Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3234362e3136342e302f32322d3234203d3e203532393133.roa
File:                     3137302e3234362e3136342e302f32322d3234203d3e203532393133.roa (raw, json)
Hash identifier:          pKIlEjTJQdtfOgnsTf9kAZyFJKRBEZfwhcEAHrNiQhE=
Subject key identifier:   B1:92:79:F0:27:EB:F8:AF:B3:79:17:31:F3:97:4F:2D:F5:7A:FC:41
Certificate issuer:       /CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
Certificate serial:       757BFBD7E1410EC9245DFC3CAC64F15F72E397DA
Authority key identifier: 60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3234362e3136342e302f32322d3234203d3e203532393133.roa
Signing time:             Thu 11 Sep 2025 16:08:05 +0000
ROA not before:           Thu 11 Sep 2025 16:03:05 +0000
ROA not after:            Thu 10 Sep 2026 16:08:05 +0000
asID:                     52913
IP address blocks:        170.246.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 05:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7b:fb:d7:e1:41:0e:c9:24:5d:fc:3c:ac:64:f1:5f:72:e3:97:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
        Validity
            Not Before: Sep 11 16:03:05 2025 GMT
            Not After : Sep 10 16:08:05 2026 GMT
        Subject: CN=B19279F027EBF8AFB3791731F3974F2DF57AFC41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:5a:a9:bf:0e:81:01:9c:67:6a:a1:bd:e7:
                    9b:47:37:b4:35:90:fa:0a:57:1b:f6:0d:4e:44:0f:
                    f5:af:a1:88:80:e6:4a:cb:a9:3e:8f:08:10:d5:d9:
                    4f:e6:cc:15:ec:54:5a:e4:87:f3:40:b1:30:6b:f4:
                    39:f6:64:69:40:4b:b5:e6:e3:16:4b:57:b3:53:51:
                    4c:35:45:cf:e4:b0:72:99:0a:1a:df:88:46:5d:42:
                    b3:c8:78:02:5e:ea:9f:30:e9:ff:af:53:1a:82:e1:
                    1f:30:95:5d:bc:de:1c:e2:7f:d3:21:7e:8a:0d:66:
                    2e:c6:c0:bd:72:3c:ef:61:c9:f6:4f:ca:7e:3a:af:
                    1a:71:45:bc:c7:66:4c:4d:9f:7d:fd:f0:3d:6e:15:
                    c5:85:12:54:77:18:4d:37:e8:6f:07:7e:4a:30:9a:
                    52:86:7b:ea:9d:94:21:65:d7:1c:4c:36:83:1f:cf:
                    c3:1a:70:fc:2b:fb:fd:1b:e6:73:86:4e:ed:02:fb:
                    ca:6e:63:6b:5a:a6:24:f1:e3:5b:c8:e6:07:4f:1e:
                    4e:eb:c8:32:0d:ae:1a:a9:ce:c9:ab:93:0c:fe:d0:
                    b6:ff:f8:2b:f6:19:c8:55:19:91:b8:74:d3:c6:f9:
                    18:f8:91:5e:a1:09:e1:28:63:38:59:19:77:51:5a:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:92:79:F0:27:EB:F8:AF:B3:79:17:31:F3:97:4F:2D:F5:7A:FC:41
            X509v3 Authority Key Identifier:
                keyid:60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3234362e3136342e302f32322d3234203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:c9:97:75:31:41:60:09:d9:11:70:0e:ee:de:5d:ae:a3:c1:
         f5:0b:eb:ef:bd:dd:2b:0d:9d:87:3c:0c:78:28:8d:ae:c5:ca:
         78:03:37:d1:53:6a:0c:51:5c:92:cf:dc:d5:78:32:11:ea:a9:
         e8:b1:9a:f2:99:6b:36:35:5e:6c:71:cc:15:a8:af:13:01:b4:
         50:f3:fe:31:c2:43:f8:83:bf:9e:05:e7:9f:79:2f:3c:94:9d:
         45:80:12:8e:e7:9e:d2:ab:89:e9:cb:20:5f:11:d7:c2:8e:c1:
         d6:a3:76:7e:d0:9b:b1:14:fc:3d:a9:36:16:4b:03:f1:24:b8:
         6d:02:6f:79:24:50:a7:95:5f:1e:85:01:02:f0:2e:61:b5:2e:
         77:53:06:ea:59:06:db:72:9e:23:64:aa:f0:74:19:12:ec:5b:
         dd:41:ac:5c:d4:c6:14:e1:e7:fc:12:c9:72:1f:48:bc:c6:12:
         4a:bf:20:45:5b:76:39:81:29:46:69:14:38:66:35:d0:57:c0:
         31:7e:88:4d:cb:c0:a2:ec:a7:6b:98:d5:1a:a8:ec:4f:17:f0:
         bb:64:bb:aa:bc:b4:68:8a:af:7c:b3:1d:93:1d:1e:c2:97:3d:
         79:80:1d:a2:67:62:d9:d4:29:eb:ac:84:cf:52:73:37:8f:15:
         40:f7:31:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:49:25 2025 by rpki-client