Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37362e302f32342d3234203d3e20323730343133.roa
File:                     3137302e302e37362e302f32342d3234203d3e20323730343133.roa (raw, json)
Hash identifier:          Qt/LgJQ5yJa48JTuzCk49axtmqOc+gcV4duBTDtP0yo=
Subject key identifier:   7D:28:F7:C5:A2:F7:E8:86:30:20:40:52:B4:4E:5B:BD:75:03:38:7E
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       7F0CB9601055AE42599FC5B70561E4FBA5249928
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37362e302f32342d3234203d3e20323730343133.roa
Signing time:             Thu 04 Sep 2025 14:30:07 +0000
ROA not before:           Thu 04 Sep 2025 14:25:07 +0000
ROA not after:            Thu 03 Sep 2026 14:30:07 +0000
asID:                     270413
IP address blocks:        170.0.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0c:b9:60:10:55:ae:42:59:9f:c5:b7:05:61:e4:fb:a5:24:99:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Sep  4 14:25:07 2025 GMT
            Not After : Sep  3 14:30:07 2026 GMT
        Subject: CN=7D28F7C5A2F7E88630204052B44E5BBD7503387E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:10:83:b3:af:36:1d:17:7e:92:a1:18:a4:
                    18:9f:fc:d7:28:83:54:73:d0:a4:3e:ff:41:6d:a2:
                    ab:fb:59:5f:c2:d4:93:3b:54:de:a0:55:b9:ba:7c:
                    e2:83:76:58:07:b7:f5:0c:19:19:9c:6b:23:26:89:
                    a2:07:87:a9:0d:99:2f:f2:ce:5c:7d:4f:47:6f:c5:
                    5b:94:70:55:f0:c6:dc:62:c7:54:23:99:bb:6f:39:
                    30:ad:21:92:f0:77:2b:35:06:a4:80:7a:0e:e4:72:
                    21:6a:50:0e:46:cc:f1:a3:1a:f6:e4:54:7f:58:6a:
                    b2:a4:b3:04:25:98:11:15:a9:ce:a3:b4:98:01:21:
                    d2:68:1d:c8:21:ce:fa:ad:f0:3c:2d:fb:97:0c:a2:
                    ec:c0:f6:26:91:b2:fe:c1:3b:c4:fc:bf:a4:f8:1f:
                    51:ed:59:79:58:6b:51:cc:50:0a:9b:05:9f:9a:2a:
                    07:ff:bc:b9:6d:46:72:21:30:fa:2a:12:45:7f:04:
                    07:a6:f4:bc:06:16:d2:21:ac:ae:83:72:9f:3a:19:
                    4d:01:af:07:41:71:bd:2e:01:5c:2b:36:c9:8d:cf:
                    38:d4:28:12:2f:ec:73:22:a1:ec:ca:e3:eb:af:bf:
                    68:ce:cc:cb:b2:2c:de:dc:4f:3a:7f:32:ea:17:1d:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:28:F7:C5:A2:F7:E8:86:30:20:40:52:B4:4E:5B:BD:75:03:38:7E
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37362e302f32342d3234203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:dd:92:8c:7f:e3:4b:51:5c:5c:f0:45:83:cd:cf:61:e6:4e:
         60:30:cc:a2:7c:79:4e:21:e9:76:5b:59:06:a5:b4:59:50:ea:
         a7:63:bf:5e:47:b1:d5:66:d9:c9:cc:b9:0c:7c:9f:fa:be:6b:
         80:39:74:13:6c:0a:04:f5:28:11:1a:b2:a4:20:bf:64:b9:a7:
         77:68:55:7f:97:39:ae:0c:77:6c:a5:25:74:f8:cf:2b:1b:51:
         5b:af:23:6b:e3:0b:6f:95:b8:52:30:07:a5:cb:5a:c7:e7:37:
         b6:cf:e4:5f:2a:10:81:c1:49:2a:22:97:27:72:78:07:e8:e6:
         c9:e8:1d:8f:35:55:5e:53:d9:a3:cf:da:91:b6:a8:57:1e:e4:
         ed:21:87:ec:49:52:58:aa:e8:02:c9:52:f1:da:32:b4:71:0f:
         0b:05:e2:8e:b8:49:ec:57:9a:d6:e2:f3:55:e9:39:da:c4:6f:
         ab:10:f9:f7:e4:d1:cb:cd:cc:b2:0e:f4:b9:01:15:35:e9:b7:
         93:f7:da:f7:b1:b0:f3:57:be:43:e3:5b:7e:99:00:63:3a:6a:
         1c:97:c4:1c:5a:89:65:48:ab:de:7d:90:b1:71:04:e7:7b:6c:
         fd:d1:6f:9d:50:cf:e3:55:82:7d:b2:c3:1f:dc:28:6c:ec:24:
         23:db:bd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:10:52 2025 by rpki-client