Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34362e302f32332d3233203d3e20323633343237.roa
File:                     3137372e39312e34362e302f32332d3233203d3e20323633343237.roa (raw, json)
Hash identifier:          fO94fzu5fG63G9eU1stFB7TPJJHjVJv57GmXGb1nGg4=
Subject key identifier:   EA:52:60:E6:6E:13:82:36:BB:91:E7:49:5E:0F:80:D6:7E:C2:F7:6E
Certificate issuer:       /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial:       24ACFF179B01BAB9BE2F7B051A41302B1B1209BC
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34362e302f32332d3233203d3e20323633343237.roa
Signing time:             Tue 22 Jul 2025 20:54:41 +0000
ROA not before:           Tue 22 Jul 2025 20:49:41 +0000
ROA not after:            Tue 21 Jul 2026 20:54:41 +0000
asID:                     263427
IP address blocks:        177.91.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 06:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ac:ff:17:9b:01:ba:b9:be:2f:7b:05:1a:41:30:2b:1b:12:09:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
        Validity
            Not Before: Jul 22 20:49:41 2025 GMT
            Not After : Jul 21 20:54:41 2026 GMT
        Subject: CN=EA5260E66E138236BB91E7495E0F80D67EC2F76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:06:9e:25:6e:d2:eb:02:03:a4:df:f5:69:0d:
                    d6:ae:27:52:ae:7c:92:77:63:dd:62:af:0f:c4:12:
                    69:dc:a9:b3:b1:16:1f:19:f5:41:ce:81:e5:3a:0e:
                    58:f8:73:37:52:33:72:02:ac:98:0f:e5:27:d1:7c:
                    3e:06:74:a0:e1:26:ea:b5:3f:ef:99:3d:f0:f2:85:
                    83:73:1c:44:45:e0:9f:ae:fc:a3:39:40:1b:be:13:
                    ef:9a:23:16:73:a1:cb:d3:65:fa:c8:0d:bd:e9:84:
                    04:d6:04:90:37:5f:ad:d8:74:88:b3:4f:30:42:8c:
                    02:ca:5a:94:c8:75:12:c7:a3:b0:18:de:25:66:f6:
                    94:6b:3f:5d:ac:5a:37:0d:a5:80:61:39:41:d2:c8:
                    a8:b6:ff:ae:82:9b:d0:d2:08:3d:d0:9c:ea:f6:aa:
                    25:f3:2a:33:02:17:f0:6a:d5:83:c1:44:2f:12:7d:
                    2d:b7:31:2d:a6:fd:58:90:5b:38:ea:6a:70:18:c3:
                    8d:79:a8:fe:eb:f9:1c:48:54:25:d5:2c:7d:f1:75:
                    d2:0a:e2:7d:e1:91:33:62:9b:d3:ae:c1:06:87:96:
                    eb:ee:dd:b9:63:b5:5c:f4:62:c7:eb:3c:0c:8b:87:
                    31:20:d6:6b:3b:e5:20:e8:d6:9f:cb:4d:51:ed:31:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:52:60:E6:6E:13:82:36:BB:91:E7:49:5E:0F:80:D6:7E:C2:F7:6E
            X509v3 Authority Key Identifier:
                keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34362e302f32332d3233203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:29:69:0c:c4:a5:bb:e1:f6:96:56:06:c3:2d:e6:0d:fc:45:
         c9:b3:ca:bf:8f:38:a4:61:4f:fe:ad:c0:e5:69:d6:ff:f9:e9:
         41:66:75:41:b5:e1:ad:33:1b:fc:3b:cc:a6:26:41:48:02:0e:
         03:4a:88:74:94:91:8a:ce:b2:07:98:49:df:be:ce:af:0b:db:
         36:a0:f6:73:9d:65:50:87:1a:88:e1:c9:c5:8c:c4:dd:59:a2:
         75:9c:66:00:71:82:10:03:ac:43:c4:8e:38:bc:89:c9:aa:bb:
         51:b5:48:9d:fc:16:c9:d4:39:f6:62:c4:f0:30:26:72:77:47:
         c2:f2:9f:ec:16:81:37:43:28:de:9b:a5:9c:ff:aa:4a:f3:dd:
         6a:de:d0:a8:9a:5f:6d:aa:77:46:5c:27:b8:e4:8c:64:62:b4:
         a8:7f:01:5b:14:e7:d7:ce:d8:94:70:3e:7c:c6:6c:a0:80:91:
         df:99:b4:2b:b4:83:c2:82:c1:16:d1:ac:a0:0b:80:93:aa:ac:
         a3:1b:f8:b1:c7:67:f1:93:38:eb:43:87:cf:55:e4:a8:45:91:
         b0:c2:62:5f:6b:e2:55:e6:34:3f:75:35:26:31:77:07:72:5d:
         f3:db:34:97:ad:03:62:93:a0:3e:d2:00:72:c3:62:76:ab:0c:
         9a:fc:d9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:45:50 2025 by rpki-client