Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3137372e39332e3232342e302f32302d3234203d3e203238363633.roa
File:                     3137372e39332e3232342e302f32302d3234203d3e203238363633.roa (raw, json)
Hash identifier:          bNqXsAv0kRQc7WGMACC+Jtk28vX6IoAd3s8/DmPrr7I=
Subject key identifier:   87:9D:A8:DB:ED:FA:1F:CB:29:F5:46:9E:22:F4:2D:F4:C4:4E:A2:47
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       5974FEC8D0583251833B98D2EB6BBDF24E62F433
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3137372e39332e3232342e302f32302d3234203d3e203238363633.roa
Signing time:             Wed 02 Jul 2025 13:42:30 +0000
ROA not before:           Wed 02 Jul 2025 13:37:30 +0000
ROA not after:            Wed 01 Jul 2026 13:42:30 +0000
asID:                     28663
IP address blocks:        177.93.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 13:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:74:fe:c8:d0:58:32:51:83:3b:98:d2:eb:6b:bd:f2:4e:62:f4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: Jul  2 13:37:30 2025 GMT
            Not After : Jul  1 13:42:30 2026 GMT
        Subject: CN=879DA8DBEDFA1FCB29F5469E22F42DF4C44EA247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:36:54:a0:fd:81:79:33:3c:8d:e7:27:18:
                    c5:4f:56:28:16:9f:7d:a4:1e:80:31:33:97:ed:c5:
                    f2:b9:b4:0f:e2:08:98:fa:85:89:fa:5c:2e:fa:dc:
                    86:de:1a:8a:39:be:5e:12:3b:92:e4:04:f1:a9:b0:
                    c2:70:08:95:c6:cd:b9:f3:d6:ae:f7:45:3e:03:46:
                    a2:79:77:46:7e:c7:fc:61:0d:02:9f:b1:e9:3b:2d:
                    86:bd:fe:18:4d:12:7c:cd:60:c1:fd:92:5f:fa:da:
                    ae:45:7d:6a:9a:be:00:37:e4:34:bf:e8:7c:9c:6c:
                    d9:28:0e:2d:24:e8:e1:db:09:1c:98:c6:f5:f9:5e:
                    9b:32:37:1c:2b:f9:ff:e4:74:ed:c8:ad:40:6a:2d:
                    67:eb:38:83:57:4f:11:79:7f:47:0c:0c:29:c6:72:
                    7e:3b:5b:c8:1d:12:ca:f5:b7:cb:60:b5:ab:f8:86:
                    c3:0a:b0:c0:a6:67:aa:56:ea:97:0a:dc:49:23:c6:
                    55:d4:ea:d8:73:ec:fc:67:78:1b:a7:0d:40:3f:26:
                    0b:21:aa:ba:64:c4:c2:ef:4c:da:4f:89:53:b1:e6:
                    24:35:dc:93:d7:da:ee:b7:95:bf:56:9a:68:40:88:
                    f7:97:3d:30:08:4b:e0:b3:a0:2a:35:c2:29:04:af:
                    f0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9D:A8:DB:ED:FA:1F:CB:29:F5:46:9E:22:F4:2D:F4:C4:4E:A2:47
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3137372e39332e3232342e302f32302d3234203d3e203238363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:90:d1:3d:71:e8:85:93:fa:c3:b6:90:b8:c8:79:a2:f5:3b:
         53:74:d1:ea:07:8b:72:db:d2:db:5a:ac:a4:7d:60:87:b8:cf:
         40:a4:89:4c:b9:86:89:95:bc:2c:c7:6b:18:d8:7f:6b:27:d1:
         da:44:d7:e9:c1:28:8b:9a:69:68:15:c8:04:ad:ec:63:00:a4:
         31:89:ba:4b:32:ee:b7:33:48:4e:4c:c7:b8:84:4a:3a:29:bf:
         96:6c:ad:58:7e:83:dc:ec:ab:b5:0e:88:96:cb:66:72:13:47:
         ad:2b:cc:8d:fb:d1:0f:27:ae:69:ab:ac:7b:4e:6a:d8:f0:a5:
         c8:57:c2:4c:43:ce:63:60:f9:40:b5:69:12:80:f4:2e:54:5c:
         c8:ed:7a:f7:d7:26:5e:9e:bd:62:af:d8:7c:93:30:40:70:eb:
         aa:27:bf:71:ae:15:45:12:5d:dc:83:73:04:c8:3c:d4:24:f9:
         b5:43:16:ac:6f:c7:38:6a:94:96:0d:1c:81:7a:f8:5c:9c:f4:
         44:e7:41:7a:6f:73:f5:fd:5c:34:24:b6:8e:8f:8f:09:69:0b:
         d1:67:4b:f5:e8:fe:d6:68:ec:41:a0:f8:64:18:72:49:ab:7a:
         f6:e3:cd:ea:08:06:4e:54:c0:75:ea:5c:e2:c9:93:1b:8c:4c:
         e8:c4:5a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:58:33 2025 by rpki-client