Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/3137302e3235342e3131322e302f32322d3234203d3e20313938393439.roa
File:                     3137302e3235342e3131322e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          tm4DhsxHeSlJV5JNGpJrHhKVERq+PG1gxBqe0ATxftw=
Subject key identifier:   C3:82:C8:DD:1B:CD:91:5F:AF:0D:B4:5B:15:AD:B6:B1:6A:4E:72:71
Certificate issuer:       /CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
Certificate serial:       5FCF4CC68306DE6C0A8D7C3C881429897203253D
Authority key identifier: 2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/3137302e3235342e3131322e302f32322d3234203d3e20313938393439.roa
Signing time:             Mon 14 Jul 2025 19:34:12 +0000
ROA not before:           Mon 14 Jul 2025 19:29:12 +0000
ROA not after:            Mon 13 Jul 2026 19:34:12 +0000
asID:                     198949
IP address blocks:        170.254.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl
                          rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 14:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cf:4c:c6:83:06:de:6c:0a:8d:7c:3c:88:14:29:89:72:03:25:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
        Validity
            Not Before: Jul 14 19:29:12 2025 GMT
            Not After : Jul 13 19:34:12 2026 GMT
        Subject: CN=C382C8DD1BCD915FAF0DB45B15ADB6B16A4E7271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7c:e8:cf:ae:2e:3b:36:f2:8d:52:7d:2c:13:
                    52:47:c8:aa:3b:7f:10:a0:39:43:0f:e3:c8:e6:46:
                    52:9d:e7:dc:0a:e9:b0:8d:25:27:04:f1:9c:f2:43:
                    52:ff:5e:4b:cb:5e:3a:78:fc:6a:47:b4:6b:96:1b:
                    f4:15:53:13:ef:fd:e2:a7:bd:7d:ba:2f:5f:6d:fb:
                    29:e6:d5:c6:1b:bd:8f:5d:5b:ea:f9:6d:d1:79:35:
                    ac:a4:5f:e9:68:c0:f8:52:c9:3d:ac:11:e9:13:7c:
                    5d:b6:2d:04:7b:46:7b:31:65:1d:68:ae:ea:d4:de:
                    8d:f5:0e:37:5d:82:3a:5a:8a:23:21:8c:b7:24:ef:
                    ec:c8:f6:c7:0d:fc:d1:50:b6:8e:46:86:d3:e7:c5:
                    74:88:20:54:62:b2:9b:cb:82:64:23:01:a2:09:23:
                    5a:c5:78:67:f7:97:76:18:20:fc:79:74:7d:1a:27:
                    1f:c7:b2:91:9e:38:c8:15:5c:44:7b:db:42:7c:04:
                    c9:c9:9e:0e:68:b9:68:5d:3d:3d:05:e1:db:f3:2c:
                    3a:94:f6:7e:9d:99:46:33:dd:c8:31:44:19:0b:8a:
                    c7:1f:34:9e:8e:4f:3c:dc:fd:17:5e:b6:2f:86:13:
                    95:65:79:92:d8:e7:79:22:1e:04:45:c1:bf:1f:f7:
                    5a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:82:C8:DD:1B:CD:91:5F:AF:0D:B4:5B:15:AD:B6:B1:6A:4E:72:71
            X509v3 Authority Key Identifier:
                keyid:2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/3137302e3235342e3131322e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:87:59:25:2e:cb:23:4b:a5:1e:03:fa:99:bc:d3:22:93:bf:
         b5:b3:00:8d:03:82:79:41:2b:a2:f9:d1:40:26:27:0e:c5:9a:
         c7:64:d1:38:a0:2f:90:45:2a:46:5b:6c:cd:01:08:56:3f:94:
         34:64:6e:2e:26:aa:c4:34:e0:3d:57:c9:f2:eb:0a:ae:72:3b:
         b9:bc:28:e9:56:77:4c:0e:ac:81:23:d4:72:df:58:05:2a:83:
         eb:89:5a:bd:2e:53:da:e1:d2:98:db:dd:57:e8:b2:ca:7a:ef:
         be:78:07:74:f4:ec:69:75:8b:ba:02:3f:42:9c:d8:5a:65:6f:
         ff:75:fd:10:f5:c6:95:58:02:d2:f9:38:f3:9e:e3:08:24:dc:
         07:4d:ad:dc:a0:3c:15:bc:df:da:f8:bf:43:7b:7c:e3:c2:fb:
         88:5b:62:23:51:62:f1:c5:22:9c:0b:b3:5c:4a:4a:ac:7c:de:
         dc:d2:b7:c4:29:5f:a8:5e:bc:82:7a:99:b2:94:8d:3a:32:57:
         b3:26:18:f6:cd:35:dd:77:6f:33:2d:f9:1b:7b:4d:ee:e0:06:
         8f:6f:29:e2:f5:fb:8a:25:f7:cf:1f:cc:20:05:bc:91:7d:d1:
         3b:ce:89:46:2b:72:19:f0:2c:3b:d2:24:ea:75:5f:0e:3f:0e:
         3c:e3:a2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:20:15 2025 by rpki-client