Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3139322e302f31392d3139203d3e203238363135.roa
File:                     3137372e3133312e3139322e302f31392d3139203d3e203238363135.roa (raw, json)
Hash identifier:          uZvkll1J4EDAiLFDluBBL+p/51RLZz1ZbeS8D5EeW9Y=
Subject key identifier:   95:77:EE:A1:87:99:E5:A1:3D:C8:BB:E8:0B:AA:B8:A1:62:45:A7:03
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       638F37C79A5FAD5E87978B53BC0648093884F249
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3139322e302f31392d3139203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:48:53 +0000
ROA not before:           Thu 30 Oct 2025 02:43:53 +0000
ROA not after:            Thu 29 Oct 2026 02:48:53 +0000
asID:                     28615
IP address blocks:        177.131.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8f:37:c7:9a:5f:ad:5e:87:97:8b:53:bc:06:48:09:38:84:f2:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:43:53 2025 GMT
            Not After : Oct 29 02:48:53 2026 GMT
        Subject: CN=9577EEA18799E5A13DC8BBE80BAAB8A16245A703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:c1:c9:b7:47:6b:9b:45:59:bd:9a:a6:aa:
                    0b:f0:be:e9:d6:fd:f4:c0:b6:3a:9f:7e:25:1c:62:
                    36:62:96:89:cd:87:71:4c:b9:ef:11:0b:1c:d1:e9:
                    9d:0b:a0:80:81:8a:48:c1:be:96:3e:85:cc:5b:31:
                    fe:11:82:70:ab:d2:43:7b:ce:7f:c2:0a:71:ea:a9:
                    70:ba:5b:14:08:10:35:c8:69:8e:7f:b2:2b:53:3a:
                    da:03:47:88:29:4a:2d:dc:c5:b0:a1:ab:d2:10:12:
                    53:1c:4f:63:7c:d1:97:2f:d4:62:b9:a6:10:cb:0e:
                    99:ef:c9:9d:52:8d:6d:a0:a1:bd:7a:ae:30:e2:36:
                    0a:c1:05:69:17:e7:4e:41:53:7f:88:f3:3e:52:a3:
                    3b:02:e9:23:5d:6f:4e:09:7c:bc:36:74:63:cd:bb:
                    ea:0c:ec:bd:62:d1:bf:fa:d5:2f:9f:a4:b6:fb:f7:
                    30:db:d0:7a:25:7a:44:60:c3:75:ac:59:82:9f:ad:
                    36:4f:d4:08:eb:1d:03:e2:a2:8d:b6:38:b7:d5:e5:
                    6b:5c:80:e6:c8:c7:fb:85:0f:54:6f:47:b2:b5:a3:
                    3a:ad:94:b9:33:d3:e8:34:60:b6:41:e9:12:70:59:
                    29:40:2f:d9:d3:f1:7f:ee:1c:62:22:53:9d:3e:8b:
                    59:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:77:EE:A1:87:99:E5:A1:3D:C8:BB:E8:0B:AA:B8:A1:62:45:A7:03
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3139322e302f31392d3139203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:0b:3f:9b:73:ed:f1:40:07:60:60:63:f9:39:71:4d:4b:5d:
         d2:07:92:35:41:20:c8:de:a8:e1:78:3f:f4:38:ed:97:a4:dc:
         d0:8a:1d:fc:b4:99:a6:47:97:2b:84:46:cd:69:eb:d3:d9:78:
         d1:3a:60:40:22:03:f4:48:be:1b:cf:9f:93:38:9b:37:54:85:
         ff:1d:67:50:ff:04:a5:a0:e2:cf:cd:45:44:64:49:ab:dc:63:
         7d:e7:e9:25:87:04:a2:41:9c:67:dc:19:02:3e:b8:18:02:98:
         8d:59:d8:ac:5a:aa:ae:22:0d:fe:84:8a:2b:e7:99:23:63:9c:
         0b:2f:23:7a:ba:65:88:70:37:8a:bd:a6:28:17:90:ac:0a:ba:
         56:f2:5a:28:4d:31:8a:06:50:92:e9:f3:84:16:5a:1f:15:97:
         39:38:d1:64:b4:c4:c9:93:5b:92:58:fd:87:a8:26:b2:6d:a0:
         6d:da:ca:28:70:03:61:53:1c:f4:b7:4f:26:3d:2b:8a:7a:42:
         8d:1f:57:44:08:be:ca:5c:e1:2c:d1:7c:af:38:21:25:09:b6:
         4d:2c:e1:2a:58:1b:e0:de:45:d2:9b:af:5f:1a:ff:9f:e3:d1:
         83:7c:6b:b2:69:d6:42:8f:27:a0:15:5f:40:4f:c1:fa:00:4c:
         c3:a0:9b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:02:14 2025 by rpki-client