Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32322d3232203d3e203532373036.roa
File:                     3137302e3233332e3231322e302f32322d3232203d3e203532373036.roa (raw, json)
Hash identifier:          tL4H6E4wukdBwEoj0ByaPo5FwM09LoGUkXDyY/TKjkA=
Subject key identifier:   51:15:E3:49:1D:04:2E:D3:5A:F6:59:6C:89:D9:C8:42:72:B8:6A:79
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       38E533CB72F3D464CFC7FC82DFFE44EF83B20C28
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32322d3232203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 14:46:17 +0000
ROA not before:           Fri 22 Aug 2025 14:41:17 +0000
ROA not after:            Fri 21 Aug 2026 14:46:17 +0000
asID:                     52706
IP address blocks:        170.233.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e5:33:cb:72:f3:d4:64:cf:c7:fc:82:df:fe:44:ef:83:b2:0c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 14:41:17 2025 GMT
            Not After : Aug 21 14:46:17 2026 GMT
        Subject: CN=5115E3491D042ED35AF6596C89D9C84272B86A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6a:60:f6:ea:09:b0:8e:8b:13:fa:f2:1c:b1:
                    8d:d3:61:d5:09:fd:7c:c3:3c:86:fd:01:95:98:cd:
                    d7:d1:af:79:cb:c7:0f:e4:d7:23:2f:f7:6a:a3:62:
                    ac:71:69:fe:f6:25:2c:28:b1:92:c7:d7:f3:18:7c:
                    b7:e1:d2:5a:76:48:ee:5f:0a:92:cc:a9:32:e0:45:
                    72:a4:52:29:7c:ae:54:0d:54:32:bd:40:c9:1e:d4:
                    6c:4f:40:3b:3b:31:51:83:e4:4d:3e:7a:2b:d8:ad:
                    21:16:d5:ba:fc:8f:6d:aa:32:40:f5:ef:04:44:c2:
                    ad:82:70:65:0e:46:cc:13:26:cc:43:26:4f:70:91:
                    99:99:92:40:72:a4:35:ca:a3:57:77:ba:64:03:43:
                    80:15:80:b0:20:e4:99:d6:5a:15:91:bc:40:ce:39:
                    82:9c:90:a6:18:73:39:40:b0:3a:db:ca:10:a0:23:
                    02:4d:c8:f4:e7:47:4e:e4:d5:52:61:25:f7:68:f4:
                    a1:c5:05:68:84:a7:66:50:0b:16:b1:c1:9f:12:d4:
                    17:29:ac:43:fc:67:95:fd:7a:5e:02:0d:fc:46:40:
                    6b:84:4c:45:4c:a4:a0:ef:1f:1c:31:d8:6e:9d:58:
                    e0:4a:85:b5:cb:74:4a:4a:df:b9:bb:70:e4:06:03:
                    0f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:15:E3:49:1D:04:2E:D3:5A:F6:59:6C:89:D9:C8:42:72:B8:6A:79
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231322e302f32322d3232203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:8e:92:42:7e:c1:28:45:b3:54:41:a7:37:35:8f:08:2c:f0:
         95:39:4a:46:50:bd:87:02:55:22:b5:e7:ca:3e:70:52:4c:ba:
         69:9b:4d:d7:83:5b:56:78:a2:5b:36:59:fa:7e:99:ee:89:1c:
         6b:09:ad:0d:3d:b0:23:b1:c1:93:2b:a1:26:9b:44:1b:2a:97:
         8a:ff:8e:5b:8b:6c:e2:60:f4:a0:a8:fe:c8:f4:c1:c4:27:94:
         d6:c1:9e:f9:ab:66:d2:2c:94:be:5b:37:22:54:c4:38:c6:3a:
         a6:4a:28:09:3f:3d:ff:51:a9:4b:f5:89:6d:27:4b:72:12:0b:
         2c:a2:6f:12:f9:15:82:1d:52:55:16:bd:6f:0b:f5:64:1f:41:
         93:dc:83:f2:e5:47:8e:f9:73:38:9b:49:39:e9:c1:64:c5:7f:
         88:a5:0e:9f:a0:6f:de:34:0f:ab:06:97:32:28:28:f7:b3:fa:
         f4:7d:bd:5d:62:57:ce:c3:b8:7e:3f:bf:36:e1:f9:78:fb:71:
         b3:b9:d8:d6:66:cd:e3:e0:92:0f:ad:d4:6c:46:03:ec:67:0b:
         11:c6:fc:14:39:7f:76:2c:15:57:c1:0f:e0:cb:62:c6:1f:b5:
         86:d9:78:f0:b5:e6:ab:79:cf:b3:5f:22:7b:92:90:e8:77:c8:
         12:d2:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:06:56 2025 by rpki-client