Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/3137302e38312e3230382e302f32322d3332203d3e20323636343233.roa
File:                     3137302e38312e3230382e302f32322d3332203d3e20323636343233.roa (raw, json)
Hash identifier:          8fnQc8JNgtLvzbmbXtpln0i96V/Z/4O/N9XTUOZBvWY=
Subject key identifier:   F6:F9:96:9C:AC:30:B2:8B:42:DA:73:70:F6:C5:69:51:AF:DB:7F:E6
Certificate issuer:       /CN=924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F
Certificate serial:       097632ECCBE9CFE53BFF1EE98E9D65E88F9A1887
Authority key identifier: 92:4A:34:23:D2:EA:E0:F9:16:CD:D6:05:EB:5E:C3:1F:F0:DF:B9:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/3137302e38312e3230382e302f32322d3332203d3e20323636343233.roa
Signing time:             Mon 08 Sep 2025 18:33:25 +0000
ROA not before:           Mon 08 Sep 2025 18:28:25 +0000
ROA not after:            Mon 07 Sep 2026 18:33:25 +0000
asID:                     266423
IP address blocks:        170.81.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.crl
                          rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:76:32:ec:cb:e9:cf:e5:3b:ff:1e:e9:8e:9d:65:e8:8f:9a:18:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F
        Validity
            Not Before: Sep  8 18:28:25 2025 GMT
            Not After : Sep  7 18:33:25 2026 GMT
        Subject: CN=F6F9969CAC30B28B42DA7370F6C56951AFDB7FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:fe:bb:53:e4:d7:a6:42:c7:e3:bf:3a:10:
                    a9:bd:c3:c6:be:54:2a:ab:41:ee:10:cd:f2:ab:f1:
                    82:fb:4a:1b:f3:af:47:e7:fe:8c:3c:c8:93:b4:5c:
                    ed:2a:65:4c:bb:fa:07:72:9e:39:cf:df:fd:dd:67:
                    db:33:99:af:e5:b2:db:a0:ed:eb:f3:2b:4b:41:ef:
                    d1:30:d0:fb:94:08:1d:0b:ee:64:0b:01:f0:75:55:
                    9c:36:59:ed:9b:d6:d8:e4:a0:78:79:34:9b:ff:1f:
                    38:33:9a:9e:d3:f7:03:57:9b:96:9f:e8:c1:2b:8c:
                    97:98:3c:8b:85:fc:1a:01:ae:8a:da:eb:83:a2:29:
                    96:af:cf:ae:38:50:46:5c:f4:4d:b7:78:13:8c:e0:
                    0b:81:2e:5c:68:d0:6a:53:9d:77:25:5c:47:a9:0c:
                    17:ff:0f:f0:4c:8f:8b:8e:0a:c1:64:f2:75:15:53:
                    0c:2a:e7:d0:94:23:36:b6:bf:81:c3:10:84:c2:ba:
                    fb:de:06:a1:78:49:4d:ba:dd:5c:b3:dd:1e:63:44:
                    dd:a9:16:ca:b2:d0:c8:09:67:b2:d4:57:c4:cb:a9:
                    80:d2:45:f9:cf:83:c4:ff:b6:63:b6:f4:a1:fb:4a:
                    71:fb:c4:4f:77:c6:5b:e1:64:2c:3d:3c:cc:24:09:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F9:96:9C:AC:30:B2:8B:42:DA:73:70:F6:C5:69:51:AF:DB:7F:E6
            X509v3 Authority Key Identifier:
                keyid:92:4A:34:23:D2:EA:E0:F9:16:CD:D6:05:EB:5E:C3:1F:F0:DF:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/3137302e38312e3230382e302f32322d3332203d3e20323636343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:93:b9:28:69:64:96:ba:ee:97:e5:82:13:c3:e6:a0:5d:81:
         b6:41:55:6a:39:4a:4d:51:6a:a6:a7:b8:86:71:ad:be:fe:79:
         c1:7a:fe:4f:fd:74:05:6d:28:bb:a8:3a:79:0e:52:a1:fc:48:
         8d:42:f1:ed:09:39:22:22:86:66:3d:9b:e4:d0:a3:4d:12:cd:
         60:a5:a6:4e:a5:37:3c:8d:58:82:d8:7b:52:48:a9:eb:81:5a:
         50:29:08:67:4c:7d:45:ff:04:59:26:ed:1e:37:9f:e8:21:94:
         27:d9:a1:d9:95:da:88:22:e9:5e:1e:4c:02:03:81:d1:f6:c7:
         ca:f3:95:dd:9c:ec:13:e9:ea:6c:b8:d5:f4:d2:12:99:25:25:
         85:6b:6b:ac:3c:be:39:21:ea:07:04:7e:f4:39:1a:fd:a4:eb:
         a3:b7:d1:44:4b:0b:cf:f9:ee:11:23:a4:de:93:0e:86:ee:c5:
         8e:83:3b:8c:98:ea:47:1a:5c:37:f9:91:64:6a:89:e9:b7:9e:
         6a:1d:4e:ed:b3:9c:ed:9e:7a:02:7e:56:c1:f0:6a:b4:9d:98:
         94:c0:17:0c:9e:b6:4f:65:cd:07:8f:9a:1d:cf:e4:c6:0b:d5:
         da:06:39:c0:66:b1:f1:8d:a6:f2:92:dd:2a:f1:bc:ad:49:6a:
         64:c6:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:24:26 2025 by rpki-client