Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa
File:                     3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa (raw, json)
Hash identifier:          Gip8Yo9wEef713nDw4AclbT0xwE2Pq0YefXbAnf+sQs=
Subject key identifier:   56:C9:9A:B0:17:83:0C:04:B9:4F:BB:AA:F1:05:CE:B3:0D:03:DD:F4
Certificate issuer:       /CN=7B7CC473200A160EB6B26066FF168BAABFCD7A93
Certificate serial:       7D5D60AD847CAB5C9E8C842C6F5EE4238AF9D399
Authority key identifier: 7B:7C:C4:73:20:0A:16:0E:B6:B2:60:66:FF:16:8B:AA:BF:CD:7A:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CC473200A160EB6B26066FF168BAABFCD7A93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa
Signing time:             Wed 05 Nov 2025 22:25:40 +0000
ROA not before:           Wed 05 Nov 2025 22:20:40 +0000
ROA not after:            Wed 04 Nov 2026 22:25:40 +0000
asID:                     265384
IP address blocks:        170.254.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/7B7CC473200A160EB6B26066FF168BAABFCD7A93.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/7B7CC473200A160EB6B26066FF168BAABFCD7A93.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CC473200A160EB6B26066FF168BAABFCD7A93.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 01:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5d:60:ad:84:7c:ab:5c:9e:8c:84:2c:6f:5e:e4:23:8a:f9:d3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B7CC473200A160EB6B26066FF168BAABFCD7A93
        Validity
            Not Before: Nov  5 22:20:40 2025 GMT
            Not After : Nov  4 22:25:40 2026 GMT
        Subject: CN=56C99AB017830C04B94FBBAAF105CEB30D03DDF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:eb:8a:2f:65:07:0b:32:1b:98:9a:ea:2a:
                    f6:9f:c2:35:ba:e8:f2:a5:54:61:28:2c:96:bc:b5:
                    d7:81:e0:72:e2:b4:8d:61:27:e4:92:e1:9b:52:fc:
                    2e:e4:c1:f6:0f:74:03:d4:ad:30:29:0e:9a:b4:20:
                    bb:00:db:19:3d:2e:70:b3:04:52:f8:42:93:fb:77:
                    6d:86:54:4d:6c:54:1f:7b:2a:b6:ec:0c:c2:8f:37:
                    a8:98:0b:a5:f1:35:68:6c:32:ef:b7:7a:28:0c:c5:
                    cf:04:d5:5d:f4:8d:45:24:4f:13:b7:db:07:f6:6a:
                    19:0d:0c:60:92:0f:66:11:fe:8c:90:b7:a7:b0:17:
                    1f:77:83:58:62:e3:36:77:60:66:da:96:be:6e:0e:
                    98:39:07:76:67:f8:b5:fd:8c:45:46:f2:ac:35:53:
                    6a:58:96:c9:eb:7b:18:5d:be:73:10:80:9e:68:91:
                    6c:29:e4:f5:ee:8b:fa:69:b2:be:c7:bb:78:bd:18:
                    a8:a0:35:f8:9d:93:c0:59:07:83:55:67:ed:16:bc:
                    67:d8:c8:2c:2b:4e:cd:9b:70:1f:81:87:36:f2:d6:
                    12:e2:81:7e:47:c9:4f:c8:a7:59:ff:e5:8f:1f:70:
                    f0:f0:dd:34:d1:6b:63:0d:91:3d:53:b1:d7:6c:7b:
                    0a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C9:9A:B0:17:83:0C:04:B9:4F:BB:AA:F1:05:CE:B3:0D:03:DD:F4
            X509v3 Authority Key Identifier:
                keyid:7B:7C:C4:73:20:0A:16:0E:B6:B2:60:66:FF:16:8B:AA:BF:CD:7A:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/7B7CC473200A160EB6B26066FF168BAABFCD7A93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CC473200A160EB6B26066FF168BAABFCD7A93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:53:4c:55:ea:6d:1f:d4:66:0b:ae:82:47:99:2f:9e:6d:73:
         db:7f:ad:cf:3c:c4:29:fc:50:67:46:36:28:3f:58:22:d7:d3:
         67:49:ad:02:22:a2:3f:4f:52:22:aa:a9:67:ef:77:3e:7d:67:
         1a:4a:76:a9:b6:58:9f:37:61:21:2b:ac:12:3c:e5:99:88:6a:
         8a:d4:2b:94:05:5d:20:20:b6:a7:bc:13:0c:b6:e3:44:b8:bb:
         a2:43:04:6d:24:ba:99:1d:8a:a2:c5:f7:6d:b4:ed:cd:2a:f7:
         ba:40:a2:4f:46:a4:e1:af:97:67:33:64:88:e5:20:f5:ce:87:
         e7:1a:ef:0e:61:02:ad:24:f8:25:d5:f9:99:36:e1:4d:5c:b5:
         da:fc:18:3b:6d:b0:55:5b:82:e2:3c:be:5e:38:9a:ec:97:60:
         66:cf:fb:55:b8:50:fa:75:de:da:f2:ac:d5:43:38:2b:7f:11:
         6e:7d:22:b1:9c:78:34:58:30:f6:5e:7a:87:b8:6c:82:0e:b1:
         71:09:06:5a:9a:cd:41:b7:3c:3e:e4:38:07:8e:57:a1:53:95:
         93:5a:80:38:d9:9d:c3:8f:b8:2f:ca:4d:a6:0d:4b:ee:4e:76:
         48:cd:45:79:e8:0f:e9:91:ff:92:1f:c6:ec:1e:2b:42:53:72:
         fd:14:32:c9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfV1grYR8q1yejIQsb17kI4r505kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I3Q0M0NzMyMDBBMTYwRUI2QjI2MDY2RkYxNjhCQUFC
RkNEN0E5MzAeFw0yNTExMDUyMjIwNDBaFw0yNjExMDQyMjI1NDBaMDMxMTAvBgNV
BAMTKDU2Qzk5QUIwMTc4MzBDMDRCOTRGQkJBQUYxMDVDRUIzMEQwM0RERjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJs+uKL2UHCzIbmJrqKvafwjW6
6PKlVGEoLJa8tdeB4HLitI1hJ+SS4ZtS/C7kwfYPdAPUrTApDpq0ILsA2xk9LnCz
BFL4QpP7d22GVE1sVB97KrbsDMKPN6iYC6XxNWhsMu+3eigMxc8E1V30jUUkTxO3
2wf2ahkNDGCSD2YR/oyQt6ewFx93g1hi4zZ3YGbalr5uDpg5B3Zn+LX9jEVG8qw1
U2pYlsnrexhdvnMQgJ5okWwp5PXui/ppsr7Hu3i9GKigNfidk8BZB4NVZ+0WvGfY
yCwrTs2bcB+Bhzby1hLigX5HyU/Ip1n/5Y8fcPDw3TTRa2MNkT1Tsddsewq3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVsmasBeDDAS5T7uq8QXOsw0D3fQwHwYDVR0j
BBgwFoAUe3zEcyAKFg62smBm/xaLqr/NepMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VR
cHQvMC83QjdDQzQ3MzIwMEExNjBFQjZCMjYwNjZGRjE2OEJBQUJGQ0Q3QTkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCN0NDNDczMjAwQTE2MEVC
NkIyNjA2NkZGMTY4QkFBQkZDRDdBOTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOUDhjUEQ0NFRqd2ZQV1BEdnBSVTN6U3hnWUo5WVZFV0NqYWlnZmNlUXB0LzAv
MzEzNzMwMmUzMjM1MzQyZTMyMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMzMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr+8DANBgkqhkiG9w0BAQsFAAOCAQEAH1NM
VeptH9RmC66CR5kvnm1z23+tzzzEKfxQZ0Y2KD9YItfTZ0mtAiKiP09SIqqpZ+93
Pn1nGkp2qbZYnzdhISusEjzlmYhqitQrlAVdICC2p7wTDLbjRLi7okMEbSS6mR2K
osX3bbTtzSr3ukCiT0ak4a+XZzNkiOUg9c6H5xrvDmECrST4JdX5mTbhTVy12vwY
O22wVVuC4jy+Xjia7JdgZs/7VbhQ+nXe2vKs1UM4K38Rbn0isZx4NFgw9l56h7hs
gg6xcQkGWprNQbc8PuQ4B45XoVOVk1qAONmdw4+4L8pNpg1L7k52SM1FeegP6ZH/
kh/G7B4rQlNy/RQyyQ==
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:38:28 2025 by rpki-client