Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32322d3232203d3e20323635303933.roa
File:                     3137302e3233332e3130342e302f32322d3232203d3e20323635303933.roa (raw, json)
Hash identifier:          LG3timFUf8lHEqWIx1bv84c8pWLqePxA6wOWJFy+IHA=
Subject key identifier:   BA:A7:7D:77:F7:39:E9:EF:4A:94:4F:4D:FD:1E:31:E1:FC:FA:A6:A3
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       0AD1D882E0F987A07340F7E9082E0E770B5AB581
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32322d3232203d3e20323635303933.roa
Signing time:             Tue 22 Jul 2025 09:24:34 +0000
ROA not before:           Tue 22 Jul 2025 09:19:34 +0000
ROA not after:            Tue 21 Jul 2026 09:24:34 +0000
asID:                     265093
IP address blocks:        170.233.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 06:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d1:d8:82:e0:f9:87:a0:73:40:f7:e9:08:2e:0e:77:0b:5a:b5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Jul 22 09:19:34 2025 GMT
            Not After : Jul 21 09:24:34 2026 GMT
        Subject: CN=BAA77D77F739E9EF4A944F4DFD1E31E1FCFAA6A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:ec:b0:b3:a0:e6:00:13:31:0a:0f:33:dd:
                    9e:b8:71:0f:1c:fe:da:3b:41:58:6b:31:98:d6:d3:
                    1d:6c:65:66:7b:9d:f7:4e:5b:bc:7f:92:b6:a3:15:
                    94:40:f4:c9:e2:13:bd:fc:bd:e6:d2:7a:1e:89:5e:
                    cb:23:6e:59:82:cb:79:6f:bb:e6:5a:7f:6a:2e:79:
                    d8:f9:63:c2:d4:5b:80:2b:35:57:a9:04:0e:41:d7:
                    cf:e2:f8:73:e2:7f:13:9d:c1:68:79:f7:1a:ad:02:
                    48:c5:88:96:82:2f:0e:a7:0a:2c:a2:b4:f9:46:d4:
                    d2:20:5d:98:70:86:a9:e7:35:29:ce:cf:72:ac:86:
                    5a:ab:32:ba:80:af:9d:08:07:d9:12:32:58:d6:8e:
                    c4:f9:db:48:4d:0f:eb:8f:2c:d9:c9:4a:7d:14:e2:
                    bc:11:df:b3:32:40:63:12:b2:4f:5b:f1:5b:a0:9a:
                    b9:79:3d:38:53:72:68:72:1e:fb:c7:8c:18:2f:57:
                    d2:34:66:91:d3:62:9f:18:3d:82:ec:a9:c3:00:41:
                    87:bf:18:a5:74:a7:8e:20:22:7f:95:a4:56:0e:de:
                    3c:88:78:10:c0:6a:28:fc:fc:ea:4a:9b:f1:b3:a6:
                    2b:c0:be:5c:0b:ca:af:2a:64:65:44:f5:1e:f5:09:
                    5f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A7:7D:77:F7:39:E9:EF:4A:94:4F:4D:FD:1E:31:E1:FC:FA:A6:A3
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/3137302e3233332e3130342e302f32322d3232203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:35:ff:84:e6:a2:fa:8b:1c:f4:3f:2c:89:5c:17:4f:70:2f:
         f5:f1:71:57:18:81:ee:42:46:c5:48:a4:96:46:19:35:34:a6:
         a6:84:65:54:ef:65:af:83:20:5f:7d:7a:b0:d1:66:3b:6e:b4:
         b3:ad:2f:a0:57:42:30:05:b7:07:82:4f:b9:3b:dc:57:4a:5e:
         04:b7:6c:cd:7f:65:6c:40:a9:08:bb:31:1c:9b:72:2a:c3:d5:
         b8:83:3b:06:56:e3:dc:dd:e7:cb:f5:d4:e1:ae:06:20:88:a2:
         6c:17:bb:6b:0c:d7:0d:df:ff:95:d1:18:19:1d:dd:fd:4e:bf:
         96:5d:48:22:90:aa:58:c3:d7:1a:3b:ad:d7:e0:dd:d3:bb:8e:
         53:ac:3f:7b:f4:f7:58:fb:14:2c:38:e2:c5:ad:73:b7:c1:ad:
         cf:b2:33:4f:7b:46:b8:7b:d0:33:af:ef:dd:90:34:7c:4d:84:
         58:59:d3:d3:a4:48:87:15:07:ac:b5:21:7d:62:76:6b:dd:0c:
         91:d5:2c:a7:c2:22:a9:f8:eb:35:28:7f:c4:81:6e:40:5b:a5:
         12:b2:3b:62:e2:6a:93:b8:ce:be:38:1e:e3:62:2d:83:77:5e:
         7a:e4:af:52:4c:40:31:c0:be:e3:2e:cb:f9:c6:04:ce:13:3c:
         e5:79:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:43:50 2025 by rpki-client