Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3232203d3e20323632333933.roa
File:                     3137372e3132392e38342e302f32322d3232203d3e20323632333933.roa (raw, json)
Hash identifier:          0EicfWM+00LLGwGoIzeydddrmOZ3rQFHLsFIgLJacjU=
Subject key identifier:   C0:FE:95:DE:1E:75:62:D1:0D:C3:F8:9F:99:52:DA:94:76:10:46:BF
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       01FB546BB5C42FE969BE2F59165C89BA703C1ED6
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3232203d3e20323632333933.roa
Signing time:             Thu 17 Jul 2025 15:09:47 +0000
ROA not before:           Thu 17 Jul 2025 15:04:47 +0000
ROA not after:            Thu 16 Jul 2026 15:09:47 +0000
asID:                     262393
IP address blocks:        177.129.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 17:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fb:54:6b:b5:c4:2f:e9:69:be:2f:59:16:5c:89:ba:70:3c:1e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Jul 17 15:04:47 2025 GMT
            Not After : Jul 16 15:09:47 2026 GMT
        Subject: CN=C0FE95DE1E7562D10DC3F89F9952DA94761046BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:6c:65:1d:7c:70:60:59:50:69:c8:b8:bc:
                    dd:29:8d:e0:12:b1:6a:78:78:4f:ce:2f:ae:0e:6b:
                    00:51:15:5f:ed:f0:67:a9:29:28:4c:ee:77:94:3a:
                    fa:b9:6b:19:1f:3a:58:e3:88:5b:5f:f6:5f:f4:e3:
                    6f:36:f5:b9:5c:ef:35:26:b7:fc:15:a5:1d:38:a4:
                    62:bd:24:82:37:a2:13:91:29:66:89:17:1b:21:61:
                    ba:99:37:82:de:58:fa:be:1d:9d:52:c7:f4:20:4e:
                    a6:16:03:b6:74:21:95:f2:2a:3a:ae:01:bb:89:ed:
                    f7:3a:d0:6b:76:7b:5c:45:a5:75:d9:fd:b5:86:e6:
                    e7:e1:96:e0:5e:6a:38:ea:62:b1:3a:0a:6e:50:b6:
                    55:f5:56:a9:fb:c1:1b:e4:7f:6b:ea:be:6d:ff:43:
                    1d:05:05:9d:ed:f1:7d:dc:0a:d3:b8:d6:21:61:c4:
                    4d:72:c8:24:e6:68:65:93:22:61:e2:e9:dd:88:37:
                    cc:14:d2:1d:7a:da:3c:2a:fd:09:72:b6:2b:0b:8b:
                    47:04:15:8a:5b:38:66:52:2a:05:7b:42:50:bb:85:
                    96:b8:67:8d:ac:d3:81:d0:d9:6b:12:aa:a7:8e:26:
                    b4:7e:42:b4:74:ca:b6:b1:e8:18:1a:e2:bf:fb:31:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FE:95:DE:1E:75:62:D1:0D:C3:F8:9F:99:52:DA:94:76:10:46:BF
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3232203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:b0:34:a3:fa:73:f4:79:0d:0c:ab:7b:ef:80:ca:5a:9d:a5:
         7f:d8:0e:9a:99:33:4b:bc:80:7f:39:18:a4:e5:20:b6:ed:c6:
         1b:3a:38:1a:4f:12:76:6b:09:f4:c9:bf:e5:dd:4d:41:ea:a5:
         76:5d:84:7a:2a:16:77:a0:27:a5:4a:db:d1:79:bb:bc:0d:18:
         5e:b9:eb:d7:a6:17:7c:d9:d2:33:4d:a9:ee:d4:4f:e1:71:e1:
         f1:25:6a:1d:ae:54:16:03:df:a5:f0:49:80:48:63:4d:f1:27:
         63:3f:17:a7:ff:eb:1a:a6:9a:33:07:dd:c7:f7:96:1d:8e:64:
         b3:0e:31:95:f9:12:bb:9f:6c:0f:49:a1:89:7c:5e:ec:5c:bc:
         39:c1:87:99:03:4b:02:35:d2:e6:2c:17:1f:3a:e2:42:5f:1b:
         5a:01:b2:38:52:3e:cf:e0:1d:99:e2:ee:a8:6b:b2:5d:65:36:
         93:f5:e2:9f:37:5c:83:ac:8b:35:1e:1e:ba:f1:f6:04:e4:92:
         62:4a:97:94:80:af:de:1a:00:e3:d9:ba:85:c3:9d:b6:4a:40:
         f1:b2:3c:d9:d0:bd:a8:ef:16:84:00:5a:d3:32:36:b4:a7:88:
         37:a7:4a:7a:da:ff:70:83:46:e5:f5:a5:b8:3d:92:d5:9c:b7:
         e0:c1:85:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:41:17 2025 by rpki-client