Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138382e302f32322d3232203d3e203238353837.roa
File:                     3137372e3132382e3138382e302f32322d3232203d3e203238353837.roa (raw, json)
Hash identifier:          Ci++5LAdKBVGAJH9Sm25wVJ1rEJPbe549A+9OjusliA=
Subject key identifier:   03:E4:A1:49:FD:77:27:10:68:F5:DB:E1:DD:CF:EA:70:67:15:7A:9A
Certificate issuer:       /CN=530C2AEF233AD6684B2C4E700A73F6827E2848F6
Certificate serial:       4BA2DC1C26F3CAFF0D6382BBC5AECD8D8C3A7678
Authority key identifier: 53:0C:2A:EF:23:3A:D6:68:4B:2C:4E:70:0A:73:F6:82:7E:28:48:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530C2AEF233AD6684B2C4E700A73F6827E2848F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138382e302f32322d3232203d3e203238353837.roa
Signing time:             Tue 02 Sep 2025 21:03:58 +0000
ROA not before:           Tue 02 Sep 2025 20:58:58 +0000
ROA not after:            Tue 01 Sep 2026 21:03:58 +0000
asID:                     28587
IP address blocks:        177.128.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/530C2AEF233AD6684B2C4E700A73F6827E2848F6.crl
                          rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/530C2AEF233AD6684B2C4E700A73F6827E2848F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530C2AEF233AD6684B2C4E700A73F6827E2848F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 11:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a2:dc:1c:26:f3:ca:ff:0d:63:82:bb:c5:ae:cd:8d:8c:3a:76:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530C2AEF233AD6684B2C4E700A73F6827E2848F6
        Validity
            Not Before: Sep  2 20:58:58 2025 GMT
            Not After : Sep  1 21:03:58 2026 GMT
        Subject: CN=03E4A149FD77271068F5DBE1DDCFEA7067157A9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2f:e8:19:2b:1d:49:65:4c:93:d7:5e:02:58:
                    36:88:f7:e5:58:86:3b:48:fd:e6:ee:32:d7:c8:51:
                    42:74:1e:eb:a1:34:be:90:e2:89:1d:d5:8e:27:0e:
                    26:96:40:4f:05:b1:ed:ec:ea:de:8b:52:ee:17:f0:
                    c9:96:e8:a8:b3:01:07:8b:61:0f:ab:5d:39:bf:d6:
                    b7:69:b9:f3:51:40:ee:c8:6b:9b:a9:0c:dd:1d:df:
                    ad:81:76:cb:ef:1c:db:b4:65:66:c3:7a:f6:83:48:
                    b0:47:a8:7d:8f:d3:72:27:49:cb:4a:61:16:aa:23:
                    9d:ee:8c:de:aa:6c:42:14:bd:66:c3:d0:a2:22:26:
                    2d:a2:e5:8a:39:62:99:38:ba:7c:f6:03:48:43:7a:
                    93:c6:2c:79:21:f8:d8:9c:74:c9:84:a8:93:83:c6:
                    ce:b8:98:9b:69:70:ff:08:b2:d4:cc:6e:f3:31:71:
                    9f:61:16:ac:23:78:34:c6:dd:0a:e3:e6:32:cd:b9:
                    c9:c8:9d:11:2e:c1:9c:21:f3:bf:33:fc:3e:f4:98:
                    12:9a:98:00:15:9f:df:7e:4c:ca:ab:53:b2:5f:8a:
                    e4:70:f4:a0:2c:e8:84:60:d8:f6:5f:91:0e:a4:53:
                    54:8e:d7:5d:a6:8f:62:aa:5f:fd:b5:fe:d8:cc:b4:
                    6a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E4:A1:49:FD:77:27:10:68:F5:DB:E1:DD:CF:EA:70:67:15:7A:9A
            X509v3 Authority Key Identifier:
                keyid:53:0C:2A:EF:23:3A:D6:68:4B:2C:4E:70:0A:73:F6:82:7E:28:48:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/530C2AEF233AD6684B2C4E700A73F6827E2848F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/530C2AEF233AD6684B2C4E700A73F6827E2848F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138382e302f32322d3232203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:20:81:da:0b:7c:e1:37:69:12:62:e9:27:2f:f8:32:b3:69:
         1a:da:8b:b4:6b:03:2c:b6:25:ba:b0:1b:f2:61:f5:e1:69:5b:
         76:12:1d:74:8e:21:ae:de:43:32:0d:58:91:71:2f:28:01:cb:
         48:d1:a5:72:af:67:09:7d:07:8b:1a:c5:2e:58:c6:0c:3a:75:
         19:24:a9:10:4b:52:c8:b1:c4:b6:7e:2d:e6:86:c8:ed:0f:85:
         a2:9f:1a:3c:ed:4a:01:f4:4b:2a:17:17:32:f9:13:45:e7:23:
         a5:ac:0a:c2:8d:f7:20:e6:09:1d:d1:99:76:dd:2d:b9:3e:10:
         a9:02:ac:a2:a7:ae:9c:e0:91:05:8c:fd:cd:07:ca:3d:2e:67:
         ed:a9:7d:f1:a4:66:09:b0:61:3c:56:31:fb:f7:bb:a3:cc:b0:
         0f:8b:ff:b8:a0:4d:d6:40:dd:f5:58:c7:b9:77:5d:a3:c2:19:
         c5:e4:e1:ed:b8:f9:a2:cb:aa:68:74:30:f7:a2:87:7b:93:15:
         f0:d8:8b:1a:7b:2f:bb:8c:73:4e:f4:10:e3:8d:e1:26:aa:fd:
         0a:b1:26:87:1e:fd:c6:12:50:59:cb:9a:a2:db:20:a2:c6:56:
         a3:49:a1:8e:08:48:04:6f:25:31:6b:2e:f0:d8:82:fc:2f:d0:
         ab:3d:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:48:25 2025 by rpki-client