Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa
File:                     3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa (raw, json)
Hash identifier:          YwHYO7aGt9TzRSnKvjc8RFzPfyrsRiJMl6sWNy7gxvw=
Subject key identifier:   70:1D:DA:77:1D:3B:C1:05:B7:DA:6D:0D:08:52:38:B9:59:5E:DF:4A
Certificate issuer:       /CN=6B0C11B837A83E2CCE7B357DCB2AFEC631A4908E
Certificate serial:       5EF3E02F8D1CAE8BF7BE2CD096E6DD4CB9383E48
Authority key identifier: 6B:0C:11:B8:37:A8:3E:2C:CE:7B:35:7D:CB:2A:FE:C6:31:A4:90:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B0C11B837A83E2CCE7B357DCB2AFEC631A4908E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa
Signing time:             Wed 03 Sep 2025 12:27:24 +0000
ROA not before:           Wed 03 Sep 2025 12:22:24 +0000
ROA not after:            Wed 02 Sep 2026 12:27:24 +0000
asID:                     265061
IP address blocks:        170.231.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/6B0C11B837A83E2CCE7B357DCB2AFEC631A4908E.crl
                          rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/6B0C11B837A83E2CCE7B357DCB2AFEC631A4908E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B0C11B837A83E2CCE7B357DCB2AFEC631A4908E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 01:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f3:e0:2f:8d:1c:ae:8b:f7:be:2c:d0:96:e6:dd:4c:b9:38:3e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B0C11B837A83E2CCE7B357DCB2AFEC631A4908E
        Validity
            Not Before: Sep  3 12:22:24 2025 GMT
            Not After : Sep  2 12:27:24 2026 GMT
        Subject: CN=701DDA771D3BC105B7DA6D0D085238B9595EDF4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8e:05:0d:ec:20:50:77:68:2f:4f:07:bc:f7:
                    ba:4f:73:0d:8c:a5:3b:4e:da:e5:50:69:57:56:35:
                    37:09:63:f5:ae:e8:5a:01:bb:d4:cf:ff:7d:63:88:
                    03:62:f7:9e:85:f9:15:c9:87:29:fc:de:c8:e4:46:
                    aa:46:9e:14:f4:53:85:78:f1:32:a9:fc:a4:20:08:
                    3b:28:e2:1d:b7:57:9c:4c:36:7e:55:b5:79:94:11:
                    e2:58:e0:03:bc:e6:b7:dc:e8:4d:ff:35:b9:7d:03:
                    e5:fc:72:20:c4:8d:62:c8:d3:2a:51:0f:2c:fe:b3:
                    4d:67:7e:01:31:00:cb:d9:19:6d:09:7a:a1:92:0e:
                    f7:51:ef:55:e5:1e:63:1d:6b:b8:54:93:1a:a6:43:
                    18:c0:90:47:03:5f:0d:59:c6:a6:61:81:27:71:88:
                    05:53:ef:ca:e9:86:59:e6:18:24:aa:2f:d4:bd:12:
                    ea:20:62:74:f2:66:7b:4b:3e:95:44:c8:95:9c:98:
                    16:87:fd:47:c1:fd:22:49:75:b7:f0:3a:11:fe:5a:
                    32:ce:a0:fb:63:da:70:84:b6:fa:f7:c1:1b:10:ed:
                    0f:ef:79:23:cb:ff:0a:0e:95:f6:06:68:c4:c4:76:
                    cd:3e:eb:ee:84:fc:9a:20:a9:3c:78:fc:11:55:db:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1D:DA:77:1D:3B:C1:05:B7:DA:6D:0D:08:52:38:B9:59:5E:DF:4A
            X509v3 Authority Key Identifier:
                keyid:6B:0C:11:B8:37:A8:3E:2C:CE:7B:35:7D:CB:2A:FE:C6:31:A4:90:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/6B0C11B837A83E2CCE7B357DCB2AFEC631A4908E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B0C11B837A83E2CCE7B357DCB2AFEC631A4908E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:1d:e6:9a:56:e5:1f:23:cb:8b:9e:b8:07:a0:c0:db:23:5d:
         32:46:93:41:6d:a4:06:7a:3a:d8:36:84:fb:36:84:52:e1:fc:
         6e:97:1c:db:b7:e1:cb:7e:8a:79:b5:08:5d:d7:7a:c8:d9:fb:
         d3:18:a6:5a:63:7d:bb:68:14:55:2c:d3:cb:2a:2d:cc:08:40:
         87:87:c5:01:6c:8f:b7:61:4c:4b:dc:6d:62:3b:af:7e:7d:71:
         88:bb:94:ee:98:99:36:bc:42:90:a8:de:e0:b2:ab:bb:e4:ee:
         4b:61:d0:9b:fa:bf:f0:4e:7a:12:e3:93:a4:91:0a:b2:24:2a:
         6d:35:df:41:0c:20:b3:6b:6f:46:45:41:6a:46:60:5f:c2:09:
         99:29:03:60:b7:31:ac:06:02:aa:38:c0:39:53:ba:35:aa:9f:
         30:2d:14:6f:99:cb:ef:c0:37:29:2e:d3:41:44:22:dc:fa:64:
         5f:a5:b0:48:85:9f:6d:46:c7:8f:3e:85:2f:0a:e1:bb:ff:81:
         72:26:c1:ca:45:f1:dd:cc:4a:f7:5f:1f:21:2a:ea:f5:c4:2f:
         12:1f:1b:ce:f8:60:fd:e9:07:a9:6e:dc:37:8a:bf:3b:c3:c6:
         a9:76:7e:f8:40:80:8f:62:38:07:87:c2:aa:33:75:57:e1:5f:
         3e:7e:b5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:55:00 2025 by rpki-client