Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32322d3232203d3e20323636333835.roa
File:                     3137302e38302e3232342e302f32322d3232203d3e20323636333835.roa (raw, json)
Hash identifier:          SLI5gaYY9glT6uc5JcwLnHytqqvx9ODcN3A8ugH6adY=
Subject key identifier:   DF:AD:95:A4:15:BF:11:6F:2E:DC:EC:A1:1C:C0:6D:BE:39:EB:1D:F7
Certificate issuer:       /CN=F312DD28F74F7F28D25A7DC41721E8A859A96817
Certificate serial:       47F4856ABA6D4B85500AF2662E73DF6AD12BD8AA
Authority key identifier: F3:12:DD:28:F7:4F:7F:28:D2:5A:7D:C4:17:21:E8:A8:59:A9:68:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32322d3232203d3e20323636333835.roa
Signing time:             Wed 27 Aug 2025 12:41:43 +0000
ROA not before:           Wed 27 Aug 2025 12:36:43 +0000
ROA not after:            Wed 26 Aug 2026 12:41:43 +0000
asID:                     266385
IP address blocks:        170.80.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f4:85:6a:ba:6d:4b:85:50:0a:f2:66:2e:73:df:6a:d1:2b:d8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F312DD28F74F7F28D25A7DC41721E8A859A96817
        Validity
            Not Before: Aug 27 12:36:43 2025 GMT
            Not After : Aug 26 12:41:43 2026 GMT
        Subject: CN=DFAD95A415BF116F2EDCECA11CC06DBE39EB1DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:34:71:e1:b5:a6:bb:a4:fc:0c:a4:2e:d0:
                    c0:5d:25:2d:ac:6b:7f:17:fc:d5:4a:6e:4d:f4:46:
                    8f:a4:a5:02:05:70:03:ea:35:9a:d2:04:83:a2:77:
                    26:e2:df:0f:58:40:48:c2:3c:50:13:90:ab:b6:3c:
                    9e:35:41:bd:3b:ed:a1:20:07:5d:30:77:48:aa:c9:
                    1d:67:37:7d:82:64:0f:b4:a8:4c:c8:99:56:f3:fa:
                    b6:13:0d:79:39:6c:38:16:85:88:52:41:b6:bb:65:
                    5f:73:49:96:4a:bf:ba:de:34:5d:14:cb:29:77:30:
                    33:86:d3:ea:7e:36:03:ac:2c:4f:f3:f5:a2:29:9b:
                    6f:cd:ac:f7:23:64:04:a9:99:43:50:0a:a1:49:6a:
                    bc:d3:67:93:5b:69:7d:a5:a6:b5:c5:89:cd:d0:cd:
                    0d:70:5c:b4:ec:75:6c:ad:c5:af:60:91:94:92:62:
                    34:a8:da:16:b7:1c:5f:21:e1:94:f9:ad:f5:a2:73:
                    ff:a8:6a:0c:62:be:63:9c:f3:50:16:10:78:99:41:
                    1f:f1:6c:12:7d:e9:cc:8d:26:35:1d:f5:50:10:71:
                    b6:8d:1b:3a:40:74:da:8c:d9:5f:42:44:f6:f6:bf:
                    5e:8f:99:7f:3b:ae:ea:fd:8f:7c:62:1d:bc:14:a6:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AD:95:A4:15:BF:11:6F:2E:DC:EC:A1:1C:C0:6D:BE:39:EB:1D:F7
            X509v3 Authority Key Identifier:
                keyid:F3:12:DD:28:F7:4F:7F:28:D2:5A:7D:C4:17:21:E8:A8:59:A9:68:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232342e302f32322d3232203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:fe:ea:d6:96:d8:fd:ef:ed:7c:58:26:3a:dd:c7:46:85:3c:
         ac:d0:25:98:bb:f0:8f:3a:19:52:14:24:6a:1e:5b:96:45:d8:
         97:45:0c:cb:a7:ce:71:2f:0b:35:49:14:ea:24:d2:19:93:e6:
         48:58:2a:1c:8f:61:ef:8c:24:f7:5d:05:7c:da:2c:45:06:90:
         6e:a0:31:66:77:2a:3f:2b:fe:e7:62:c3:b4:07:4e:2f:8b:44:
         10:2b:c9:12:b6:bd:fd:9b:77:96:10:be:7c:24:8f:58:7f:b4:
         e7:1f:32:94:31:cb:78:b8:c4:f8:6f:76:22:8f:78:ee:af:27:
         31:b0:ea:c0:18:cb:55:aa:a4:1e:ef:84:8a:45:27:bb:e3:27:
         7a:1b:9d:b0:08:dc:ce:6a:9a:a7:a4:8f:23:c0:50:68:07:74:
         b8:37:ee:37:2e:06:30:29:67:30:90:c8:df:94:c6:09:fd:1a:
         18:92:e1:79:23:9f:31:30:85:50:0f:72:ee:69:2f:6e:39:17:
         d3:12:c6:97:34:a8:41:bf:89:e6:dd:56:9c:45:7a:39:37:8c:
         12:8e:ba:b6:8b:58:8a:71:ca:0d:74:58:71:6d:55:32:02:9f:
         ab:62:74:bd:05:f1:eb:a2:de:47:cc:8c:51:56:83:f0:4f:03:
         c7:ea:07:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:59:15 2025 by rpki-client