Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e312e302f32342d3234203d3e20323633363237.roa
File:                     3137302e38302e312e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          jUaoqDOOxx5Iba/SSBG7lCi0OdCo74pv/Z4aPF2Q91k=
Subject key identifier:   14:88:0D:7B:65:67:42:4B:D2:00:C8:F0:C8:3D:F0:89:83:F0:1B:3D
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       7F670AED857404F33BA3F6EC0DA6157E08AE9EA6
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e312e302f32342d3234203d3e20323633363237.roa
Signing time:             Thu 18 Sep 2025 20:20:25 +0000
ROA not before:           Thu 18 Sep 2025 20:15:25 +0000
ROA not after:            Thu 17 Sep 2026 20:20:25 +0000
asID:                     263627
IP address blocks:        170.80.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 20:23:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:67:0a:ed:85:74:04:f3:3b:a3:f6:ec:0d:a6:15:7e:08:ae:9e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Sep 18 20:15:25 2025 GMT
            Not After : Sep 17 20:20:25 2026 GMT
        Subject: CN=14880D7B6567424BD200C8F0C83DF08983F01B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:2b:a0:4e:1e:86:2b:1c:9c:77:ef:0a:1e:
                    99:97:89:2d:c3:9a:27:fa:68:68:1a:8c:62:a8:3d:
                    00:26:0e:39:5e:90:49:d4:a7:ad:56:db:3b:b4:76:
                    72:ac:7c:3b:43:de:32:83:0e:41:eb:5e:2e:50:27:
                    85:94:d9:c6:0f:03:98:d9:64:57:4f:5c:7c:44:5a:
                    0a:91:6f:52:a1:a3:e8:10:52:5b:4c:ad:d8:67:3b:
                    ca:cd:51:81:d7:35:2f:f4:97:9a:28:ea:c4:84:ab:
                    0d:8c:f2:95:a0:2d:f4:2f:5f:09:46:74:92:e6:ed:
                    2e:bd:42:36:a1:b9:43:62:77:06:ee:79:87:b1:23:
                    72:b8:a5:54:ac:75:44:f1:0a:6c:1c:c6:4b:a0:71:
                    a0:6c:99:de:3e:a1:23:7d:c2:60:91:7c:f3:8d:74:
                    c9:79:99:18:e1:8b:df:d5:44:21:e7:46:0c:79:6d:
                    eb:b2:cb:ea:c3:00:2a:ea:16:2f:1f:8b:f0:a9:a3:
                    14:3f:87:bb:11:93:84:f6:8b:f9:b1:5f:58:88:6f:
                    0c:99:db:e7:6c:75:b9:60:5b:98:02:8a:b0:f0:fa:
                    a1:04:2a:7e:46:63:8f:ba:79:e7:8f:03:2d:92:8f:
                    34:54:4b:61:1a:a4:56:21:9e:96:db:6c:1d:f9:76:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:88:0D:7B:65:67:42:4B:D2:00:C8:F0:C8:3D:F0:89:83:F0:1B:3D
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137302e38302e312e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:92:17:13:26:05:8b:bb:e5:f3:df:0f:cf:f0:3c:29:56:e0:
         5b:c3:a7:7c:fa:87:e4:f8:cc:42:61:de:31:c1:16:87:56:8e:
         e2:0c:de:f1:97:6a:65:23:06:5d:1b:72:4b:7b:9c:71:a0:a8:
         c7:7f:c6:f0:3b:54:19:93:9b:54:6a:80:79:75:23:41:39:01:
         32:fd:79:5c:20:98:5f:0a:e5:9f:8f:f9:d7:9a:da:4a:0a:c9:
         2b:87:8c:43:85:ce:c6:d3:6a:c1:93:1c:7c:7f:82:c5:ef:de:
         13:30:cb:03:e3:13:97:71:d9:e8:f6:3f:f1:02:95:e5:80:35:
         a0:64:ff:1f:6c:39:b1:e9:85:42:94:ca:cd:b4:f6:25:85:e0:
         ce:b1:99:1e:a8:93:cf:bc:fb:2d:a3:dc:db:9e:e2:e3:dc:af:
         04:90:31:69:08:75:34:cc:03:42:6e:50:02:41:e3:12:96:ea:
         74:73:4c:69:0a:a6:60:f1:81:bf:53:d5:54:54:a6:84:da:a0:
         c9:1b:08:1c:2f:0c:05:4a:25:6b:97:86:03:e3:7b:f9:21:ab:
         d7:91:08:f9:86:77:2f:01:45:90:ab:a7:32:0a:e5:4c:0c:94:
         86:d6:56:39:0a:26:9e:e6:09:11:73:0c:9a:a2:0f:f1:f5:a8:
         0a:ed:f9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:58:08 2025 by rpki-client