Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32302e302f32332d3233203d3e20323636313239.roa
File:                     3137372e33362e32302e302f32332d3233203d3e20323636313239.roa (raw, json)
Hash identifier:          75tImqlK7/7L5dHXNS98UoDqx/fgz+ka9ElxvTcSRrY=
Subject key identifier:   73:CB:B6:5F:F2:E0:6D:BB:3E:88:A4:D4:E0:29:2C:AF:4F:41:3A:C2
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       4F50DA47D701506042796F52B4DD7266A6F9AE63
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32302e302f32332d3233203d3e20323636313239.roa
Signing time:             Tue 21 Oct 2025 17:17:11 +0000
ROA not before:           Tue 21 Oct 2025 17:12:11 +0000
ROA not after:            Tue 20 Oct 2026 17:17:11 +0000
asID:                     266129
IP address blocks:        177.36.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 10:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:50:da:47:d7:01:50:60:42:79:6f:52:b4:dd:72:66:a6:f9:ae:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Oct 21 17:12:11 2025 GMT
            Not After : Oct 20 17:17:11 2026 GMT
        Subject: CN=73CBB65FF2E06DBB3E88A4D4E0292CAF4F413AC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:66:4f:b1:06:a7:00:cf:48:0f:83:dc:05:
                    7b:8e:22:58:94:18:fb:9f:1c:cf:65:7a:0b:a2:e7:
                    a6:7b:8f:9e:a6:05:8e:1a:a6:88:84:ca:1e:6d:af:
                    bd:7c:12:1d:52:a6:fe:86:cb:22:0e:8f:65:14:ac:
                    3d:85:1b:34:43:5e:b7:17:a0:90:e1:72:97:8e:1c:
                    9e:59:e0:10:6a:ec:7a:4a:4c:d6:17:81:0a:3b:2f:
                    2a:43:13:01:f9:0e:d0:52:c1:23:0e:f0:fd:7a:11:
                    12:30:ce:63:b3:96:06:88:a0:65:e8:fc:48:63:68:
                    f4:e2:9e:92:ef:0f:3a:0f:9d:a6:bf:61:8f:b8:b3:
                    f7:11:dc:3f:2e:55:1f:23:af:67:aa:c5:5f:a2:15:
                    f5:51:2b:7f:60:2a:3c:21:eb:ab:7d:43:81:df:3c:
                    1b:30:da:fa:58:16:21:a0:68:18:34:e7:c0:1d:d0:
                    67:08:b1:da:07:8d:a7:89:a9:0f:18:e7:59:2d:00:
                    4b:9a:8c:38:35:76:cf:7f:39:01:b4:40:9e:35:ee:
                    aa:ad:48:f0:ee:94:64:c1:f4:f1:b7:dd:be:ef:d3:
                    87:dc:7c:0e:9f:32:de:ab:5d:c4:75:9d:b8:05:4b:
                    e5:34:e3:cb:fc:d4:49:98:aa:3e:6e:e1:24:70:36:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CB:B6:5F:F2:E0:6D:BB:3E:88:A4:D4:E0:29:2C:AF:4F:41:3A:C2
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32302e302f32332d3233203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:19:00:34:39:ab:ff:7d:6f:f0:4e:63:45:f2:69:f1:b1:52:
         0b:13:4e:6e:b2:8c:48:95:83:21:09:62:50:42:0f:5e:a7:91:
         77:b8:4c:8f:9f:de:34:40:8b:98:60:24:e8:75:f0:e9:38:fd:
         6b:a7:48:45:7d:cb:02:db:7a:89:84:6c:a8:dd:e4:f0:67:bc:
         5c:0c:f3:0d:eb:f3:9d:3f:b2:f6:96:c3:31:4a:aa:29:f4:d1:
         b1:00:4a:af:23:af:64:06:e5:d4:18:37:ae:ca:37:a8:a2:08:
         3a:de:3c:b0:ea:4c:6b:cc:80:92:da:c2:86:e1:f9:e8:57:9d:
         6b:53:36:30:f6:b0:5b:6a:14:69:63:f7:4c:e6:70:80:e2:64:
         c9:79:3a:64:b9:6e:5c:81:8e:ca:8d:73:09:1f:f2:d5:32:2e:
         6c:34:74:14:c9:67:ce:28:6f:fa:03:27:e8:de:a8:c2:9e:e1:
         23:1d:9c:2e:32:4f:d6:68:c0:e9:b5:6f:93:1d:60:e8:f8:b7:
         a1:c6:b9:97:07:ad:0b:77:4e:ce:7d:ae:fc:41:75:e8:92:35:
         12:ff:34:84:ba:9f:af:76:3d:4d:15:e2:46:f6:7d:ff:ac:e5:
         ab:e3:2b:dd:11:51:3a:58:ee:71:a6:4f:0f:bc:b0:3a:88:1e:
         fe:bb:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:56 2025 by rpki-client