Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32392e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32392e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          PPAlpKSnDN/WC13YjWGK+2HS3RYk+m4tDXgGdIvfAk4=
Subject key identifier:   20:B4:8A:79:B8:58:BE:E4:47:D5:A8:F1:84:54:D7:4F:8C:47:52:E3
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       0A3ED4CF011CBEBF8708EE884975A0ABF12A4D30
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32392e302f32342d3234203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:36:40 +0000
ROA not before:           Fri 22 Aug 2025 21:31:40 +0000
ROA not after:            Fri 21 Aug 2026 21:36:40 +0000
asID:                     52706
IP address blocks:        177.126.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3e:d4:cf:01:1c:be:bf:87:08:ee:88:49:75:a0:ab:f1:2a:4d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:31:40 2025 GMT
            Not After : Aug 21 21:36:40 2026 GMT
        Subject: CN=20B48A79B858BEE447D5A8F18454D74F8C4752E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c4:d6:c8:2c:71:c0:dc:f1:21:bb:52:06:41:
                    a0:09:84:68:1b:94:ca:53:8f:86:a0:60:5a:75:bd:
                    1b:18:1f:c0:e8:3e:5f:4d:20:67:8e:a1:38:33:a0:
                    e4:41:6d:53:18:65:45:59:09:77:bd:8a:fd:e2:67:
                    da:62:80:4f:f4:dd:b5:44:37:11:fb:cb:cf:64:8c:
                    f5:4d:17:0d:61:4e:c2:87:a9:03:32:1d:14:4f:bf:
                    70:bd:5b:bf:25:06:e1:61:61:7d:2a:06:c7:4e:fb:
                    5b:ea:41:62:d9:03:90:5a:3e:71:4f:cb:93:e2:0a:
                    15:bf:b3:10:93:cb:8d:62:bf:0e:02:e7:ec:1e:14:
                    30:fc:50:5c:7c:5e:14:f0:e1:9e:f2:ff:76:13:90:
                    aa:bc:3e:e8:a2:77:43:58:6a:91:69:00:7f:1c:e9:
                    58:48:6a:1d:f4:12:11:85:e6:2a:4c:5d:94:e9:32:
                    af:7b:e6:2a:43:58:5e:d3:a3:45:4d:ed:3c:86:93:
                    6f:7c:a4:d9:1f:f1:95:19:aa:5d:e2:1d:7c:c7:05:
                    d8:22:0c:89:26:60:ba:ee:44:fd:eb:bd:59:f3:0c:
                    4c:38:36:e7:6d:56:5a:58:62:5c:56:4c:a7:e3:0f:
                    96:87:65:ec:79:51:bb:30:08:67:2e:26:a5:05:1f:
                    bd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B4:8A:79:B8:58:BE:E4:47:D5:A8:F1:84:54:D7:4F:8C:47:52:E3
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32392e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:42:b8:8b:85:99:07:5d:35:31:67:1d:cb:a7:74:bd:80:e1:
         b8:4a:4a:fc:10:ce:04:cb:11:78:bf:49:94:fc:ab:ea:ac:5b:
         61:69:e8:c0:bf:a3:27:6c:31:11:d1:45:31:9d:e2:58:a5:c3:
         70:8f:63:ed:eb:b0:a1:31:a4:5c:35:e9:04:42:21:e6:19:a3:
         a6:54:31:7e:88:74:46:fe:c7:f8:36:56:ad:09:62:5b:0f:05:
         0b:51:df:50:03:5b:58:45:73:de:8c:0a:d8:1a:80:7f:c5:55:
         91:db:a8:16:2c:70:e0:6a:81:b2:68:69:f3:10:39:f1:5e:47:
         50:35:fb:71:e7:56:cf:7d:28:78:eb:46:4d:00:c1:3e:66:ae:
         70:e6:18:be:bf:b5:36:13:26:11:31:de:5a:1b:d9:65:c3:d0:
         d9:a6:e2:ce:8e:a7:aa:c7:45:54:58:a3:45:e1:13:fe:58:46:
         bd:5a:c5:7a:f5:92:3f:34:84:8a:ca:71:96:12:32:93:46:e2:
         07:01:fd:c6:9d:09:f6:12:05:1d:77:b8:c0:b5:46:19:b8:08:
         34:bf:7c:b5:3b:49:45:3a:30:47:b4:a1:a6:a1:00:2c:4e:a7:
         86:c0:93:0a:ab:25:f4:c6:e1:48:80:4a:20:64:50:62:80:a0:
         d7:ca:88:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:08:18 2025 by rpki-client