Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32332e302f32342d3234203d3e20323636313239.roa
File:                     3137372e33362e32332e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier:          WQyzyVr9T8nU6DTwCcYSYBy8PKxayM2AyVoRNInY1vw=
Subject key identifier:   26:29:68:A6:0A:24:11:D2:6E:6B:1A:B8:09:17:F3:FE:B1:A7:2F:99
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       3E2D70F535360A8EE56197538BE8CD7F3DD90AAA
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32332e302f32342d3234203d3e20323636313239.roa
Signing time:             Tue 21 Oct 2025 17:17:47 +0000
ROA not before:           Tue 21 Oct 2025 17:12:47 +0000
ROA not after:            Tue 20 Oct 2026 17:17:47 +0000
asID:                     266129
IP address blocks:        177.36.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 10:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2d:70:f5:35:36:0a:8e:e5:61:97:53:8b:e8:cd:7f:3d:d9:0a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Oct 21 17:12:47 2025 GMT
            Not After : Oct 20 17:17:47 2026 GMT
        Subject: CN=262968A60A2411D26E6B1AB80917F3FEB1A72F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:43:93:fa:c9:e3:ca:aa:d3:6f:f3:1a:2d:
                    2d:f2:68:f7:01:5c:7f:8b:33:01:7d:a5:aa:b2:c7:
                    25:4e:50:0e:42:2f:6d:b6:60:d2:00:af:74:0f:25:
                    e5:1b:1d:46:b1:25:5e:a0:94:49:ae:17:7a:e1:34:
                    98:17:58:92:57:59:f7:50:df:6e:e2:76:28:bd:81:
                    3a:d1:a0:4a:71:ed:56:f7:f0:2b:a7:f3:a1:a7:bc:
                    c3:0b:a2:74:66:8b:b2:70:da:fa:02:6b:69:54:3e:
                    b2:0b:6d:e4:12:e2:24:6e:04:81:d5:5a:80:1e:b4:
                    45:f6:24:e7:2b:9e:1a:fb:7f:6e:15:ba:8d:53:55:
                    8a:bc:48:ba:68:72:b9:41:a6:56:84:4e:33:b8:1c:
                    01:18:00:6d:73:d9:9c:67:3a:bf:59:32:3f:d7:a3:
                    be:79:2b:9d:e1:9f:1d:8e:56:9d:0a:14:37:b2:7f:
                    ca:7c:1b:e4:8e:de:89:e4:2a:f5:a7:a7:87:32:5c:
                    bc:da:de:19:12:ca:80:13:32:62:59:ec:fc:39:44:
                    fe:9f:cc:ae:e6:f7:25:9f:d3:d2:df:48:81:17:ec:
                    8d:93:55:c7:fb:23:66:43:01:e4:05:50:ac:2d:51:
                    72:c2:f5:63:85:d2:6b:67:c1:f9:fa:65:f9:ea:35:
                    4a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:29:68:A6:0A:24:11:D2:6E:6B:1A:B8:09:17:F3:FE:B1:A7:2F:99
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/3137372e33362e32332e302f32342d3234203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:f5:73:a0:b1:45:09:73:6f:cf:8d:8a:3c:00:43:35:dc:36:
         39:89:d3:59:97:fd:5f:55:0b:41:21:ba:3d:37:68:cf:7d:ee:
         53:e8:ed:35:6c:8b:f2:32:ab:e2:b2:3e:75:04:c7:ff:ec:96:
         44:07:eb:d3:3a:a9:69:be:93:64:bf:4d:9b:a2:96:47:07:d6:
         ae:7a:a1:f0:e8:c4:07:a2:94:51:c1:81:d3:be:62:fc:53:be:
         ab:c3:d9:4a:31:8c:92:e0:15:df:f1:6a:4e:61:65:ab:50:9b:
         cf:3a:36:c8:d4:c8:aa:3c:b5:e2:7e:9d:57:e8:ff:50:51:72:
         7f:14:68:cd:28:04:79:9b:39:72:18:0f:84:bd:56:38:e6:f7:
         02:1f:86:01:6b:03:c0:e6:9e:a4:5a:91:7e:a1:51:df:30:de:
         32:42:32:73:d9:b6:28:55:5b:d1:2c:d0:53:44:56:b9:c1:82:
         b1:10:94:f0:58:55:93:b5:5a:d5:b0:73:6b:9c:85:6a:df:24:
         85:e0:2f:5f:fe:f2:59:c3:98:34:42:97:49:41:13:9c:e3:cb:
         f6:23:1d:d9:55:c7:6e:db:ce:25:65:26:2e:4c:79:11:2c:03:
         17:a1:bb:d1:c9:ba:04:c3:d7:e7:83:40:76:88:77:47:1a:d8:
         81:86:02:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:55 2025 by rpki-client