd:00:bc:37:95:
         97:08:df:bb:ca:be:ee:d6:d4:4c:2b:1a:0b:fe:30:5f:fb:d2:
         6a:32:a1:ef:e4:b4:5f:e6:c0:cc:21:bf:08:70:5a:2f:7a:49:
         80:04:cb:9a:f3:ed:01:d4:c5:06:0d:63:e4:f5:67:13:9c:d7:
         eb:3a:aa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:40:30 2025 by rpki-client