Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/3137302e3234352e3131362e302f32322d3332203d3e20323634343239.roa
File:                     3137302e3234352e3131362e302f32322d3332203d3e20323634343239.roa (raw, json)
Hash identifier:          bdYqLTrmyZVtnX3hQzjggcKDrPInm/SX7ouRHDPAjqE=
Subject key identifier:   3A:43:68:41:CB:43:0E:C3:FF:B6:2B:26:47:22:12:83:9E:22:5D:0B
Certificate issuer:       /CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D
Certificate serial:       652E5E79136DE699AEF460E71D9ADB73B9D40C81
Authority key identifier: 4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/3137302e3234352e3131362e302f32322d3332203d3e20323634343239.roa
Signing time:             Thu 17 Jul 2025 14:44:48 +0000
ROA not before:           Thu 17 Jul 2025 14:39:48 +0000
ROA not after:            Thu 16 Jul 2026 14:44:48 +0000
asID:                     264429
IP address blocks:        170.245.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl
                          rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 17:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2e:5e:79:13:6d:e6:99:ae:f4:60:e7:1d:9a:db:73:b9:d4:0c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D
        Validity
            Not Before: Jul 17 14:39:48 2025 GMT
            Not After : Jul 16 14:44:48 2026 GMT
        Subject: CN=3A436841CB430EC3FFB62B26472212839E225D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:b4:c2:47:74:96:4f:18:7c:82:20:fa:e8:
                    95:90:13:3e:f3:1f:d2:5f:32:6d:20:6c:5f:fc:38:
                    7b:0e:cf:27:25:22:1f:39:78:50:5e:75:72:d3:a1:
                    52:7e:18:88:a5:b4:4d:25:4c:f2:f6:50:f6:5c:3c:
                    54:81:b9:f8:4a:67:14:e1:e7:6c:1c:7b:02:65:84:
                    cd:a0:e6:d1:25:51:f3:7d:f6:d8:87:6d:2a:f7:7f:
                    93:97:18:6d:ef:51:71:d0:f9:ee:eb:0a:77:42:9e:
                    cd:4e:35:7a:23:1a:83:64:18:1b:1f:13:d3:97:b1:
                    37:61:5d:13:21:1d:0b:85:ae:db:a2:15:c4:53:fc:
                    1f:01:92:d1:17:d6:d6:56:e9:b1:6b:52:9e:5f:92:
                    c4:ba:13:42:b6:33:c2:60:f0:ac:ab:4c:40:91:78:
                    9a:78:d1:c0:cf:db:78:42:10:ba:91:cb:08:00:b8:
                    93:92:5c:84:b4:5f:56:77:24:02:35:c2:5f:4d:5d:
                    5d:13:c9:b0:92:7c:a1:e3:76:3e:8f:1e:0a:dc:24:
                    e3:3b:7f:80:de:6f:5d:f9:4f:78:e2:9a:58:63:86:
                    f8:12:71:51:ce:0a:bb:b5:64:34:5c:0a:a0:57:69:
                    0b:43:21:24:6f:3b:2a:bd:ff:ac:dc:04:5b:54:d3:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:43:68:41:CB:43:0E:C3:FF:B6:2B:26:47:22:12:83:9E:22:5D:0B
            X509v3 Authority Key Identifier:
                keyid:4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/3137302e3234352e3131362e302f32322d3332203d3e20323634343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:b9:72:da:a2:f0:17:a0:d5:fb:89:0c:48:fd:e4:4c:dd:2c:
         de:72:ae:23:70:8c:f8:37:8e:22:38:cc:a9:0d:0d:1a:1e:15:
         b3:ed:be:13:2c:11:b0:b0:25:a9:30:3c:e6:74:a8:05:57:50:
         53:10:ae:f4:71:cd:58:f3:cc:c8:d0:cb:90:b8:3d:ba:e1:2b:
         c8:9c:25:21:4e:03:91:be:7a:29:81:2b:3e:54:a9:f1:03:e3:
         ec:69:70:9a:6d:58:dd:07:1e:9b:36:7e:49:41:50:67:da:77:
         6e:f6:9f:1a:0d:67:f8:61:35:10:88:d1:c1:3d:3e:95:4e:85:
         5b:19:19:6e:83:bf:45:0e:4c:20:48:43:7a:93:9f:e9:42:3d:
         0a:c3:87:59:9c:8d:3c:6b:39:b1:09:02:af:88:8f:3b:86:34:
         4a:ea:5d:e8:45:bf:19:bd:b1:ab:a3:47:a4:65:5f:f7:12:db:
         f1:a9:23:dd:f5:c4:d3:3f:3d:98:c2:38:d2:71:59:0e:6e:9f:
         62:a5:9c:6b:d2:c6:75:9f:f2:6b:1d:e9:03:68:38:ec:61:3e:
         f7:21:7a:6b:2b:bf:5b:ff:d6:47:8d:3c:89:0d:f0:72:a6:ca:
         3e:9a:2d:1c:5b:5e:00:94:fd:d0:63:fd:e2:36:79:b7:99:e4:
         1d:20:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:55:58 2025 by rpki-client