Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa
File:                     3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa (raw, json)
Hash identifier:          ai1fq1d0v27iy15z6wZaaZtUTWGC9NDlAklm01QMFAU=
Subject key identifier:   BD:F6:06:3F:BA:D5:64:09:90:9E:BA:E4:F2:9D:39:69:30:00:5C:65
Certificate issuer:       /CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC
Certificate serial:       5E8E378F3FA28F249BB1A16FC295EBC7CC29DDE0
Authority key identifier: C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa
Signing time:             Wed 27 Aug 2025 15:40:29 +0000
ROA not before:           Wed 27 Aug 2025 15:35:29 +0000
ROA not after:            Wed 26 Aug 2026 15:40:29 +0000
asID:                     264051
IP address blocks:        170.246.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl
                          rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8e:37:8f:3f:a2:8f:24:9b:b1:a1:6f:c2:95:eb:c7:cc:29:dd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC
        Validity
            Not Before: Aug 27 15:35:29 2025 GMT
            Not After : Aug 26 15:40:29 2026 GMT
        Subject: CN=BDF6063FBAD56409909EBAE4F29D396930005C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:a9:20:8f:59:dd:5d:8d:4b:fc:de:18:c7:
                    44:cf:fa:5b:90:1b:b7:6c:37:78:8b:af:86:9e:34:
                    16:6f:1d:c6:f0:8e:57:f1:c9:68:a0:98:20:c0:b9:
                    ec:47:95:6c:49:c1:41:5b:be:82:c8:e5:0b:da:df:
                    52:98:0c:83:f3:d9:d4:8d:50:a6:00:89:ee:8a:ce:
                    af:ec:99:e8:5f:62:5a:58:0e:7f:44:3b:a8:ec:df:
                    bc:62:fb:bf:7c:1f:08:bc:00:25:10:eb:de:ad:0d:
                    06:53:45:cc:9c:ae:c4:25:d6:24:0a:65:fd:ec:50:
                    8d:77:33:71:90:6f:a5:30:3c:ce:ff:7f:56:46:db:
                    2c:06:15:ad:91:f6:1d:fa:ed:e9:c9:62:73:a3:bb:
                    5c:35:20:f8:e4:f7:e4:5e:51:24:d4:a7:a8:54:24:
                    f4:b9:37:ee:4c:76:cd:2f:ad:1f:87:8b:6f:99:d8:
                    79:2d:35:f8:93:36:e5:f3:9f:02:78:96:d6:6a:17:
                    27:3a:06:ab:5a:45:ad:c3:0c:6b:bb:cd:98:5a:fc:
                    80:df:20:04:76:5f:56:2f:07:78:a6:6d:64:79:f7:
                    ba:06:79:1c:2d:97:d0:c9:44:06:f9:ac:b6:cf:85:
                    7b:73:97:de:ee:af:00:29:66:f9:b9:15:95:d3:c8:
                    fa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F6:06:3F:BA:D5:64:09:90:9E:BA:E4:F2:9D:39:69:30:00:5C:65
            X509v3 Authority Key Identifier:
                keyid:C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:d8:ff:dc:b3:00:fc:99:00:0f:7d:69:73:96:93:5e:3e:11:
         9d:cc:84:09:81:e9:0d:3d:4e:df:90:40:21:52:3e:9f:2e:de:
         b9:51:30:49:0d:6c:cf:9e:d7:31:60:cf:92:f1:7f:94:d6:fe:
         b8:3f:54:13:e3:46:32:5d:c7:0f:d7:42:17:aa:d7:58:0b:3b:
         70:dd:22:df:78:ff:9c:aa:10:1d:62:81:41:6f:d8:c8:fd:ed:
         13:e6:2f:a1:e4:9e:2c:11:5d:d9:97:3c:e8:14:ed:57:c6:88:
         28:b9:2d:ff:9f:fe:cd:6b:62:f4:73:9a:e0:d1:b9:d4:b1:d9:
         d0:f9:38:49:6e:b1:b2:c8:8f:4c:75:79:e1:83:45:55:56:9f:
         2d:d0:54:8d:89:a4:d9:41:11:bb:c7:e6:b4:9f:ad:18:b7:e0:
         22:72:46:da:ab:1c:de:51:ce:3c:aa:b2:85:da:7d:f3:d8:98:
         ea:87:5d:2d:9e:57:d1:1a:ee:01:a3:62:60:83:83:10:2e:6c:
         45:d4:26:2b:35:8a:06:f6:28:31:ff:b9:5d:e0:53:91:9f:8b:
         f0:53:c9:8b:2a:f0:ed:4d:22:a7:73:fb:52:36:80:67:fc:7b:
         64:99:c7:d4:6f:95:d3:ca:e2:5f:77:6a:00:b7:43:68:36:b7:
         d5:9c:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:54:06 2025 by rpki-client