Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32322d3232203d3e20323633343237.roa
File:                     3137372e39312e34342e302f32322d3232203d3e20323633343237.roa (raw, json)
Hash identifier:          qm2IjVMrNJhVqyzqnk3xfr7ZKOkKujcbK902YgKCvZs=
Subject key identifier:   B2:44:23:55:11:FE:02:15:A7:8D:98:C4:D8:12:B4:23:D3:47:18:1A
Certificate issuer:       /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial:       6347AF8E71E7F529EB97C7AA4F20B84960201B78
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32322d3232203d3e20323633343237.roa
Signing time:             Tue 22 Jul 2025 20:54:41 +0000
ROA not before:           Tue 22 Jul 2025 20:49:41 +0000
ROA not after:            Tue 21 Jul 2026 20:54:41 +0000
asID:                     263427
IP address blocks:        177.91.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:47:af:8e:71:e7:f5:29:eb:97:c7:aa:4f:20:b8:49:60:20:1b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
        Validity
            Not Before: Jul 22 20:49:41 2025 GMT
            Not After : Jul 21 20:54:41 2026 GMT
        Subject: CN=B244235511FE0215A78D98C4D812B423D347181A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:25:0e:57:d0:fa:af:08:d9:b5:ba:46:30:2a:
                    c1:40:e3:ff:4a:da:c4:1d:f2:24:1f:27:4f:e9:66:
                    d3:ec:86:46:db:a8:4a:d0:45:93:65:db:83:35:5d:
                    51:b7:80:4d:3b:4f:d1:ee:2d:d7:63:7d:95:0a:49:
                    54:68:93:6a:98:3a:0f:1e:87:29:7a:7c:63:a1:8e:
                    0b:6a:49:5f:06:c4:1e:46:35:e3:b9:a7:92:f6:d7:
                    d3:d7:3a:ed:e2:1e:56:b7:af:19:79:ab:2c:e3:86:
                    ff:79:4b:45:f2:35:b0:d0:7a:18:32:c9:8e:f4:ad:
                    a8:cc:7d:0a:20:d8:34:8c:24:f0:c0:a7:5b:26:94:
                    ae:da:3f:46:10:53:27:ef:a9:ff:7d:e0:aa:ea:a3:
                    ff:f2:bf:2d:06:03:4e:da:e7:e4:48:20:ac:08:9f:
                    ec:f3:d5:28:4b:b9:eb:be:4b:97:69:61:e4:59:5b:
                    8e:5b:33:91:de:d5:36:be:df:9a:ca:b8:2d:0c:75:
                    9f:11:8b:6b:2e:52:0e:42:b1:7f:42:d0:ba:a2:f8:
                    67:b0:87:ee:2b:47:75:b7:9a:40:1f:40:76:6c:5d:
                    28:5d:19:aa:16:5f:64:2e:20:ef:c4:54:c4:d7:8f:
                    87:d3:5c:1e:77:43:6e:da:fa:41:a7:94:76:e5:40:
                    a8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:44:23:55:11:FE:02:15:A7:8D:98:C4:D8:12:B4:23:D3:47:18:1A
            X509v3 Authority Key Identifier:
                keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34342e302f32322d3232203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:a4:ae:78:29:eb:d5:51:e7:a1:7f:d9:ec:16:6e:25:0c:5d:
         a6:67:04:d8:89:52:af:1c:fd:26:5f:0a:5f:06:7e:f9:b3:5f:
         8a:77:fe:48:08:52:5f:7c:be:a4:bd:c9:95:c4:f5:1d:ce:07:
         ea:a7:27:85:80:c8:e0:b6:31:f1:9c:68:8a:d1:b2:e0:d4:eb:
         d6:bd:e7:90:50:10:ea:d4:4c:91:3c:1a:a5:ba:86:a0:4d:d1:
         aa:d3:20:a6:a8:fd:70:ae:3c:40:66:99:61:4e:72:fd:ff:c6:
         fa:a3:43:53:31:e3:b3:a6:7b:bc:e6:dd:af:d3:08:84:a6:5c:
         19:7e:a7:e8:93:0d:61:d9:1b:4f:b1:3e:8e:7e:67:6c:69:a2:
         ea:07:0a:b5:1e:9d:05:5e:b6:6e:59:24:98:f4:ad:9a:78:e3:
         fd:69:19:94:89:54:16:85:c3:c2:2d:e1:4a:eb:34:c3:ba:3b:
         f4:ed:db:02:a2:43:fe:4c:96:c6:67:93:58:ed:b8:48:db:9f:
         b4:1e:73:91:50:67:f8:8a:28:b0:cc:35:08:6d:1d:77:e9:26:
         9a:ec:86:63:27:b9:06:b5:c3:bb:e9:d7:04:54:b1:ea:e0:3f:
         db:55:2a:39:8d:30:93:f0:a6:f3:cb:ee:f3:40:45:3e:26:d2:
         ef:ee:25:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:42:33 2025 by rpki-client