Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32302e302f32342d3234203d3e20323636313239.roa
File:                     3137372e33362e32302e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier:          zncYhF7SjS8GdaLTJj2y17e11jwUeHHWOVGm0xdXlwc=
Subject key identifier:   23:2A:F6:03:C9:93:C7:9D:1C:4C:49:C0:1D:E0:15:BE:75:81:90:28
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       62C258A0FE3C9BC6148789357A40A7B3FC48530B
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32302e302f32342d3234203d3e20323636313239.roa
Signing time:             Tue 21 Oct 2025 17:17:32 +0000
ROA not before:           Tue 21 Oct 2025 17:12:32 +0000
ROA not after:            Tue 20 Oct 2026 17:17:32 +0000
asID:                     266129
IP address blocks:        177.36.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 10:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c2:58:a0:fe:3c:9b:c6:14:87:89:35:7a:40:a7:b3:fc:48:53:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Oct 21 17:12:32 2025 GMT
            Not After : Oct 20 17:17:32 2026 GMT
        Subject: CN=232AF603C993C79D1C4C49C01DE015BE75819028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:a5:1a:fc:ed:5a:28:eb:bb:8c:cd:88:b6:
                    83:e1:f3:76:3e:b0:98:b7:84:cb:34:b6:1f:25:b9:
                    d6:5b:23:cd:b9:80:f5:77:9c:9e:53:b1:3e:e6:f2:
                    49:99:ae:38:27:b6:ea:62:d9:bd:a4:19:70:0b:28:
                    4d:e0:ec:14:5b:59:8a:dd:f0:71:1d:6a:ff:89:95:
                    f9:42:9b:e7:ac:ef:32:75:f5:e1:44:ff:bb:cd:44:
                    fb:6d:b5:89:ba:73:e3:70:af:ad:b4:56:aa:23:a5:
                    15:01:72:ee:4d:d5:5f:71:e9:d4:40:c5:21:17:c1:
                    ea:01:f2:f9:aa:af:1a:2e:a0:df:7b:eb:32:95:76:
                    1e:2b:40:4c:6e:d1:65:b8:d5:ad:3a:0f:d7:61:63:
                    1f:98:92:ba:4f:47:5b:de:f9:8d:8d:f2:e0:cd:c8:
                    5f:42:b9:33:37:a7:85:8c:13:9a:74:66:be:16:fa:
                    1c:61:bb:69:01:cf:29:50:4d:ba:a1:db:3c:35:d9:
                    aa:d7:82:9a:17:4e:36:16:16:2d:fc:1e:d3:64:8d:
                    7d:b0:7b:b1:c9:88:4f:3f:00:32:60:a3:0a:f7:90:
                    6b:db:b8:3d:0c:56:f8:66:9b:45:3f:57:44:fd:69:
                    32:b2:93:95:1f:e1:a5:c4:e0:61:3c:a4:82:ee:69:
                    33:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2A:F6:03:C9:93:C7:9D:1C:4C:49:C0:1D:E0:15:BE:75:81:90:28
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32302e302f32342d3234203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e9:fa:90:d1:08:92:05:45:38:06:c5:30:ae:95:c7:14:fc:
         ea:a4:2a:c9:5e:60:ec:b2:64:4c:37:35:7a:16:d1:1c:ce:0b:
         c4:82:a1:27:7f:a7:94:f0:ff:ba:dc:19:47:7f:c9:8f:e8:68:
         65:58:a2:1f:e5:4f:59:0c:4d:15:10:73:4a:b7:34:b8:be:f0:
         c9:20:15:38:65:aa:47:d5:cd:d8:66:79:5d:5b:1a:9a:2a:41:
         8a:4f:e7:79:da:13:0b:73:82:4d:83:e8:2a:54:d2:5a:40:22:
         7c:90:f1:1b:3e:74:43:5a:0e:86:e5:53:f7:bd:38:48:c9:02:
         0f:0c:d1:d8:ab:3c:cd:08:03:85:ce:63:2f:0f:1d:40:6c:06:
         e5:07:c5:39:7e:12:f2:79:3a:ae:67:69:d4:e4:ff:c0:c9:86:
         cb:dc:2f:89:51:d8:17:ca:3c:01:53:c4:17:16:96:4e:f9:b3:
         12:db:33:17:59:fb:06:b2:82:1d:dc:48:34:41:2c:dd:75:57:
         f5:dd:6a:29:68:16:eb:20:69:fe:66:e7:1e:8b:c3:6c:32:6b:
         ff:64:da:ce:e5:34:5f:29:9c:28:71:59:fe:88:ca:19:f0:5c:
         86:4f:81:13:da:ac:70:a6:6a:31:3b:65:d6:f9:57:a3:f2:f9:
         62:a7:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:53 2025 by rpki-client