Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3137372e35322e3136312e302f32342d3234203d3e20333936353039.roa
File:                     3137372e35322e3136312e302f32342d3234203d3e20333936353039.roa (raw, json)
Hash identifier:          +cD6Ux4Qdi0C7juB9rv976h6krlVo1YQ2m+I6VIlZgM=
Subject key identifier:   66:E8:10:B3:46:9D:85:38:BF:8C:C3:56:CB:E5:A8:97:27:BA:68:8B
Certificate issuer:       /CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
Certificate serial:       0D1B2AF31508B39171063F2D06EAF66150A97E82
Authority key identifier: E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3137372e35322e3136312e302f32342d3234203d3e20333936353039.roa
Signing time:             Wed 24 Sep 2025 01:47:08 +0000
ROA not before:           Wed 24 Sep 2025 01:42:08 +0000
ROA not after:            Wed 23 Sep 2026 01:47:08 +0000
asID:                     396509
IP address blocks:        177.52.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl
                          rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Oct 2025 02:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1b:2a:f3:15:08:b3:91:71:06:3f:2d:06:ea:f6:61:50:a9:7e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
        Validity
            Not Before: Sep 24 01:42:08 2025 GMT
            Not After : Sep 23 01:47:08 2026 GMT
        Subject: CN=66E810B3469D8538BF8CC356CBE5A89727BA688B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:37:5c:c3:ad:a8:e7:36:1b:54:80:6d:67:f6:
                    7a:2f:43:dd:a7:fd:8e:cf:8b:29:da:19:49:35:24:
                    75:da:1a:24:3e:d8:75:83:66:c4:5f:82:3c:ff:31:
                    f3:57:29:d0:14:e7:89:32:7f:15:47:3b:c8:bf:b9:
                    24:3c:cb:ef:bc:03:45:1a:97:9f:b1:88:d4:a0:02:
                    90:78:4f:df:1a:a6:0c:41:a4:34:2b:15:16:b3:60:
                    25:94:03:da:c9:64:f8:61:62:0b:90:35:59:ff:ed:
                    0b:2c:65:48:94:75:7d:5b:df:59:56:39:99:bd:47:
                    5a:1b:f7:d7:83:6d:b4:7b:dd:9f:e6:e4:61:ec:75:
                    9a:46:28:3d:67:4e:22:5f:f3:25:bc:42:e3:62:75:
                    fe:6a:62:28:91:1a:e2:96:30:40:68:d7:33:a1:b4:
                    38:f0:dd:58:54:bf:ce:66:39:f5:15:8f:83:5c:c7:
                    bf:14:25:50:60:a0:37:02:25:3d:b4:3d:74:98:0f:
                    ed:6d:26:c0:8f:a2:da:a7:75:8c:39:e8:72:b2:4d:
                    6a:6e:6a:f3:e1:b6:d7:07:74:5b:02:dc:fc:eb:1a:
                    4e:7e:31:45:3c:4b:4a:26:1f:fa:3f:91:79:d9:94:
                    02:5d:c9:fc:21:d2:10:6a:44:42:54:70:59:ca:19:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E8:10:B3:46:9D:85:38:BF:8C:C3:56:CB:E5:A8:97:27:BA:68:8B
            X509v3 Authority Key Identifier:
                keyid:E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3137372e35322e3136312e302f32342d3234203d3e20333936353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:2e:52:29:14:c1:0e:79:3a:58:b7:4b:b8:93:7f:a6:aa:a0:
         83:d6:44:9f:6e:40:e3:d5:90:6d:03:fc:06:3f:5c:4f:c9:f0:
         e4:94:e9:3a:61:36:c8:5e:da:69:6d:76:f1:20:c2:18:d5:1c:
         39:96:73:39:22:1c:5e:15:bf:69:33:c2:e6:e0:aa:ca:15:a1:
         86:13:44:94:c2:b0:77:f8:b0:4f:7b:5e:15:ab:db:bd:1a:84:
         a2:da:55:f6:74:3c:8c:9e:ef:d7:8a:b0:ba:b0:21:63:2a:5a:
         d9:b3:73:d3:fe:2a:f4:b1:39:c0:35:17:a9:c4:0b:99:be:9f:
         cd:28:0d:47:5c:e3:09:5c:e4:c3:0c:07:c6:40:2e:fc:a0:6c:
         b0:87:13:74:25:a6:8b:ac:f8:40:a8:33:e8:b4:a6:e0:bf:82:
         bf:1c:b9:fb:27:3a:ea:8e:05:86:4c:d5:90:6b:69:39:da:5c:
         ae:dd:98:b1:58:ca:06:5a:8e:1a:16:cc:a8:bb:56:39:9a:b5:
         4f:95:94:0a:3d:53:39:ef:b0:13:4d:ea:ab:b6:c9:e7:bb:f2:
         93:4d:26:be:4b:ce:ee:b2:fc:3c:86:22:60:7f:f5:1b:cf:49:
         6c:a2:53:b9:68:2a:37:d6:3e:c5:54:be:4a:88:93:68:48:68:
         8a:d5:ab:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 08:08:27 2025 by rpki-client