Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e31322e302f32322d3232203d3e20323632343434.roa
File:                     3137372e3132382e31322e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier:          9TYUFKg74zv0aNM/zAKskMi9l9b0o0RjgNa3tAky1zA=
Subject key identifier:   AA:2C:FD:FC:D6:6C:58:31:B8:17:55:F5:57:55:66:72:5B:24:A0:35
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       72F8402D4345A316BBF5549729F2F75E93C6A7FA
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e31322e302f32322d3232203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:44 +0000
ROA not before:           Wed 09 Jul 2025 13:59:44 +0000
ROA not after:            Wed 08 Jul 2026 14:04:44 +0000
asID:                     262444
IP address blocks:        177.128.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f8:40:2d:43:45:a3:16:bb:f5:54:97:29:f2:f7:5e:93:c6:a7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:44 2025 GMT
            Not After : Jul  8 14:04:44 2026 GMT
        Subject: CN=AA2CFDFCD66C5831B81755F5575566725B24A035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:11:a3:f6:87:b4:50:47:91:c9:54:52:0e:
                    cd:a9:1e:f6:4b:e5:96:d1:85:46:9c:ba:3f:93:a9:
                    fd:62:8c:ff:a4:3b:73:85:55:00:1d:c4:c5:ac:5a:
                    7a:3e:2d:15:56:55:21:04:55:0c:4e:eb:8c:bb:aa:
                    c5:38:2c:fe:96:f4:0c:0c:d9:ba:32:8c:ce:e8:91:
                    39:c1:5f:71:d5:4b:d0:11:2f:7b:42:d3:54:16:fc:
                    a1:53:2d:6b:6c:7e:a2:ab:d4:ff:4a:a5:86:4c:d4:
                    c8:2e:93:92:25:6e:c3:c9:ae:29:da:65:c5:06:bf:
                    65:8d:fb:11:15:9d:b3:f8:6f:fe:b7:85:79:92:dc:
                    d9:71:f8:7b:43:9d:60:53:75:ea:3c:84:03:7c:58:
                    8e:6d:b7:52:d6:90:9b:28:db:3b:66:72:62:1d:fb:
                    01:ce:57:38:2f:b1:eb:70:91:e3:23:b0:10:dc:46:
                    fe:95:b9:bd:5a:27:36:cc:36:05:1f:d7:d1:f8:cb:
                    ad:0b:fe:b4:9d:ed:9f:ca:22:49:d0:d0:2d:e2:9c:
                    2b:61:bb:6c:21:66:ee:14:33:00:a6:66:56:1c:7b:
                    2c:fe:dc:45:23:9a:ee:71:85:2f:d5:4c:32:6e:33:
                    1d:81:76:87:be:f8:8b:83:8b:b8:b9:9b:f5:4a:ce:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2C:FD:FC:D6:6C:58:31:B8:17:55:F5:57:55:66:72:5B:24:A0:35
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e31322e302f32322d3232203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:25:6c:b1:98:9a:15:da:e4:8d:29:54:36:51:4e:12:87:c0:
         5a:d6:3b:21:e5:6b:87:6c:9c:c4:e5:02:93:84:d6:c7:46:9f:
         17:b0:a7:d9:9c:78:80:2d:3c:68:49:9f:c9:48:f4:5a:40:d6:
         72:8a:f5:89:64:c5:f5:cf:30:39:7c:2e:ce:e9:a2:00:7a:81:
         6e:f3:5f:81:14:d0:bf:16:14:ed:92:ac:9d:18:53:98:31:5b:
         58:11:9b:ae:32:f1:35:f2:ec:11:90:34:48:72:72:d8:44:bf:
         da:ce:fa:7e:b1:5d:27:ce:2e:fc:57:83:5b:a5:f8:25:7a:47:
         90:83:52:f4:3c:af:dc:af:73:69:81:80:47:50:18:45:39:42:
         43:f1:87:87:ba:a9:86:ac:fe:52:e6:d6:f0:50:f9:14:67:e2:
         7c:3f:5b:a0:4d:44:5c:36:87:0a:82:43:27:b0:4a:5f:10:48:
         f6:96:10:c9:29:86:fc:d4:6f:d1:4a:f9:c8:97:52:a6:f1:85:
         4e:43:e7:fd:ad:40:4f:96:d5:b8:c7:76:ad:75:f5:91:08:43:
         fe:f3:a2:ee:29:c8:d7:4b:4c:c8:df:06:00:6f:cf:81:60:fa:
         66:2d:ed:77:92:fb:2f:6d:49:64:c1:a0:0a:b7:33:f0:6d:5e:
         6b:3a:70:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:50:54 2025 by rpki-client