Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38362e3233322e302f32322d3232203d3e20323632343434.roa
File:                     3137372e38362e3233322e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier:          TExbwn7j/gSM7mzxAvF/oX+1FngicX4nWy+QEzDVBVI=
Subject key identifier:   E8:83:18:F7:FC:18:4C:61:F8:B3:38:64:C9:92:B7:E5:B1:F8:03:2D
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       28AA4D11C1441D054F91644CD8ADAFA13F61AFEC
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38362e3233322e302f32322d3232203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:43 +0000
ROA not before:           Wed 09 Jul 2025 13:59:43 +0000
ROA not after:            Wed 08 Jul 2026 14:04:43 +0000
asID:                     262444
IP address blocks:        177.86.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:aa:4d:11:c1:44:1d:05:4f:91:64:4c:d8:ad:af:a1:3f:61:af:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:43 2025 GMT
            Not After : Jul  8 14:04:43 2026 GMT
        Subject: CN=E88318F7FC184C61F8B33864C992B7E5B1F8032D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c5:eb:73:04:fd:fc:cc:54:f8:98:1e:af:fd:
                    de:f3:d9:2f:2a:ce:74:fc:35:3d:4d:4f:93:f6:87:
                    0e:fd:69:04:af:c5:85:c3:ed:6d:a5:09:21:70:cd:
                    62:eb:7b:b9:7b:b5:51:35:b4:23:ec:7b:7a:6e:05:
                    33:11:e7:8a:9c:c1:7f:f3:5e:cd:99:f9:5b:82:3f:
                    76:a7:70:3b:7d:48:2a:b7:7b:0a:2d:b4:d3:b4:fb:
                    76:79:23:c7:82:e8:dc:ac:08:9c:74:14:f2:b8:26:
                    27:fc:f4:a8:e2:30:87:fb:90:45:10:4d:84:8d:47:
                    a9:af:33:8f:7b:cf:80:fb:ed:27:99:f2:0a:91:f2:
                    e3:d6:71:ef:b0:da:0b:29:a2:20:bd:87:24:53:31:
                    8a:c9:75:90:ac:64:bf:94:71:d6:06:74:a8:d5:89:
                    18:14:bf:0e:bb:4a:c1:bf:56:e0:e0:8f:ca:16:73:
                    1a:c9:3b:71:89:45:ad:24:da:8f:be:ff:2a:7e:74:
                    66:9e:c7:e0:16:40:69:ef:a4:6c:51:39:26:1b:73:
                    15:a3:90:48:06:7e:ab:98:d8:fb:74:d5:c7:c4:dd:
                    22:47:38:28:dc:b9:95:3c:ca:b7:96:d3:7b:38:c1:
                    76:5c:10:6f:3d:96:d8:71:a8:21:3e:9a:06:85:1d:
                    5a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:83:18:F7:FC:18:4C:61:F8:B3:38:64:C9:92:B7:E5:B1:F8:03:2D
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38362e3233322e302f32322d3232203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:e6:e0:5e:b7:3f:bc:62:83:30:2c:ee:22:82:26:e2:2b:0a:
         df:b1:e4:be:0d:8d:27:dc:82:d1:e4:fe:97:f5:b7:e7:f0:a5:
         3c:8f:f4:13:7b:e5:a0:3d:d0:db:6c:6d:d1:5c:e0:82:6e:56:
         46:c0:04:df:c2:9d:c5:45:fd:c8:e9:b7:73:92:a9:80:bc:57:
         9d:63:9c:b6:5d:dc:b7:5f:0b:70:fc:ff:79:1a:9d:54:0d:b6:
         dc:05:36:2e:97:d5:73:70:88:a1:76:66:43:17:4b:c5:b7:36:
         b7:9e:fa:0d:7b:fc:b7:bc:56:41:7b:b3:7a:99:6b:93:3d:cb:
         32:9c:e8:be:85:e1:60:8d:89:78:37:6d:44:c3:40:6e:f5:dd:
         28:58:2c:65:72:97:8b:41:14:41:89:47:01:5e:4d:26:e5:7f:
         fb:75:17:e8:52:db:2c:92:41:e4:dd:9f:c2:e1:cf:b9:74:9b:
         b4:df:1b:8c:e3:30:12:f6:2e:e1:51:49:6c:22:a7:a4:39:42:
         65:ea:c4:89:93:c3:8e:bc:7f:6b:1d:7e:0f:9f:31:23:3c:05:
         93:6d:3d:01:aa:0b:11:09:69:73:b4:25:55:a5:ce:f4:0f:39:
         aa:2d:fc:41:b9:58:3f:ef:1f:72:65:80:e1:7d:f9:41:a1:9c:
         36:32:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:59:56 2025 by rpki-client