Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39322e302f32342d3234203d3e20323636333939.roa
File:                     3137302e38312e39322e302f32342d3234203d3e20323636333939.roa (raw, json)
Hash identifier:          4Bqdi8aC8oVu4e6gCc9U6OSZtusb0ojtjODILGN9hDo=
Subject key identifier:   8B:6D:67:7F:17:7C:F8:57:5A:29:01:E8:93:B9:C8:BA:06:CB:7C:60
Certificate issuer:       /CN=52C828C27EEBBFF1E4B815AD151841CD2C9E17CA
Certificate serial:       3ED37370DA9900FCBE7F0552858676FE4AA0836C
Authority key identifier: 52:C8:28:C2:7E:EB:BF:F1:E4:B8:15:AD:15:18:41:CD:2C:9E:17:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39322e302f32342d3234203d3e20323636333939.roa
Signing time:             Thu 11 Sep 2025 20:42:31 +0000
ROA not before:           Thu 11 Sep 2025 20:37:31 +0000
ROA not after:            Thu 10 Sep 2026 20:42:31 +0000
asID:                     266399
IP address blocks:        170.81.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.crl
                          rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 09:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d3:73:70:da:99:00:fc:be:7f:05:52:85:86:76:fe:4a:a0:83:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52C828C27EEBBFF1E4B815AD151841CD2C9E17CA
        Validity
            Not Before: Sep 11 20:37:31 2025 GMT
            Not After : Sep 10 20:42:31 2026 GMT
        Subject: CN=8B6D677F177CF8575A2901E893B9C8BA06CB7C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fe:9e:72:c7:fe:13:c1:fb:95:df:09:9c:d5:
                    8e:66:c5:10:f1:23:fe:0a:3d:ff:44:fa:2e:5c:d5:
                    76:4b:5c:a8:34:af:9a:9c:3a:63:12:34:e4:aa:67:
                    95:dd:47:4c:50:c7:7b:22:9c:ec:d3:79:d9:20:dd:
                    5c:2c:85:fa:34:7b:8f:ef:06:3c:5f:17:96:23:9a:
                    6c:70:dd:2c:9b:d4:d1:20:22:0d:b0:1c:45:54:ff:
                    39:c0:eb:06:d7:bb:17:6d:b6:3c:ac:10:33:69:72:
                    d2:06:57:d6:a4:6f:88:b2:12:7c:a5:4c:21:0d:ca:
                    dc:96:b8:67:bb:b3:f8:24:df:e5:fb:3e:34:63:05:
                    2a:f3:af:83:9a:9d:cf:ae:89:68:86:93:2c:31:58:
                    80:89:b7:64:1c:de:e7:5b:a9:85:4e:10:8d:9f:00:
                    12:1a:62:fe:a7:da:d8:97:09:86:12:86:ba:cd:94:
                    cd:d1:d3:f9:41:24:23:f6:23:28:7a:e9:1a:99:d1:
                    2f:47:ef:53:b1:62:62:3e:74:c4:6a:8a:ae:1c:37:
                    aa:04:e9:60:3d:0a:dc:50:51:1d:32:74:1b:2e:de:
                    c8:b1:80:33:5b:27:53:0b:2e:c3:9f:8b:e5:ee:ce:
                    6b:56:03:e0:af:01:0a:57:8d:cb:7e:d7:e7:65:22:
                    60:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6D:67:7F:17:7C:F8:57:5A:29:01:E8:93:B9:C8:BA:06:CB:7C:60
            X509v3 Authority Key Identifier:
                keyid:52:C8:28:C2:7E:EB:BF:F1:E4:B8:15:AD:15:18:41:CD:2C:9E:17:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/3137302e38312e39322e302f32342d3234203d3e20323636333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:46:27:73:0b:d8:fe:c3:07:80:02:6c:c6:d8:77:d4:b0:64:
         13:12:a3:fd:b7:56:ba:fd:96:e2:10:26:4f:81:3f:14:b9:ec:
         c8:3a:9b:2d:8d:85:b5:2d:01:11:25:b8:3c:69:8a:e9:fc:9f:
         30:ed:91:c6:f1:fc:05:63:8a:81:95:77:1b:f2:de:00:45:9b:
         ff:2b:e6:31:0a:96:81:5c:8c:4a:7b:e6:4e:cf:44:51:a2:5d:
         b2:7a:0f:82:f1:dc:78:29:23:fd:4e:ef:ac:23:37:cf:fe:f0:
         a9:5a:4a:65:62:89:5e:5e:f4:c7:d4:71:38:48:21:bb:66:e7:
         0a:8b:d8:fe:d1:ae:f8:d8:9a:14:03:2e:d9:fe:f0:78:80:ef:
         85:d0:9a:27:23:dc:d5:bf:68:48:ff:ca:c2:44:e4:df:d4:c9:
         42:01:06:d9:14:96:33:e3:5c:16:f8:f1:f9:41:b9:0d:f0:26:
         6a:30:ce:f5:56:90:f8:5c:76:17:df:89:66:9a:03:cf:c5:87:
         6a:8e:1f:fe:0b:80:e6:4b:13:09:84:c5:a4:f4:ec:b5:93:58:
         28:ee:84:5d:56:86:0e:ec:2a:44:ce:c4:ca:08:cc:58:10:48:
         59:8b:d9:07:41:78:7f:79:e9:32:c0:0b:22:88:f4:9b:ce:e6:
         1c:0c:42:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:11:40 2025 by rpki-client