Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232312e302f32342d3234203d3e20323634313337.roa
File:                     3137302e302e3232312e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          UX4L2d3xzMvIRkwQwH4eoQzsROj3CY7OqRnvPIxpTwE=
Subject key identifier:   BD:30:3E:BA:39:2E:F5:AA:BF:4F:AD:E5:2B:72:24:CD:9F:9E:79:1B
Certificate issuer:       /CN=239C283AE95BF77707DED60A35EF02DFA2AE1930
Certificate serial:       273A11CE9D2C960C0C2E11A83000E5BFBEA913B8
Authority key identifier: 23:9C:28:3A:E9:5B:F7:77:07:DE:D6:0A:35:EF:02:DF:A2:AE:19:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232312e302f32342d3234203d3e20323634313337.roa
Signing time:             Mon 08 Sep 2025 20:26:10 +0000
ROA not before:           Mon 08 Sep 2025 20:21:10 +0000
ROA not after:            Mon 07 Sep 2026 20:26:10 +0000
asID:                     264137
IP address blocks:        170.0.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3a:11:ce:9d:2c:96:0c:0c:2e:11:a8:30:00:e5:bf:be:a9:13:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239C283AE95BF77707DED60A35EF02DFA2AE1930
        Validity
            Not Before: Sep  8 20:21:10 2025 GMT
            Not After : Sep  7 20:26:10 2026 GMT
        Subject: CN=BD303EBA392EF5AABF4FADE52B7224CD9F9E791B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:a4:4c:a4:c2:02:05:b7:3b:af:de:0c:b0:
                    1d:46:39:21:04:7e:26:86:43:7a:d2:fd:e7:85:28:
                    57:d3:f8:26:0c:93:91:69:e3:51:0e:a2:b6:93:0c:
                    46:f0:ce:9d:30:23:5c:94:97:c7:b6:e4:f0:32:43:
                    de:b3:4f:ee:e3:37:fb:c5:cd:6a:ca:ac:1d:44:e8:
                    e4:fa:f5:79:90:91:b0:e2:2d:5b:36:a4:f9:1c:e7:
                    4a:07:e3:93:14:a8:26:48:67:b5:81:b9:52:18:dc:
                    4c:4e:cc:85:9a:33:a0:57:5e:cf:03:df:25:a1:d8:
                    e6:9b:5d:a8:22:2e:46:64:59:de:21:b5:79:4c:7c:
                    08:32:aa:5a:0f:55:f3:76:d7:59:fc:ef:20:50:5b:
                    cd:e5:1b:00:f2:8a:90:df:86:56:e4:f9:cc:c4:8c:
                    43:d2:4d:90:e0:e4:91:67:37:27:f2:b7:d8:4c:90:
                    90:88:25:6c:8b:a3:95:de:f4:12:96:a6:84:09:93:
                    15:d4:70:ed:6b:ed:7a:2f:fe:74:d0:0c:8b:4b:f2:
                    cf:50:7b:70:f5:14:12:b6:09:1f:22:36:03:c8:d9:
                    e4:bb:e2:2b:da:66:1d:aa:44:a5:8e:c9:b3:a1:b9:
                    ed:d9:dc:00:aa:b3:c7:8e:08:05:ca:b2:d7:03:d4:
                    1b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:30:3E:BA:39:2E:F5:AA:BF:4F:AD:E5:2B:72:24:CD:9F:9E:79:1B
            X509v3 Authority Key Identifier:
                keyid:23:9C:28:3A:E9:5B:F7:77:07:DE:D6:0A:35:EF:02:DF:A2:AE:19:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3137302e302e3232312e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:77:10:17:ab:95:ab:66:ed:8d:54:29:71:e7:06:74:9e:ea:
         8c:d0:2c:bf:aa:4e:3b:c3:d7:57:44:a7:68:8d:df:cb:d0:1c:
         8d:06:25:3b:8a:10:8f:44:8e:cb:95:06:9c:11:98:ef:c7:96:
         75:3a:46:e1:6b:da:9b:7a:f7:6b:95:ae:78:3e:46:b9:92:59:
         5e:a2:01:02:15:64:31:f0:68:61:5a:9b:01:7c:b3:f9:31:3f:
         2e:a4:7b:7b:02:63:c3:ed:bf:d1:bb:e6:59:d7:05:94:d0:80:
         31:fe:18:2c:f1:3f:c4:06:cf:c9:72:33:80:78:00:ad:d7:9f:
         1c:dc:7a:0f:6e:e2:7d:84:90:67:4e:66:14:00:ac:55:c1:79:
         30:87:b4:6b:d5:c0:80:c8:52:90:2f:d9:2c:be:2d:10:c0:06:
         34:95:a5:f3:ea:7f:3c:3d:61:05:8a:93:51:08:79:bb:ee:66:
         04:ed:02:7c:00:75:2e:3a:8d:24:59:4d:a2:b1:ae:a3:7f:e4:
         95:62:49:ae:49:4c:39:df:da:11:19:2e:05:83:ed:90:40:1d:
         f8:fb:ff:ee:d8:00:bc:fa:af:9d:d8:9f:1d:bb:0f:e3:7c:b7:
         a7:33:a5:10:7c:b5:d1:7c:22:6f:03:6d:3a:b2:43:97:3f:ab:
         2e:b6:34:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:16:30 2025 by rpki-client