Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138342e302f32312d3231203d3e203238353837.roa
File:                     3137372e3132382e3138342e302f32312d3231203d3e203238353837.roa (raw, json)
Hash identifier:          mGu8lGBOjXP+jf5sfEBCXXjgECkgDtJsQJMed0eGddU=
Subject key identifier:   B8:20:9B:73:5A:38:D0:E6:5C:CD:86:00:9E:36:98:5C:31:5F:78:60
Certificate issuer:       /CN=530C2AEF233AD6684B2C4E700A73F6827E2848F6
Certificate serial:       1E430C84B7C1DDE4C4041727E2279DB1D875403B
Authority key identifier: 53:0C:2A:EF:23:3A:D6:68:4B:2C:4E:70:0A:73:F6:82:7E:28:48:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530C2AEF233AD6684B2C4E700A73F6827E2848F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138342e302f32312d3231203d3e203238353837.roa
Signing time:             Tue 02 Sep 2025 21:03:46 +0000
ROA not before:           Tue 02 Sep 2025 20:58:46 +0000
ROA not after:            Tue 01 Sep 2026 21:03:46 +0000
asID:                     28587
IP address blocks:        177.128.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/530C2AEF233AD6684B2C4E700A73F6827E2848F6.crl
                          rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/530C2AEF233AD6684B2C4E700A73F6827E2848F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530C2AEF233AD6684B2C4E700A73F6827E2848F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 11:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:43:0c:84:b7:c1:dd:e4:c4:04:17:27:e2:27:9d:b1:d8:75:40:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530C2AEF233AD6684B2C4E700A73F6827E2848F6
        Validity
            Not Before: Sep  2 20:58:46 2025 GMT
            Not After : Sep  1 21:03:46 2026 GMT
        Subject: CN=B8209B735A38D0E65CCD86009E36985C315F7860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:86:a2:00:9d:7a:21:80:43:1a:57:bc:f9:
                    84:b8:99:46:30:40:68:19:1f:e5:eb:14:1e:3c:4e:
                    23:b9:5e:98:0c:98:bd:f4:bf:98:c8:be:0c:70:ea:
                    2e:be:54:de:4c:91:80:75:7f:ec:5b:fd:a3:ab:c8:
                    2c:22:86:be:fc:d6:0a:71:8b:8f:f6:b8:69:18:f6:
                    c4:ad:b2:ac:f7:94:6b:1d:58:03:f8:78:ce:1f:c7:
                    8a:9e:07:19:3f:34:28:2e:a7:1e:74:84:c8:57:1e:
                    f5:c9:79:51:79:1c:20:5b:bb:4e:bf:8d:97:45:c0:
                    b4:de:16:9b:39:a2:e7:80:9b:ba:b1:b7:b5:66:ba:
                    02:44:08:05:7b:23:fd:12:34:64:44:36:63:c1:fa:
                    a8:e0:af:ff:6d:28:34:f9:02:d7:eb:75:41:76:04:
                    46:6a:bd:7c:bb:03:a1:79:03:19:53:6c:c5:73:5f:
                    3b:69:42:9a:bf:a6:c7:83:94:25:35:8b:bd:08:d7:
                    d0:05:2f:54:94:e3:97:cd:c0:f8:22:fa:74:ac:84:
                    fe:10:c1:4e:18:d9:fb:c7:a8:2f:02:23:a6:0b:83:
                    03:c2:10:89:29:b8:61:20:72:6c:06:66:06:2e:63:
                    04:2a:52:cb:66:64:b0:ab:46:e9:62:dc:b0:5a:41:
                    c8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:20:9B:73:5A:38:D0:E6:5C:CD:86:00:9E:36:98:5C:31:5F:78:60
            X509v3 Authority Key Identifier:
                keyid:53:0C:2A:EF:23:3A:D6:68:4B:2C:4E:70:0A:73:F6:82:7E:28:48:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/530C2AEF233AD6684B2C4E700A73F6827E2848F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530C2AEF233AD6684B2C4E700A73F6827E2848F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138342e302f32312d3231203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:2e:61:a0:18:50:42:9c:92:60:22:4f:94:2f:61:14:91:30:
         c0:1b:32:50:80:2c:6f:e2:9a:95:f3:a2:65:f3:5f:9f:f0:18:
         70:21:52:9b:3f:98:32:29:9d:d9:04:99:23:04:93:a1:00:35:
         83:0f:15:66:4f:f2:b2:31:d0:c6:cd:22:d2:cb:e6:46:ac:3e:
         45:38:5c:86:ae:81:86:9f:18:5c:cc:af:23:79:f6:1c:c1:de:
         62:47:b7:18:07:83:6e:59:40:95:4c:70:b1:c2:be:27:c9:88:
         f8:0a:38:a0:9a:d3:d6:7c:4d:fe:47:cb:b8:72:51:5b:3f:5b:
         2a:9a:5b:83:42:59:87:c0:b4:c2:bd:c1:fc:dd:88:93:7f:16:
         e2:a3:05:16:48:a5:46:ce:49:61:5f:f9:1d:5f:c0:d7:75:99:
         d6:9c:6d:7a:7c:71:eb:1a:32:82:ae:81:85:c2:ca:40:a6:cc:
         29:f8:98:21:a1:72:53:91:54:c5:3a:42:6c:bf:e9:83:9b:d4:
         02:de:76:9c:46:4e:ef:2e:47:91:a5:81:cf:03:f4:ec:b1:3e:
         74:ed:9e:65:7d:2f:54:64:d6:99:5e:06:bd:41:54:70:df:37:
         2c:7d:c0:79:46:a9:4c:96:f6:4e:51:7f:9d:d2:1b:72:a6:ac:
         57:eb:df:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:41:40 2025 by rpki-client