Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3234203d3e20323633363334.roa
File:                     3137302e38312e34382e302f32322d3234203d3e20323633363334.roa (raw, json)
Hash identifier:          qV/ma1H6wrhVm1vG4JahUsNYjiozWsThCcld7/PpvGA=
Subject key identifier:   65:AA:17:A0:B8:8C:75:41:7E:08:73:DA:2A:9C:70:E2:1C:CC:B7:4A
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       4B7B4D0E9C4F9C9F5681DF8C45BC4BCBC6F91A49
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3234203d3e20323633363334.roa
Signing time:             Thu 23 Oct 2025 14:48:19 +0000
ROA not before:           Thu 23 Oct 2025 14:43:19 +0000
ROA not after:            Thu 22 Oct 2026 14:48:19 +0000
asID:                     263634
IP address blocks:        170.81.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl
                          rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 00:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7b:4d:0e:9c:4f:9c:9f:56:81:df:8c:45:bc:4b:cb:c6:f9:1a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Oct 23 14:43:19 2025 GMT
            Not After : Oct 22 14:48:19 2026 GMT
        Subject: CN=65AA17A0B88C75417E0873DA2A9C70E21CCCB74A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:43:b9:81:f7:4c:4b:15:08:d4:92:e5:35:7e:
                    e5:dd:87:12:f9:fd:4c:e5:38:fb:71:dc:4b:06:ef:
                    73:d7:c3:46:0f:45:1e:88:20:f5:2a:4b:92:3c:69:
                    3b:c4:e4:d2:49:20:33:2e:f4:45:fd:02:41:d3:ec:
                    17:9e:fc:e0:7e:58:00:21:d0:fb:4a:e3:df:98:e2:
                    0e:ef:de:f5:0c:15:ed:9e:bd:19:eb:79:d5:4b:a0:
                    7c:e9:60:d3:31:d4:ac:86:13:a7:36:7e:a2:7e:b5:
                    45:2b:47:35:98:52:f9:9f:11:0c:c2:45:27:c5:fc:
                    99:6c:86:28:44:a5:f0:35:b0:3a:5d:87:d0:02:f4:
                    24:f4:d7:82:21:2d:db:d5:4d:38:3b:b1:95:bc:59:
                    45:47:78:49:68:1b:47:07:47:80:59:7f:d3:ec:05:
                    60:43:aa:2a:00:e5:f8:8b:7c:0f:46:af:a4:79:9d:
                    e5:c8:b2:f5:0b:09:2f:2b:4b:50:09:f6:2c:30:53:
                    1c:51:ce:35:0f:ed:0e:c2:f0:b8:23:7f:b3:a6:74:
                    f1:eb:67:dc:81:ac:db:ba:eb:b1:b4:94:a4:86:6e:
                    3f:d4:da:e8:8c:12:51:28:e3:91:6d:14:37:85:e4:
                    24:92:28:49:92:c5:ae:75:09:1a:9d:b5:c9:3a:86:
                    26:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AA:17:A0:B8:8C:75:41:7E:08:73:DA:2A:9C:70:E2:1C:CC:B7:4A
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3234203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:3e:09:e1:4d:52:5a:07:99:d0:97:a3:9d:38:8e:a4:6d:df:
         e3:3d:3f:1a:32:a5:27:93:57:6a:6b:99:9a:a4:0e:7a:64:a3:
         f6:a4:57:a3:a8:78:62:a1:02:1d:9f:22:ba:5e:cf:64:8c:a4:
         e5:2a:db:b8:77:59:15:f1:7b:b4:82:de:70:97:9a:a6:3f:1c:
         a3:c9:cf:f5:c1:c1:50:14:9d:38:bc:35:86:30:ce:6a:c9:10:
         b4:c3:db:3c:3c:e0:f2:87:ff:c7:ac:d6:fa:47:b1:94:8e:8e:
         5d:b5:58:1c:64:92:92:90:7d:3e:41:fb:70:0b:e8:51:75:22:
         03:2c:85:9d:3a:32:be:a8:01:c4:d8:ef:e4:8f:aa:1a:10:4d:
         b4:51:d2:83:2b:f4:77:c6:4b:be:64:6c:d0:8c:18:bc:2f:73:
         f8:06:52:6c:54:ea:65:04:47:13:33:77:b2:29:18:27:f4:6a:
         1a:62:28:12:f3:e6:a7:1c:56:8f:b7:76:5a:78:6b:87:8d:b6:
         63:da:a1:50:8c:e5:ac:45:01:21:40:8a:b1:12:68:c2:bc:37:
         b4:79:f2:c3:e4:4a:3a:ce:3d:e4:d2:87:9a:d7:a9:85:b0:9d:
         7f:c6:a1:48:ca:96:9d:00:82:c5:82:38:cc:22:81:28:46:8b:
         5a:57:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:46:18 2025 by rpki-client