Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/2/3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa
File:                     3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa (raw, json)
Hash identifier:          YhTJYqlSr496tAlF60oJBRNyk9kGabH2gbalJviWIDo=
Subject key identifier:   7F:A8:1B:9A:D4:59:90:E3:3D:16:24:34:BA:FD:A5:EB:1D:59:F3:43
Certificate issuer:       /CN=6A5B0E2D7D062139F32F773048B52CB79728865B
Certificate serial:       0C0CBC2A2C9E6AC09930B1EE8052A76A97FCF363
Authority key identifier: 6A:5B:0E:2D:7D:06:21:39:F3:2F:77:30:48:B5:2C:B7:97:28:86:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5B0E2D7D062139F32F773048B52CB79728865B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/2/3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa
Signing time:             Mon 14 Jul 2025 23:48:50 +0000
ROA not before:           Mon 14 Jul 2025 23:43:50 +0000
ROA not after:            Mon 13 Jul 2026 23:48:50 +0000
asID:                     270797
IP address blocks:        177.131.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/2/6A5B0E2D7D062139F32F773048B52CB79728865B.crl
                          rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/2/6A5B0E2D7D062139F32F773048B52CB79728865B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5B0E2D7D062139F32F773048B52CB79728865B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 08:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0c:bc:2a:2c:9e:6a:c0:99:30:b1:ee:80:52:a7:6a:97:fc:f3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5B0E2D7D062139F32F773048B52CB79728865B
        Validity
            Not Before: Jul 14 23:43:50 2025 GMT
            Not After : Jul 13 23:48:50 2026 GMT
        Subject: CN=7FA81B9AD45990E33D162434BAFDA5EB1D59F343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:df:ca:fa:94:56:3a:ec:b5:58:c9:af:dd:
                    7f:4a:e9:b0:b7:29:e0:41:45:4b:a2:a3:1c:5c:ce:
                    6b:8b:9c:c6:05:ac:4f:ad:74:8b:6c:3b:5c:7e:ba:
                    cc:7c:7f:86:ad:9c:7b:59:f8:a4:1d:fd:a5:03:df:
                    b4:3d:e5:be:57:8d:4b:ca:db:bf:58:d2:b8:34:f5:
                    09:6b:e6:cc:22:7c:6c:e8:73:37:b2:23:79:29:87:
                    50:0c:63:85:de:09:ca:fe:02:00:dc:e6:ac:56:32:
                    1f:13:f2:48:80:f3:8d:ab:de:51:d7:5d:4d:59:9a:
                    c4:46:33:c4:85:56:a2:c2:99:5d:d1:7c:9a:79:ae:
                    91:0b:f1:f6:3a:a2:04:fb:3b:e3:35:5b:87:9b:a6:
                    13:c2:9e:a8:90:ea:65:5f:d3:27:bc:b1:dd:9a:05:
                    a2:5a:51:56:32:6e:26:23:cb:75:09:df:39:f0:03:
                    9f:8b:7a:73:ab:c2:82:76:ff:c2:1d:81:1f:f9:2d:
                    47:e5:cc:69:1b:ec:7f:17:cf:29:62:f5:34:02:47:
                    41:0f:86:8d:e3:a0:ba:61:6d:4a:f8:39:59:c4:0b:
                    2b:65:22:c5:1b:71:6d:35:fb:e2:a9:0a:50:c1:a7:
                    f9:dd:1f:bd:e0:47:19:97:ad:fe:2d:9c:03:09:4c:
                    32:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A8:1B:9A:D4:59:90:E3:3D:16:24:34:BA:FD:A5:EB:1D:59:F3:43
            X509v3 Authority Key Identifier:
                keyid:6A:5B:0E:2D:7D:06:21:39:F3:2F:77:30:48:B5:2C:B7:97:28:86:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/2/6A5B0E2D7D062139F32F773048B52CB79728865B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5B0E2D7D062139F32F773048B52CB79728865B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/2/3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:46:10:a2:4d:35:32:12:10:4a:1d:49:cd:81:9d:4d:52:03:
         e5:f0:66:6a:4c:86:83:83:0c:c7:b4:72:4e:9f:d8:4d:33:ad:
         92:f6:dd:f8:73:1c:84:a9:d4:af:c5:db:67:f5:4a:8b:d8:42:
         f5:9d:1c:38:16:8b:59:02:f9:f4:e8:eb:b0:43:da:75:db:7f:
         7b:28:c3:72:4d:a7:b7:89:e8:73:d9:eb:8c:3a:c0:90:66:25:
         d9:4c:f6:cb:02:a2:f9:87:12:69:93:41:6d:a4:1d:91:ad:be:
         6c:96:9a:2b:b5:6e:3f:35:7e:f7:53:f0:ec:2a:fa:5f:b4:fd:
         f2:c1:5a:de:6b:82:03:16:4b:cf:ab:59:26:09:45:72:a9:0a:
         3f:c1:42:ef:df:af:4f:31:69:dd:68:e2:1e:99:5c:b4:7e:e9:
         4f:e3:1e:64:13:1a:62:45:ab:b1:10:50:64:a6:4b:9f:ae:32:
         16:22:ec:03:7c:18:ce:af:5b:eb:35:80:6c:5c:b1:0e:28:a9:
         57:7f:54:b8:68:e8:d4:62:2a:32:52:63:b9:ac:b6:8e:70:4a:
         6a:b3:98:a4:f7:31:12:91:9f:e2:db:8f:ad:24:7f:78:b2:5f:
         08:f1:45:9e:59:57:7f:77:af:08:aa:eb:f7:59:cb:7c:51:2c:
         77:10:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:05:41 2025 by rpki-client