Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32302e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e32302e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          ODrAMZB9ksLxVHj/ugGaVoD3pGelTwG3zQEoR+eTq9I=
Subject key identifier:   93:CD:E1:6B:DF:27:EA:B0:88:02:B4:08:4E:82:B3:63:B6:78:9C:A2
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       3E23E433D7FD044F3CF9813B024DB01AA8A36ABF
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32302e302f32332d3233203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 18:18:16 +0000
ROA not before:           Fri 22 Aug 2025 18:13:16 +0000
ROA not after:            Fri 21 Aug 2026 18:18:16 +0000
asID:                     52706
IP address blocks:        177.126.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:23:e4:33:d7:fd:04:4f:3c:f9:81:3b:02:4d:b0:1a:a8:a3:6a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 18:13:16 2025 GMT
            Not After : Aug 21 18:18:16 2026 GMT
        Subject: CN=93CDE16BDF27EAB08802B4084E82B363B6789CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:84:c5:b6:3d:ce:09:27:e1:0f:39:14:7e:0b:
                    bd:7c:0c:7f:50:6b:0c:1b:22:4b:dc:55:27:7f:76:
                    74:21:27:6e:8c:26:1f:78:1e:24:08:92:aa:82:82:
                    60:a5:9c:07:db:d2:8a:32:02:43:56:8d:49:aa:20:
                    71:38:52:ca:be:33:8f:ee:26:d7:f4:05:f9:79:3a:
                    8f:90:97:8b:c9:bd:14:39:34:95:db:80:dc:b7:fa:
                    c8:20:4d:80:a6:0d:d7:ae:0d:36:aa:6a:29:c8:b4:
                    84:dd:56:d8:cf:fa:57:19:be:d3:df:e4:cc:2e:f5:
                    e6:64:aa:28:28:48:92:b1:1f:68:0f:a1:7f:5e:1f:
                    1b:b1:3b:cd:db:57:71:d4:6b:11:3e:4c:14:76:96:
                    83:e5:e9:28:34:d7:2f:9a:0d:a9:15:16:96:b4:15:
                    17:af:1d:8f:fb:51:5c:39:61:f0:1c:0d:91:06:cb:
                    53:73:db:71:28:56:bc:16:c2:7c:f7:01:8d:13:35:
                    7a:60:c6:22:30:0b:f4:a6:63:41:ad:f4:40:52:84:
                    61:08:ed:47:e4:b9:6f:d4:a1:70:f8:aa:04:32:94:
                    3e:b0:2e:4c:b1:f7:45:95:b4:8d:9d:58:38:f5:02:
                    b0:7a:8a:5e:66:09:d9:2d:99:77:e8:cc:31:a2:d2:
                    b5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CD:E1:6B:DF:27:EA:B0:88:02:B4:08:4E:82:B3:63:B6:78:9C:A2
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32302e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:c2:09:23:05:e5:72:72:27:c3:8e:58:ac:15:3b:48:a1:6d:
         9a:5a:64:95:70:0f:de:7e:b5:de:9f:d4:83:f0:4e:8a:b8:57:
         70:94:9c:df:34:b8:87:44:c2:9f:48:6d:7f:f4:19:9f:e4:12:
         03:a9:fa:b0:8f:c0:8a:1d:64:72:23:de:0d:f0:20:f1:1e:96:
         7d:8b:de:a3:71:ec:7a:99:5e:fe:6b:8b:29:b9:c1:00:20:c0:
         1c:1f:f1:36:4b:88:d8:87:40:1d:e4:67:b9:9f:e7:1d:2d:2e:
         e5:c6:01:23:6a:d1:11:d3:99:9f:36:ba:f6:f3:a8:f2:b3:1c:
         2c:da:86:d8:18:b9:26:d9:c5:df:00:e8:e5:03:11:3e:13:ef:
         7d:2a:cd:7b:1d:ba:fc:77:ff:cd:74:0a:35:31:43:46:ce:a2:
         29:db:c6:6e:e3:32:0d:3a:1d:ac:e6:c1:9c:e6:c6:8d:db:e5:
         48:93:63:a7:69:ee:b1:85:af:29:2e:9c:8d:d0:ee:32:5a:d9:
         af:a1:9b:65:98:c8:41:c1:96:4a:81:e4:ab:dd:47:2d:f7:75:
         d6:22:1b:d6:7c:dd:26:4a:ff:4b:55:9d:91:14:0a:bd:b4:b2:
         e2:da:5b:4b:ae:b6:10:01:67:6b:4e:25:6c:89:af:c5:c2:9e:
         71:dc:d0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:04:55 2025 by rpki-client