Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3332203d3e20323636303231.roa
File:                     3137302e3234352e33362e302f32322d3332203d3e20323636303231.roa (raw, json)
Hash identifier:          PDbdeahEuJBblk0HII6048mwCsY3agXmqNlVHUzFC6Y=
Subject key identifier:   53:C5:86:CA:6F:48:30:92:93:40:D0:A0:69:F7:8F:34:22:FB:45:A1
Certificate issuer:       /CN=2FD431E4607C7159B13CB28EDF58E31ABA74325A
Certificate serial:       06CC272F96A4BCC79C9A3F29AE755C0C6303096A
Authority key identifier: 2F:D4:31:E4:60:7C:71:59:B1:3C:B2:8E:DF:58:E3:1A:BA:74:32:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FD431E4607C7159B13CB28EDF58E31ABA74325A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3332203d3e20323636303231.roa
Signing time:             Sat 19 Jul 2025 21:07:08 +0000
ROA not before:           Sat 19 Jul 2025 21:02:08 +0000
ROA not after:            Sat 18 Jul 2026 21:07:08 +0000
asID:                     266021
IP address blocks:        170.245.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/2FD431E4607C7159B13CB28EDF58E31ABA74325A.crl
                          rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/2FD431E4607C7159B13CB28EDF58E31ABA74325A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FD431E4607C7159B13CB28EDF58E31ABA74325A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 04:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cc:27:2f:96:a4:bc:c7:9c:9a:3f:29:ae:75:5c:0c:63:03:09:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FD431E4607C7159B13CB28EDF58E31ABA74325A
        Validity
            Not Before: Jul 19 21:02:08 2025 GMT
            Not After : Jul 18 21:07:08 2026 GMT
        Subject: CN=53C586CA6F4830929340D0A069F78F3422FB45A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:b7:2e:15:0f:d4:b6:c4:77:67:1c:42:d1:
                    61:df:ff:5c:84:20:46:d3:e5:e5:97:00:25:4c:b7:
                    f0:d9:f3:2a:0e:e6:3d:e2:40:c9:60:ea:f0:f2:83:
                    ec:bf:da:2b:65:bd:fd:d8:85:18:de:82:db:0f:fb:
                    8d:72:f1:eb:00:77:67:76:0e:ac:8d:ce:83:67:00:
                    46:4f:13:c8:e4:a2:92:ce:5c:a5:4e:87:1f:d7:08:
                    e0:05:95:7e:e5:bc:ec:fd:6f:f5:a6:c7:03:cd:a2:
                    b4:85:88:45:a5:50:11:07:93:d4:13:a9:14:2e:de:
                    29:2c:25:2d:96:55:54:78:d9:8e:12:e6:84:2d:b2:
                    89:a4:05:e5:e2:10:86:4d:0c:a6:e3:cb:66:e3:56:
                    6e:5f:34:e5:ea:67:39:d4:e5:96:ea:03:af:b7:59:
                    de:bd:45:c5:77:60:04:be:c3:21:e0:b7:0f:7c:9b:
                    5e:ca:04:7a:b4:2d:17:4d:22:97:8f:0a:a9:fb:f1:
                    91:f5:82:b2:9b:ce:e2:b7:8c:44:47:66:09:d0:0b:
                    ab:fa:49:3b:5a:d8:a2:1c:27:45:2b:c8:e7:bf:44:
                    bb:cd:01:30:2a:67:4f:5a:1d:88:8c:da:be:3d:55:
                    90:c6:46:47:96:fe:91:14:c1:eb:67:7a:38:43:34:
                    ef:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C5:86:CA:6F:48:30:92:93:40:D0:A0:69:F7:8F:34:22:FB:45:A1
            X509v3 Authority Key Identifier:
                keyid:2F:D4:31:E4:60:7C:71:59:B1:3C:B2:8E:DF:58:E3:1A:BA:74:32:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/2FD431E4607C7159B13CB28EDF58E31ABA74325A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FD431E4607C7159B13CB28EDF58E31ABA74325A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3332203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:b8:f6:15:5b:5f:7f:3c:97:e9:db:9d:78:7e:75:b8:4b:d9:
         6e:43:fe:b1:a4:9d:41:62:57:9c:55:f7:53:7e:28:a6:9d:10:
         60:20:7c:a5:18:69:4e:7d:97:5c:91:9d:bc:35:a1:b4:50:cf:
         6b:8e:f6:19:f3:74:b7:71:f0:80:ba:d5:55:c4:6f:c7:a7:35:
         14:25:51:7c:68:8b:7b:b1:1d:f8:41:ca:90:77:64:cf:1b:ba:
         d1:4c:21:d0:f6:73:15:58:dd:42:e8:b4:c6:5d:5c:a5:df:74:
         10:c2:23:fa:6f:3b:0e:df:3f:16:fd:d3:69:5f:5c:b9:b3:97:
         7a:c0:ef:af:cd:99:70:af:e8:9b:32:02:b7:60:9b:29:3a:21:
         57:cd:7e:30:69:f6:d9:83:25:a9:3d:7c:0e:7e:cf:27:ae:75:
         01:e7:c9:f8:2b:cf:f5:66:5c:f0:e5:21:f5:78:df:17:6a:e8:
         3b:98:da:9d:51:e8:56:ec:3a:55:3d:03:79:5e:98:d7:96:11:
         f9:41:18:da:2f:ed:0c:0a:eb:55:96:ce:bd:e4:4f:91:8c:d5:
         ae:88:33:40:04:3c:ac:1a:cc:68:fc:48:76:8a:96:9b:6c:9c:
         20:77:79:11:69:0a:37:96:f5:1e:d1:98:a6:43:fe:aa:da:68:
         94:75:56:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:01:01 2025 by rpki-client