Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3137302e38302e3230382e302f32322d3234203d3e20323633353639.roa
File:                     3137302e38302e3230382e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          dOiuc4i9rMZE+pi1BAtN4WaiT11+SlDoAj7ezVbCnZ8=
Subject key identifier:   2B:D1:9C:28:29:C4:AC:9A:A7:FB:41:AC:24:83:93:7C:AB:C6:2F:91
Certificate issuer:       /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Certificate serial:       191B410BDD09B1AE8E615BB62D7DD25285EF135B
Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3137302e38302e3230382e302f32322d3234203d3e20323633353639.roa
Signing time:             Mon 08 Sep 2025 14:16:43 +0000
ROA not before:           Mon 08 Sep 2025 14:11:43 +0000
ROA not after:            Mon 07 Sep 2026 14:16:43 +0000
asID:                     263569
IP address blocks:        170.80.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
                          rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 22:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1b:41:0b:dd:09:b1:ae:8e:61:5b:b6:2d:7d:d2:52:85:ef:13:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
        Validity
            Not Before: Sep  8 14:11:43 2025 GMT
            Not After : Sep  7 14:16:43 2026 GMT
        Subject: CN=2BD19C2829C4AC9AA7FB41AC2483937CABC62F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e2:49:36:6b:ec:d7:33:ab:c3:0d:1b:c1:c1:
                    ca:9c:fa:4d:14:90:a0:0a:38:ff:eb:00:4d:a6:fe:
                    d7:11:6f:91:b3:10:de:e5:6c:cb:0e:84:ac:65:e3:
                    d1:4c:4a:ef:27:96:63:47:8f:4c:c3:ee:d7:7c:4b:
                    9d:d1:d9:32:e8:fa:06:71:b7:5f:b5:68:c2:30:74:
                    24:67:a0:88:87:c1:f9:af:1a:59:d6:ae:ac:9d:11:
                    fa:39:35:8e:c5:a2:f1:85:8c:ff:a2:07:7d:84:a7:
                    8c:f3:bd:09:fa:af:21:fb:5c:be:24:f3:75:e5:25:
                    27:d3:74:f0:5a:08:92:dd:5d:5e:66:c6:21:14:4b:
                    3f:20:a0:8b:74:64:76:d6:13:f9:3f:8b:7a:f7:ac:
                    aa:02:a6:c5:23:32:ce:e2:01:07:f9:d8:d4:2a:80:
                    0e:50:a3:ec:c1:73:6d:a0:67:94:98:16:5d:4b:e4:
                    31:d3:15:6e:b6:b2:d9:a4:86:f7:83:95:25:22:04:
                    38:bf:f5:f3:f2:29:ea:6e:e4:a7:69:c6:4c:9e:aa:
                    fc:05:9c:1b:cc:9d:28:93:8b:fb:df:0c:fb:fe:48:
                    49:48:2e:46:07:3e:50:60:e8:75:2b:40:53:53:93:
                    06:54:ee:ff:0b:b8:bc:24:fb:7c:9b:e4:b6:b3:47:
                    54:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D1:9C:28:29:C4:AC:9A:A7:FB:41:AC:24:83:93:7C:AB:C6:2F:91
            X509v3 Authority Key Identifier:
                keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3137302e38302e3230382e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:97:5d:ea:01:be:bd:dd:80:95:cb:1a:d5:f9:c4:13:01:78:
         64:8b:7c:16:28:4a:ad:50:d2:4a:b6:41:f4:d5:72:95:bc:fc:
         9a:6f:6f:1d:5b:6d:c8:b3:bd:09:33:44:00:53:2c:7c:a1:45:
         3a:ed:bb:1e:93:4c:32:8a:ea:86:00:9a:b3:a5:47:b8:18:d5:
         c7:1a:31:ae:be:fd:af:91:9b:69:2d:75:7c:45:38:bf:74:cd:
         07:2b:4a:b9:39:2a:ec:ad:e9:61:ed:3c:60:2b:89:89:aa:23:
         86:d1:4c:5e:02:17:ca:cb:28:8c:12:6f:4c:1d:6d:11:d8:9b:
         d5:d5:76:22:9f:8a:45:80:54:bc:bf:91:03:bc:4e:f2:e4:4d:
         80:24:4e:0d:74:fe:a6:15:c4:9a:5f:26:d0:c4:e5:98:7d:cb:
         f3:2b:20:e6:aa:a4:7e:11:e1:81:59:72:c5:f3:27:c0:50:78:
         af:56:78:46:ab:b7:47:e2:ec:65:2e:39:e8:b3:9e:5c:b0:ba:
         cb:3e:f3:09:3a:72:b5:cf:cd:1b:cc:48:57:ba:5a:38:f7:79:
         61:00:4c:36:21:88:32:ef:dc:95:e2:3d:dc:1c:8a:1d:e7:ed:
         1c:84:08:9c:62:09:6c:33:f6:b1:ae:4a:75:9f:97:e6:b1:33:
         2e:0d:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:50:38 2025 by rpki-client