Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32332d3233203d3e203631373937.roa
File:                     3137302e3234362e3233322e302f32332d3233203d3e203631373937.roa (raw, json)
Hash identifier:          XnGJLQnBGnsJt8i5RXs3VXNBpyf3sQ9KCLMJaQVDkr4=
Subject key identifier:   30:13:83:28:AB:96:F7:27:3D:C4:CF:61:E9:92:C7:10:90:75:AF:FC
Certificate issuer:       /CN=698DD058CC44A7087C5B128356D10FB024C7D778
Certificate serial:       7F1C35F2B3F0C7712C2DA7EAC4B58B6207822BFF
Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32332d3233203d3e203631373937.roa
Signing time:             Mon 03 Nov 2025 15:07:14 +0000
ROA not before:           Mon 03 Nov 2025 15:02:14 +0000
ROA not after:            Mon 02 Nov 2026 15:07:14 +0000
asID:                     61797
IP address blocks:        170.246.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 22:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1c:35:f2:b3:f0:c7:71:2c:2d:a7:ea:c4:b5:8b:62:07:82:2b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778
        Validity
            Not Before: Nov  3 15:02:14 2025 GMT
            Not After : Nov  2 15:07:14 2026 GMT
        Subject: CN=30138328AB96F7273DC4CF61E992C7109075AFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ad:94:87:8e:d2:35:e9:b2:bd:82:94:7e:bf:
                    6b:05:07:29:e5:c3:dd:2c:39:d0:47:55:53:36:40:
                    23:8e:3b:cc:17:b4:8e:17:fb:b0:b7:2f:90:6e:2b:
                    8a:4c:48:5a:83:5b:5b:37:ed:69:b8:3a:23:4a:c9:
                    32:5f:3d:0f:a5:65:94:10:d5:e1:e5:ee:5f:bd:9a:
                    40:a5:27:c4:8a:a6:21:d3:aa:52:2f:c6:ba:6d:83:
                    b0:bb:1d:e8:dd:96:20:d7:35:af:b1:1d:ee:99:f9:
                    5b:06:c0:87:96:0e:9e:e4:61:eb:7f:6c:e9:8e:3a:
                    6e:91:ad:e3:51:06:05:5f:ed:63:55:25:20:0c:7f:
                    58:f1:21:37:44:36:73:6d:fa:e7:98:62:60:11:b5:
                    4c:f1:92:3d:c0:62:dd:ac:48:ed:fb:9a:d4:71:4b:
                    f6:48:21:c5:b5:19:19:4d:b1:39:c4:92:13:ce:df:
                    0f:a4:05:40:9c:58:d5:5e:60:f9:47:2a:47:ec:53:
                    3a:8f:76:ac:6a:81:74:3f:8a:22:16:88:ac:d2:6d:
                    0b:fc:1e:e5:15:ca:3f:0a:51:1b:87:03:95:2b:cc:
                    cb:e8:f6:2c:14:83:19:13:15:39:58:99:a1:05:72:
                    8d:d5:bf:da:14:e1:bc:3d:a3:fa:89:b6:d6:6a:a1:
                    cf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:13:83:28:AB:96:F7:27:3D:C4:CF:61:E9:92:C7:10:90:75:AF:FC
            X509v3 Authority Key Identifier:
                keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3137302e3234362e3233322e302f32332d3233203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:3a:dc:d8:40:13:de:55:8f:03:4b:4b:f7:d1:13:e3:c6:d6:
         ae:67:3a:a2:70:b4:1c:92:80:a0:56:4a:93:08:27:2c:1f:a0:
         af:dd:f5:73:cb:4d:c3:c7:fd:a0:a8:c6:dc:f3:10:fc:95:41:
         b5:71:62:b1:04:b5:67:e3:74:f1:fa:83:7b:05:d9:9f:da:69:
         c3:87:58:a6:a8:34:a0:b5:a3:32:1c:1a:26:d3:b6:c1:8f:0f:
         57:55:fb:9d:42:4b:3c:d3:c8:df:90:88:5d:8a:15:07:c1:0d:
         52:28:8e:30:12:20:ca:7b:8e:bc:90:3e:97:c2:10:57:dd:3f:
         1d:98:7c:c7:52:64:27:b5:71:b5:07:79:9b:5f:ae:f4:f6:21:
         97:c8:05:ee:47:e7:fa:db:a3:d5:70:91:55:77:a9:2e:56:79:
         6e:35:ff:81:88:bd:e1:02:72:4d:16:39:27:11:e0:9f:a6:2d:
         03:6a:e8:99:12:69:3d:61:19:21:c3:c2:d6:04:0d:7f:e7:b7:
         fe:47:5f:94:85:77:83:db:f5:a8:59:f6:b5:51:58:3a:71:29:
         d8:42:ea:68:a4:6f:56:c2:ff:ee:b8:5e:a7:95:8f:c7:b6:e0:
         4e:a8:33:49:a1:a2:41:9b:c8:d8:e4:6b:83:6a:3f:18:fe:92:
         24:d7:d2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:39:37 2025 by rpki-client