Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32372e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32372e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          hdBAbz2/iW8AJaqvM1uAa0RdSu/TYiplxTGDm4U+kME=
Subject key identifier:   24:B4:45:DB:3E:7D:61:F6:8A:7D:50:86:5F:EE:03:2F:BD:65:5A:A4
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       0202925898BDC7EB13B082CFFF7A4E9DBB6F08BE
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32372e302f32342d3234203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:36:13 +0000
ROA not before:           Fri 22 Aug 2025 21:31:13 +0000
ROA not after:            Fri 21 Aug 2026 21:36:13 +0000
asID:                     52706
IP address blocks:        177.126.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:02:92:58:98:bd:c7:eb:13:b0:82:cf:ff:7a:4e:9d:bb:6f:08:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:31:13 2025 GMT
            Not After : Aug 21 21:36:13 2026 GMT
        Subject: CN=24B445DB3E7D61F68A7D50865FEE032FBD655AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fa:c8:a1:01:75:bc:4b:2f:d1:22:91:88:f9:
                    90:db:f1:78:72:20:19:70:a1:83:67:38:f1:ed:93:
                    b7:7e:78:51:8f:8a:39:21:bf:a1:ec:61:26:cc:9b:
                    35:f0:ac:d5:6d:3e:c5:0d:9b:66:ee:39:8f:67:bb:
                    14:7d:58:0a:ed:33:d7:c7:6e:e3:6f:fd:c6:24:55:
                    8f:33:f1:b3:8f:1b:6b:3f:ce:3c:60:f7:89:c4:4a:
                    3d:01:30:8c:de:89:48:89:d8:ba:66:8c:3d:7c:27:
                    9e:fd:b8:ed:3a:ea:1b:b2:48:70:17:17:fb:af:96:
                    c7:53:18:2f:22:45:2a:58:f0:8d:ee:e1:5d:78:b3:
                    56:6a:bd:20:0e:48:83:22:9a:16:16:a5:f4:7c:bb:
                    a2:04:f3:3f:9a:0d:53:cc:7e:e3:19:3b:a3:99:92:
                    18:24:ab:9d:ff:89:1b:b8:1b:23:44:1e:2e:3c:6f:
                    91:60:66:26:dd:83:de:9a:2a:65:9a:27:78:86:24:
                    6a:b2:3c:c7:36:d5:f4:ae:fc:d5:f8:a1:78:ac:b0:
                    38:9b:6c:f9:04:71:5b:49:4b:36:83:72:b1:05:6f:
                    cf:a9:45:ef:0c:2a:6a:50:1f:2a:dd:e7:2c:c0:8d:
                    f3:8e:8c:5c:fd:04:d9:cb:09:56:f5:46:37:b9:84:
                    60:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B4:45:DB:3E:7D:61:F6:8A:7D:50:86:5F:EE:03:2F:BD:65:5A:A4
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32372e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:6d:ff:5b:f2:c3:38:58:4a:5c:c1:64:50:3a:a4:bd:06:a1:
         a1:4d:a3:f9:fb:e9:8f:0f:2a:32:2f:64:0d:df:a7:34:c9:34:
         d8:c4:7b:ff:e5:08:2e:d5:4d:c4:a9:20:99:8c:97:a1:00:e0:
         2b:17:c4:35:75:39:f5:b6:ab:23:58:04:88:9f:dc:7f:d9:c1:
         af:5f:c4:4c:42:6e:e5:0e:cf:f6:a0:91:1a:d0:fc:93:ad:9f:
         9b:f1:18:2d:fe:76:7e:ce:88:ee:9c:d2:1e:06:b3:03:fb:c7:
         4f:9c:fe:3e:bb:e2:78:b7:17:c8:b4:5a:0e:a2:0b:7a:96:d2:
         b8:c8:69:84:36:dc:b2:70:4b:4d:ea:3f:67:49:c5:fb:47:9f:
         94:4f:51:de:73:91:6a:90:d6:39:3d:66:2a:31:c9:5f:95:9d:
         82:34:df:9e:25:a1:3d:84:ac:d9:14:3d:6e:e3:39:dd:d5:b6:
         c5:8c:40:39:94:55:79:5e:c2:4c:4a:df:9a:d6:df:0d:84:85:
         3b:40:83:97:7f:15:f0:d3:76:2e:7b:c9:71:bf:8b:8b:bb:c2:
         b6:8f:d8:62:fd:6e:57:3f:11:98:1d:84:0e:16:23:9e:92:6c:
         9f:4b:e2:fd:c7:e0:b6:ad:53:47:17:d6:1c:7d:3f:fe:9d:91:
         54:83:7a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:53:03 2025 by rpki-client