Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/3137302e3233382e3136342e302f32322d3332203d3e203533303035.roa
File:                     3137302e3233382e3136342e302f32322d3332203d3e203533303035.roa (raw, json)
Hash identifier:          iZQpPqNWXVm1bE/BfV3QPQgDYv0oqr0pgbthSfsm4Ho=
Subject key identifier:   2F:07:72:53:73:8F:AD:23:A7:4F:F8:65:BB:EA:07:EE:16:EB:85:BA
Certificate issuer:       /CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
Certificate serial:       45393B9E0044E11F2AB88F48CF58122EBB0E1192
Authority key identifier: E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/3137302e3233382e3136342e302f32322d3332203d3e203533303035.roa
Signing time:             Fri 31 Oct 2025 14:17:51 +0000
ROA not before:           Fri 31 Oct 2025 14:12:51 +0000
ROA not after:            Fri 30 Oct 2026 14:17:51 +0000
asID:                     53005
IP address blocks:        170.238.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl
                          rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 08:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:39:3b:9e:00:44:e1:1f:2a:b8:8f:48:cf:58:12:2e:bb:0e:11:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
        Validity
            Not Before: Oct 31 14:12:51 2025 GMT
            Not After : Oct 30 14:17:51 2026 GMT
        Subject: CN=2F077253738FAD23A74FF865BBEA07EE16EB85BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:5e:03:5b:29:f1:5c:9d:26:7d:b2:7a:c8:
                    96:73:e8:16:9b:84:90:21:e4:00:00:c4:7a:41:81:
                    1a:5b:8b:c7:11:f0:eb:68:68:58:80:8f:56:23:69:
                    65:2e:cc:75:46:af:b5:80:cd:34:ff:90:5d:08:f0:
                    3d:22:87:86:7a:c9:0a:4d:6d:e1:da:09:1e:e8:bc:
                    a3:f7:16:c5:69:ee:e4:07:fc:eb:8e:59:65:24:ff:
                    dc:87:5c:b8:48:1f:a4:4b:13:d1:c1:d7:0f:32:97:
                    62:10:08:22:16:45:75:f3:52:68:08:ef:22:cd:e4:
                    50:99:61:ed:2e:53:ed:1f:af:69:ec:60:89:99:31:
                    ec:43:d1:84:a3:7a:43:03:1c:24:63:41:41:8a:41:
                    54:db:f7:7a:b4:ae:ba:bb:96:15:33:30:e5:c8:7d:
                    cf:86:c9:1b:01:a1:7a:9b:93:36:23:a7:db:13:8c:
                    4d:44:11:c8:6b:df:e1:c6:74:2f:2c:15:03:04:40:
                    73:b4:ad:6c:25:c4:40:1e:0c:5a:db:3f:a8:e3:0a:
                    66:a0:91:3d:45:64:d8:a8:ce:23:0d:80:42:aa:3b:
                    51:42:33:be:a9:73:0c:6d:3b:c8:ac:2d:4b:8f:50:
                    99:25:95:fa:77:7f:35:6b:07:77:90:ae:c2:67:46:
                    a7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:07:72:53:73:8F:AD:23:A7:4F:F8:65:BB:EA:07:EE:16:EB:85:BA
            X509v3 Authority Key Identifier:
                keyid:E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/3137302e3233382e3136342e302f32322d3332203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:ca:e9:5b:33:30:44:a2:a5:f9:c9:b2:48:77:ae:29:60:14:
         17:3a:e5:98:d6:61:c4:0a:aa:3c:e5:22:8f:75:10:85:f7:13:
         69:bf:6d:53:d3:77:c3:ad:3d:64:1f:a0:f7:f7:a0:f5:41:10:
         3c:93:5b:d9:53:99:6a:91:70:4d:99:31:97:f3:3b:0a:44:59:
         b6:aa:d5:ca:d2:c0:44:3b:6e:51:4a:1a:25:c8:61:97:f3:1f:
         32:c3:9f:c8:f4:c4:53:00:4b:52:6b:83:e7:48:07:21:bc:bc:
         ff:03:11:1d:f6:f7:de:8e:07:03:89:4b:72:54:85:4a:c2:89:
         78:94:58:6d:42:89:15:28:25:19:cc:b5:6a:ef:1f:05:d5:ca:
         be:e3:e3:0e:2f:d3:69:41:50:4e:61:9a:85:8b:95:9e:7e:46:
         af:67:5b:2e:ef:e4:ae:f5:4f:4b:94:d2:2b:71:3a:03:6f:31:
         a1:14:dd:1d:18:e3:b4:6d:0e:b5:04:af:54:3f:a6:e7:9c:56:
         dc:c7:7d:7c:35:b6:cc:80:55:cd:0e:b1:ac:02:22:a3:42:16:
         b6:84:83:94:ed:ba:10:e9:e1:f2:23:e3:9e:a8:b8:32:cc:97:
         90:1d:4e:ed:da:21:70:ad:77:43:f8:16:ec:9f:13:9a:ab:03:
         1f:69:88:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:13:13 2025 by rpki-client