Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa
File:                     3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          K1lcHBBbdkthPlR7YaN3SRcwPg2gGF9G6DZDw1KxElY=
Subject key identifier:   70:6D:F2:FB:7E:D3:EC:AB:81:C4:05:62:95:19:E4:70:21:40:14:1F
Certificate issuer:       /CN=614EF54DCD6F303805D5996E2C956F5A6154005E
Certificate serial:       371BD69F9DDE495DE9407CFA5E6E9F093409CEA5
Authority key identifier: 61:4E:F5:4D:CD:6F:30:38:05:D5:99:6E:2C:95:6F:5A:61:54:00:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa
Signing time:             Thu 10 Jul 2025 23:51:10 +0000
ROA not before:           Thu 10 Jul 2025 23:46:10 +0000
ROA not after:            Thu 09 Jul 2026 23:51:10 +0000
asID:                     263584
IP address blocks:        177.129.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.crl
                          rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 16:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1b:d6:9f:9d:de:49:5d:e9:40:7c:fa:5e:6e:9f:09:34:09:ce:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614EF54DCD6F303805D5996E2C956F5A6154005E
        Validity
            Not Before: Jul 10 23:46:10 2025 GMT
            Not After : Jul  9 23:51:10 2026 GMT
        Subject: CN=706DF2FB7ED3ECAB81C405629519E4702140141F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:24:e9:95:aa:64:ec:ae:2a:95:f6:d9:dd:8d:
                    d0:b1:99:d3:b6:39:1c:9f:6b:21:cf:70:7f:f0:a6:
                    b1:89:a5:0b:90:67:dd:e8:4d:23:01:6d:66:85:47:
                    49:30:78:6a:4b:a0:0a:8f:28:ab:fb:b6:2b:b0:ee:
                    6b:3c:9d:e9:92:56:30:6c:e3:8b:2e:c5:f5:52:16:
                    e6:03:71:12:04:72:58:cc:ce:a8:ef:bb:a3:eb:5c:
                    cc:08:0a:fd:f4:ca:cf:e5:4e:42:e1:94:a4:6b:7c:
                    66:7d:0f:b5:19:5a:10:3e:21:87:6c:77:06:3e:6e:
                    27:a2:46:fa:37:af:ad:40:05:e5:c0:e3:a0:62:5e:
                    50:cf:c2:56:d6:c0:ab:5d:c0:5e:24:49:d2:d5:e1:
                    a7:92:f4:b3:f0:8f:19:3d:3f:61:5a:bc:d3:9d:60:
                    bd:d8:f7:96:42:59:a9:ba:c0:ea:71:b5:05:d6:1f:
                    dc:48:54:12:d0:12:50:91:15:62:1a:18:c0:d5:e0:
                    da:60:e9:af:d1:48:4e:dc:9d:dc:72:96:8e:f9:2a:
                    ab:d8:be:ce:ff:7b:50:62:66:a2:c6:d1:56:02:b3:
                    11:d7:71:af:a2:6b:7c:68:4c:54:ff:f6:33:c4:05:
                    20:45:5b:19:69:95:a0:7d:b9:3b:ba:42:e9:73:6f:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6D:F2:FB:7E:D3:EC:AB:81:C4:05:62:95:19:E4:70:21:40:14:1F
            X509v3 Authority Key Identifier:
                keyid:61:4E:F5:4D:CD:6F:30:38:05:D5:99:6E:2C:95:6F:5A:61:54:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:02:27:fa:b1:2e:e7:9c:88:fc:6b:db:2a:64:d5:1d:f8:fb:
         3e:51:ad:df:94:27:62:02:30:3f:e9:6c:4e:64:0e:55:fa:c8:
         6b:11:81:ed:2d:15:40:0a:f2:42:8c:2c:8c:1b:ec:19:a9:9a:
         97:09:6b:39:99:ac:a0:60:77:31:cb:29:c5:b7:32:e7:a9:a0:
         90:35:65:1a:a1:09:f1:f7:9e:2e:e9:8b:9a:89:0a:09:f0:f6:
         17:80:f5:f9:1b:40:19:63:2a:f1:01:37:15:36:db:e9:22:ad:
         fa:5c:c8:a7:66:8c:ca:32:7e:4f:e8:5b:ca:6e:11:3d:16:82:
         57:37:f8:00:0d:0f:0a:87:95:2b:f8:15:0a:90:dc:ba:85:50:
         c0:22:94:13:c4:dd:5f:7b:87:09:79:93:11:d1:dd:44:14:f9:
         62:bd:ed:a1:23:e7:ab:78:30:f6:e3:7a:a0:de:c5:6b:24:cd:
         da:be:92:e7:78:84:62:9a:54:c3:48:c6:02:30:04:be:11:f5:
         c4:69:0e:47:e4:e8:f6:a9:45:7d:e9:10:6d:e7:f7:89:30:57:
         89:ba:ad:7e:8b:ce:0b:05:c1:fb:80:ef:22:3a:bd:3f:6e:ec:
         c0:9b:76:3b:68:83:ca:d5:d0:cc:46:76:9c:4a:d5:fd:a3:b9:
         ea:31:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:05:33 2025 by rpki-client