Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa
File:                     3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa (raw, json)
Hash identifier:          EcWhsGBEyrxRGE0ptJvEFZQphtJFD8XAczjy8uYmwDQ=
Subject key identifier:   D4:48:58:87:00:B1:E2:39:DD:9E:E0:B2:4D:1C:30:13:48:0D:DF:92
Certificate issuer:       /CN=614EF54DCD6F303805D5996E2C956F5A6154005E
Certificate serial:       0238AF313BE934673E6D3527E92AA3980F6935C7
Authority key identifier: 61:4E:F5:4D:CD:6F:30:38:05:D5:99:6E:2C:95:6F:5A:61:54:00:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa
Signing time:             Thu 10 Jul 2025 23:50:45 +0000
ROA not before:           Thu 10 Jul 2025 23:45:45 +0000
ROA not after:            Thu 09 Jul 2026 23:50:45 +0000
asID:                     263584
IP address blocks:        177.129.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.crl
                          rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 16:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:38:af:31:3b:e9:34:67:3e:6d:35:27:e9:2a:a3:98:0f:69:35:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614EF54DCD6F303805D5996E2C956F5A6154005E
        Validity
            Not Before: Jul 10 23:45:45 2025 GMT
            Not After : Jul  9 23:50:45 2026 GMT
        Subject: CN=D448588700B1E239DD9EE0B24D1C3013480DDF92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:e4:46:96:92:23:e5:a3:6e:11:5a:35:01:
                    18:e3:a2:d8:c5:60:2d:2f:ef:04:7d:f5:32:0b:0c:
                    45:22:db:05:fb:ef:08:a2:fe:72:19:ad:b1:e0:89:
                    03:cb:c7:7a:72:2e:53:64:d3:da:03:19:45:2b:ca:
                    09:5d:90:2d:af:99:8f:c8:cb:ba:dd:97:6e:d2:dc:
                    46:27:4e:5d:1e:ac:03:ac:0e:9e:6c:42:e2:d9:34:
                    83:cc:4c:8d:40:62:d1:ef:c5:1b:cd:fe:43:c8:fd:
                    90:8c:35:96:43:92:e0:4e:92:ed:34:50:c8:79:bb:
                    5c:40:4c:88:32:e0:fb:71:5d:9f:e0:c6:12:f0:43:
                    81:98:b9:79:f1:a5:67:0b:03:f9:33:7f:c5:f8:7f:
                    ba:c6:dc:65:07:39:f8:50:ce:40:c6:82:53:7f:38:
                    5a:5e:be:8e:b7:f6:f1:8b:0c:6f:b9:e4:ac:46:07:
                    0e:f3:75:e9:d9:b6:bc:43:cd:dc:95:1c:15:25:55:
                    4c:26:df:07:78:ce:78:a6:31:e8:05:22:7f:1d:f5:
                    69:70:90:f4:22:ef:53:75:17:61:ac:97:c0:39:d8:
                    ba:3a:9f:f8:71:59:f2:b3:2d:9a:0b:50:e5:8b:57:
                    2f:ea:97:34:f3:fc:e5:94:5f:1b:7c:c1:d2:ae:68:
                    4d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:48:58:87:00:B1:E2:39:DD:9E:E0:B2:4D:1C:30:13:48:0D:DF:92
            X509v3 Authority Key Identifier:
                keyid:61:4E:F5:4D:CD:6F:30:38:05:D5:99:6E:2C:95:6F:5A:61:54:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:8d:0d:b9:ce:10:ce:2f:f2:54:91:8e:f7:df:fe:2f:c2:29:
         ba:bf:ef:f4:9f:be:f5:ec:2a:9d:3b:55:ec:b4:97:83:66:49:
         77:ff:5a:d1:f3:b5:c1:14:1d:18:f3:24:81:cf:e9:5c:92:3a:
         41:54:ec:9c:6b:b5:45:3b:c3:f0:5e:a1:71:cd:15:cd:71:05:
         76:51:2d:91:a4:1e:9f:db:b0:cc:4e:cb:32:94:46:91:40:33:
         fe:ab:e3:9c:3f:6c:51:b9:d2:13:87:c1:1f:99:cb:dd:b9:89:
         95:e8:8e:60:1c:95:02:03:f2:c5:e3:1c:cc:bf:6b:5a:6d:49:
         3d:a6:a6:79:87:e1:1c:d2:87:a6:64:1d:c0:6b:b1:77:29:fe:
         92:2b:5e:22:2a:50:e1:ce:f7:4e:b5:fe:e7:6b:b6:32:fc:8d:
         2a:89:13:a8:92:cd:02:d6:05:85:f9:e4:ad:f2:12:1b:fb:34:
         1f:ff:67:1c:29:1c:f3:d8:13:7e:20:67:b4:a2:53:b2:b1:fd:
         99:ad:f2:de:f1:da:5e:8e:15:6d:16:b3:f0:3d:ec:23:78:68:
         87:ec:e2:b1:1f:ae:75:7a:2e:f3:f6:13:68:ca:36:51:5b:5c:
         b8:d7:e7:7d:c4:08:9e:3f:cf:84:e4:19:9e:48:a3:6c:de:21:
         78:c1:aa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:48 2025 by rpki-client