Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32312d3231203d3e20323632343434.roa
File:                     3137372e3132382e382e302f32312d3231203d3e20323632343434.roa (raw, json)
Hash identifier:          vRgIiUTh5MQNI4Bk/L34xUq89E8cNw3fUfCqe4M5Q+M=
Subject key identifier:   AC:E7:9D:30:F2:AA:E0:BD:E5:AB:68:97:46:15:B7:2D:8F:C6:FE:A7
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       0C45190538C4A19B04369F0ADD1DBA97ED65250A
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32312d3231203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:44 +0000
ROA not before:           Wed 09 Jul 2025 13:59:44 +0000
ROA not after:            Wed 08 Jul 2026 14:04:44 +0000
asID:                     262444
IP address blocks:        177.128.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:45:19:05:38:c4:a1:9b:04:36:9f:0a:dd:1d:ba:97:ed:65:25:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:44 2025 GMT
            Not After : Jul  8 14:04:44 2026 GMT
        Subject: CN=ACE79D30F2AAE0BDE5AB68974615B72D8FC6FEA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:c2:88:89:3d:bc:99:63:19:cf:af:32:dd:
                    4c:26:d2:a3:df:c5:b5:98:9c:02:6e:b8:bf:ae:9e:
                    67:7b:17:0a:30:17:5b:f9:79:b2:eb:37:0b:a1:e7:
                    14:06:8d:07:f8:0d:a2:6e:87:a4:94:6f:27:51:98:
                    2c:c1:01:96:02:f5:ba:50:0c:91:7a:fd:73:84:f9:
                    9f:12:3d:6b:d2:1a:64:42:3f:08:ca:11:ec:54:91:
                    61:0b:c2:41:17:39:fa:fd:f2:89:40:cd:7c:ce:ab:
                    e6:3b:93:32:fe:62:a8:94:31:a8:a6:d3:1c:37:0d:
                    6a:ca:57:b3:23:47:bb:47:b5:5b:f8:41:fc:a2:08:
                    d2:fd:72:eb:76:39:86:e6:90:ef:87:44:3e:e9:0d:
                    7d:59:40:a6:2c:47:d0:c1:ab:15:4d:59:41:d6:b1:
                    c5:60:6c:10:fe:80:ac:fe:7d:b3:e6:82:a4:ed:c8:
                    d7:53:d4:15:6f:74:81:fa:83:57:69:c0:ce:88:85:
                    7e:cf:8d:8f:0a:9c:43:8e:b0:13:71:ec:83:3b:97:
                    64:49:81:56:93:29:ee:9d:b1:b3:8e:24:08:1c:89:
                    39:db:e9:e2:97:de:3d:11:f6:23:cc:4a:f1:dc:e3:
                    39:0a:d0:32:8b:d5:24:bd:7a:41:30:6b:a4:7c:0e:
                    d1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E7:9D:30:F2:AA:E0:BD:E5:AB:68:97:46:15:B7:2D:8F:C6:FE:A7
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32312d3231203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:9e:da:40:fa:1c:71:e6:68:e5:5b:53:3f:6b:82:36:15:e7:
         e5:f1:95:ce:18:5e:0f:9b:65:d2:7e:8f:c8:d8:47:d8:b4:0f:
         9b:31:b0:e9:97:7a:3e:09:89:69:56:0e:62:a8:59:0d:cd:76:
         fd:db:26:91:1a:3a:d2:a1:56:6c:7a:8a:ca:43:7f:d5:fc:f1:
         11:b1:4d:ac:9b:71:55:16:f2:f3:c6:1a:88:a4:12:b3:13:fa:
         b6:1d:6e:40:ea:65:25:99:bf:7e:e6:48:91:c0:d0:9a:f5:28:
         d7:7e:5d:65:9f:64:78:8f:9f:d2:f9:a6:5a:ba:c1:72:2f:0a:
         fa:33:eb:eb:c7:d1:c0:86:6d:06:46:72:08:c0:64:60:b4:9e:
         64:51:db:96:79:eb:3f:66:84:e1:b1:bc:99:48:59:2c:e9:93:
         d2:67:4a:ea:ee:67:b6:30:40:ca:d3:55:e1:9d:41:6f:08:2d:
         72:26:bc:3c:82:26:14:4a:d4:e4:3f:8f:d8:08:26:6f:2e:10:
         b2:13:53:1b:da:ed:4b:02:ef:fc:c2:51:1a:91:ed:56:21:bc:
         d1:7c:30:b6:fa:ba:2a:ca:ac:1d:2a:e8:bf:f9:73:15:47:f2:
         05:bd:a2:d8:26:44:11:33:6c:1c:87:92:26:64:a2:60:63:b8:
         4c:3e:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:59:46 2025 by rpki-client