Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231342e302f32332d3233203d3e203532373036.roa
File:                     3137302e3233332e3231342e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          6vqy805VFo1BiFg3+JvobHuvyvtpt6mMep9+3oRywQs=
Subject key identifier:   3C:AF:7B:1E:3E:E4:D7:70:3E:66:CF:0D:54:4D:C7:C1:37:0B:BF:D9
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       743D0AFFF4A1A2C3E087CC9E67F21BB64996C565
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231342e302f32332d3233203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 18:18:01 +0000
ROA not before:           Fri 22 Aug 2025 18:13:01 +0000
ROA not after:            Fri 21 Aug 2026 18:18:01 +0000
asID:                     52706
IP address blocks:        170.233.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3d:0a:ff:f4:a1:a2:c3:e0:87:cc:9e:67:f2:1b:b6:49:96:c5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 18:13:01 2025 GMT
            Not After : Aug 21 18:18:01 2026 GMT
        Subject: CN=3CAF7B1E3EE4D7703E66CF0D544DC7C1370BBFD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f3:79:e6:a5:2e:37:bc:80:a1:4b:ef:90:48:
                    58:98:0b:bd:a1:b7:86:b7:d3:62:fc:f2:c3:56:0c:
                    de:18:f1:0c:18:42:01:a3:06:be:78:e0:87:cf:53:
                    ac:d2:52:01:ad:77:01:cb:49:dc:e8:1f:dc:cc:12:
                    fe:5c:47:bd:01:43:69:f8:17:19:c3:60:95:5d:0d:
                    a8:16:c3:7d:d3:d3:8c:c0:2e:2a:52:5d:9a:96:e8:
                    b3:02:ff:8d:be:a5:fa:e6:5a:b5:d9:8f:1c:4f:53:
                    62:02:d6:9c:ab:1b:1b:21:9f:db:35:a4:e7:59:6c:
                    9b:66:f4:8f:00:96:70:36:26:b6:02:8e:94:c9:80:
                    9f:50:64:94:04:30:7c:b1:c3:fd:14:de:41:26:55:
                    a6:14:5c:24:32:db:57:ff:0a:d5:44:ca:dd:61:c2:
                    8f:d6:67:ae:b8:21:54:0d:8f:17:ff:86:e9:81:b7:
                    79:43:18:f1:88:f9:60:b2:09:59:e2:82:a1:db:a1:
                    7f:ad:26:e6:57:7f:cf:50:4b:89:aa:30:3a:86:05:
                    53:84:e8:84:99:77:88:94:58:1a:80:4c:88:c9:fe:
                    db:6e:bd:20:77:5e:0f:88:7d:dc:69:68:1b:1c:1b:
                    b0:01:0d:3d:fc:20:0f:c7:75:1a:25:cc:e6:c1:1f:
                    21:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AF:7B:1E:3E:E4:D7:70:3E:66:CF:0D:54:4D:C7:C1:37:0B:BF:D9
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137302e3233332e3231342e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:65:9d:7c:d2:03:26:94:b1:61:8d:5c:9f:a7:19:f3:5f:93:
         f4:4f:58:e7:f6:ca:81:dc:9d:d5:71:e6:ff:da:2e:d0:19:49:
         1d:99:1a:a9:61:6d:e9:ac:ff:3a:a2:cd:3d:c3:cb:31:e0:b8:
         cf:a9:e3:ef:4d:13:ee:b0:90:cb:c4:98:6b:ea:b8:a0:5e:5b:
         39:8d:b7:66:98:ad:b3:19:aa:2a:3a:43:f1:91:f2:f6:ed:d3:
         32:2a:47:cf:b8:1c:d8:42:fc:d1:62:b0:ad:23:62:41:2b:5f:
         57:76:d2:bc:ca:7a:ec:9d:85:a4:20:59:e1:30:38:12:c2:21:
         e2:71:99:4d:20:d0:7c:be:e0:06:53:39:c4:48:3d:25:91:5b:
         43:0e:4c:b5:13:2e:3a:71:61:78:2d:7f:7e:b6:d8:75:c4:73:
         2f:97:05:95:4e:4f:0f:44:e1:82:45:79:0b:33:04:ea:6e:27:
         5f:6d:82:8c:fb:bd:18:ac:b3:d9:45:9e:ed:51:f3:67:37:60:
         80:22:d6:c6:12:84:10:52:13:c1:3a:ac:72:2f:41:c8:5c:fb:
         26:f7:f6:83:bb:02:b9:2e:32:9c:8c:57:76:1d:c5:0f:53:39:
         9e:0b:3c:ff:ab:32:ef:79:3a:f4:1a:7b:4a:d7:54:75:84:58:
         4b:32:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:07:18 2025 by rpki-client