Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138342e302f32322d3232203d3e203238353837.roa
File:                     3137372e3132382e3138342e302f32322d3232203d3e203238353837.roa (raw, json)
Hash identifier:          4gQSdYfFxTjDHuS7Evwdxb06hHwdOXBawcFlY57Z7sk=
Subject key identifier:   83:F3:2A:81:88:3C:63:5F:FC:03:17:5D:69:9C:F2:E0:99:35:6F:20
Certificate issuer:       /CN=530C2AEF233AD6684B2C4E700A73F6827E2848F6
Certificate serial:       1FE5025099105FA680A6A3E4A90800CD839F3946
Authority key identifier: 53:0C:2A:EF:23:3A:D6:68:4B:2C:4E:70:0A:73:F6:82:7E:28:48:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530C2AEF233AD6684B2C4E700A73F6827E2848F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138342e302f32322d3232203d3e203238353837.roa
Signing time:             Tue 02 Sep 2025 21:03:54 +0000
ROA not before:           Tue 02 Sep 2025 20:58:54 +0000
ROA not after:            Tue 01 Sep 2026 21:03:54 +0000
asID:                     28587
IP address blocks:        177.128.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/530C2AEF233AD6684B2C4E700A73F6827E2848F6.crl
                          rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/530C2AEF233AD6684B2C4E700A73F6827E2848F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530C2AEF233AD6684B2C4E700A73F6827E2848F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 11:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e5:02:50:99:10:5f:a6:80:a6:a3:e4:a9:08:00:cd:83:9f:39:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530C2AEF233AD6684B2C4E700A73F6827E2848F6
        Validity
            Not Before: Sep  2 20:58:54 2025 GMT
            Not After : Sep  1 21:03:54 2026 GMT
        Subject: CN=83F32A81883C635FFC03175D699CF2E099356F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:e2:41:5c:da:3d:53:04:ea:65:97:c3:8a:
                    b9:2c:f4:f7:1b:af:f2:aa:97:f2:2f:ec:d5:17:03:
                    ad:51:83:5c:d8:8f:23:33:5f:5e:07:de:d8:04:42:
                    1b:69:8c:41:6b:9d:03:16:85:49:52:77:fc:6e:ad:
                    8f:6a:ad:ff:e3:10:1f:5e:c1:89:ca:24:df:91:8c:
                    f6:f7:2d:13:2f:93:f2:22:2b:5d:a9:4a:18:cd:05:
                    4b:e3:da:d8:90:0e:df:a4:73:1e:5d:31:93:63:68:
                    82:d5:96:52:e1:51:15:c5:b6:95:6a:52:b2:e6:d3:
                    f1:b3:3f:8b:82:f0:4e:7e:9c:cb:8c:0b:39:53:77:
                    17:1c:d6:6c:f7:86:43:17:40:22:e0:9e:04:98:39:
                    08:63:77:af:b8:8a:7f:10:1b:78:f8:2a:da:e6:89:
                    00:72:a7:c0:b6:4e:00:7b:5c:1e:01:e0:47:08:db:
                    fc:43:2d:2e:b5:71:2a:bb:8a:25:c9:78:53:98:bc:
                    4f:66:6b:0e:fa:29:26:c3:50:f0:28:8f:99:da:da:
                    41:dc:3e:98:f1:e1:07:20:ce:60:1f:d1:92:d6:a7:
                    0f:48:88:fd:04:a3:d1:c1:95:69:f5:07:c5:73:bf:
                    64:09:b7:b7:9f:53:9a:65:1a:59:15:59:cb:c6:6c:
                    91:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F3:2A:81:88:3C:63:5F:FC:03:17:5D:69:9C:F2:E0:99:35:6F:20
            X509v3 Authority Key Identifier:
                keyid:53:0C:2A:EF:23:3A:D6:68:4B:2C:4E:70:0A:73:F6:82:7E:28:48:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/530C2AEF233AD6684B2C4E700A73F6827E2848F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530C2AEF233AD6684B2C4E700A73F6827E2848F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138342e302f32322d3232203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:e7:e2:4a:9d:a1:bb:4f:a3:1b:c5:6e:2f:a0:15:a4:e3:30:
         12:f5:f9:90:43:f6:93:1b:29:8c:a0:66:81:32:fe:e4:ce:b8:
         89:cd:2a:58:23:e6:57:c4:1b:85:64:52:eb:a4:6f:a1:34:a1:
         c1:93:ec:ab:d2:51:45:ba:4a:eb:1b:f9:ef:eb:e5:3f:17:a4:
         62:75:25:ae:04:8d:9e:ed:b2:e2:b3:88:1d:a5:23:59:01:d0:
         49:d8:7d:1c:5b:49:92:98:19:dc:f0:0e:42:86:7d:96:b5:f6:
         a7:a4:46:e9:87:aa:e3:56:9e:68:24:9c:08:10:05:2d:1b:02:
         00:ae:02:fb:f8:13:6b:04:67:34:16:e6:ad:f6:50:18:0b:2d:
         22:c2:0f:f6:54:88:8f:29:47:bb:81:dc:dc:4d:9c:b5:df:11:
         ae:fb:ae:e7:fa:04:68:92:54:70:11:cb:e6:7a:96:aa:78:9c:
         48:b9:35:b6:7d:ed:22:ee:d5:8c:6c:f3:97:ac:d1:e6:ed:8e:
         ed:43:53:cb:89:24:0f:21:7b:35:6c:79:e2:84:0e:b6:59:35:
         e8:2b:01:11:3b:63:af:13:62:af:f7:05:22:48:5e:83:03:99:
         2f:40:92:21:2d:f6:8f:a8:6a:40:33:da:09:7c:bd:62:fb:d5:
         77:57:1e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:31:13 2025 by rpki-client