Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33322e302f32332d3233203d3e20323634393532.roa
File:                     3137302e3234372e33322e302f32332d3233203d3e20323634393532.roa (raw, json)
Hash identifier:          pNVFsVyaJKt8I1j1+HIZ4YAq1yFHLHDqc8jLL4dVP4s=
Subject key identifier:   5A:50:D9:81:BF:BE:9A:C6:77:75:FB:D7:7C:B8:B0:83:71:CC:C8:0A
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       445FB9C668EC6418C57FD865F497E9E156BBECE1
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33322e302f32332d3233203d3e20323634393532.roa
Signing time:             Sat 25 Oct 2025 14:38:07 +0000
ROA not before:           Sat 25 Oct 2025 14:33:07 +0000
ROA not after:            Sat 24 Oct 2026 14:38:07 +0000
asID:                     264952
IP address blocks:        170.247.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 19:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5f:b9:c6:68:ec:64:18:c5:7f:d8:65:f4:97:e9:e1:56:bb:ec:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Oct 25 14:33:07 2025 GMT
            Not After : Oct 24 14:38:07 2026 GMT
        Subject: CN=5A50D981BFBE9AC67775FBD77CB8B08371CCC80A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:c5:39:6d:c5:64:b4:bf:cb:36:76:ad:8f:
                    b6:ea:26:f8:4d:79:fe:59:13:fa:32:d7:93:6f:77:
                    55:9a:2f:06:79:9c:67:c0:6b:bd:d6:65:a6:12:9f:
                    12:74:b0:86:7a:df:bb:55:5b:43:fb:f2:4a:d1:72:
                    08:2d:34:47:fb:47:39:c8:e9:72:04:22:05:9f:2a:
                    90:5c:b0:8c:0f:e7:83:55:65:ec:b8:ae:a5:ff:b0:
                    4c:80:25:b5:e5:53:6a:fe:21:6e:a2:38:e3:44:ae:
                    df:6a:6e:1a:8e:29:a2:72:93:18:5c:72:72:9c:f5:
                    34:37:b2:de:33:e0:2d:c3:6d:13:19:63:17:45:da:
                    ed:c5:5c:2e:a1:df:65:77:48:bc:c9:a7:36:bc:ad:
                    c3:16:0e:47:9a:d8:bd:0a:bc:ab:79:e8:21:31:4f:
                    da:71:4a:72:e2:16:8a:2a:36:47:03:9e:ba:9e:49:
                    87:6a:42:fa:3e:20:06:a4:f2:21:28:9d:be:0c:19:
                    ef:d2:64:8c:0f:e1:9b:26:4a:1d:db:fd:f7:a1:f5:
                    49:12:83:6f:fb:2e:57:cf:b1:3e:54:cc:a4:24:e5:
                    8b:84:7a:b4:8c:9d:d3:ad:90:ee:ce:a1:34:61:78:
                    b7:06:31:e8:2c:12:94:45:05:e0:44:95:cc:37:76:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:50:D9:81:BF:BE:9A:C6:77:75:FB:D7:7C:B8:B0:83:71:CC:C8:0A
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3137302e3234372e33322e302f32332d3233203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:cf:d0:98:fb:ff:53:05:f0:d1:dd:48:65:e9:72:58:37:f6:
         85:57:c4:e2:ea:49:fe:f8:f6:f6:b4:59:cc:4f:1a:a9:e0:fd:
         ac:1a:3d:e4:27:5e:07:f0:30:8a:00:98:80:07:2e:c3:9b:1b:
         c2:c7:de:ee:18:f9:4f:29:d5:f6:54:55:f2:b9:4c:a3:c0:9d:
         10:70:a1:49:3a:ff:1c:b4:4c:37:60:8b:25:c5:f2:37:97:7d:
         65:cd:de:2a:f7:37:5a:0d:d4:52:13:9e:2b:71:ea:cc:ab:42:
         45:73:96:46:da:a9:56:d7:36:f1:c0:83:9e:1d:8b:79:3b:85:
         64:d4:0c:1c:d4:5d:9d:f6:29:3f:8f:73:6b:16:ce:4d:13:16:
         84:4e:9d:cb:d8:aa:fe:ca:8a:4e:b6:e3:65:c7:4c:7d:0a:77:
         63:e2:a7:55:d8:86:68:10:fc:10:7e:35:29:4a:fa:5a:0f:aa:
         cb:6f:34:ab:3e:03:ba:0b:33:c7:c7:f3:aa:7c:d7:23:d3:23:
         b4:9a:43:07:9d:83:30:b6:c9:1b:79:6a:c3:f0:ac:e4:53:1b:
         62:21:a3:61:0c:35:80:17:53:94:c1:27:5f:98:f7:5b:a2:79:
         b6:20:de:22:57:9f:1f:0a:0b:8f:cb:cd:98:16:0a:45:6a:6e:
         ab:94:05:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:22:49 2025 by rpki-client