Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3139342e302f32342d3234203d3e203238363135.roa
File:                     3137372e3133312e3139342e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          eFw9bIgxOcCIyw40Lhgs2dRM02kpTEzEAU0oASko75k=
Subject key identifier:   36:7B:F3:A7:E8:3B:C3:EF:17:E0:01:01:5B:D7:33:11:DC:4B:5F:A5
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       2F963CE9A45BEDDEE5F63A0F434645868A733314
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3139342e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:49:16 +0000
ROA not before:           Thu 30 Oct 2025 02:44:16 +0000
ROA not after:            Thu 29 Oct 2026 02:49:16 +0000
asID:                     28615
IP address blocks:        177.131.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:96:3c:e9:a4:5b:ed:de:e5:f6:3a:0f:43:46:45:86:8a:73:33:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:16 2025 GMT
            Not After : Oct 29 02:49:16 2026 GMT
        Subject: CN=367BF3A7E83BC3EF17E001015BD73311DC4B5FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:52:6b:59:76:bc:80:74:d1:b4:09:0e:2d:72:
                    35:65:eb:d9:ec:93:a3:43:e4:48:a4:f8:0a:4a:ab:
                    e7:be:b1:8b:03:9e:be:08:00:4b:1d:82:b6:01:1e:
                    48:f5:7b:5c:25:7f:d4:a9:44:cc:0c:91:41:63:98:
                    14:fd:ad:31:ea:b3:ac:2d:18:bd:8a:fc:ac:eb:a7:
                    17:ab:d6:ac:de:09:3d:cc:4c:62:b5:72:b7:83:21:
                    53:83:95:fc:7b:de:d0:cb:96:88:72:59:d1:b2:16:
                    6d:00:49:9c:a1:30:f4:90:cd:4d:ac:07:ca:c7:dc:
                    f8:24:f0:10:c2:24:59:ae:2f:3f:5e:aa:a1:ab:e7:
                    91:0c:1e:79:bb:fd:48:d2:ed:06:b3:0b:e4:ee:ca:
                    71:cd:52:47:6c:89:2f:6d:55:c0:4a:60:af:37:75:
                    a3:5a:77:1a:33:75:0b:4f:5a:d5:70:a2:25:67:d9:
                    25:d0:04:4f:17:c8:3d:61:80:4c:33:fe:5b:60:87:
                    96:20:e5:c8:eb:4c:f7:92:07:7a:03:0c:be:fc:a6:
                    17:c6:49:d5:da:27:09:ac:29:33:5c:ca:f6:5a:11:
                    9d:8e:ae:58:59:9c:bb:31:ae:b0:a6:98:a6:cb:8b:
                    9b:64:15:60:a2:0e:01:72:98:b2:d3:a2:f1:cc:30:
                    4e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7B:F3:A7:E8:3B:C3:EF:17:E0:01:01:5B:D7:33:11:DC:4B:5F:A5
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3139342e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:51:1e:ee:ff:7d:fa:5d:e5:61:04:23:82:08:a1:cd:42:70:
         b8:f9:df:c4:cc:0b:13:6a:2b:e2:4c:14:de:c3:59:2e:dc:d6:
         07:46:ac:ff:ca:3f:48:41:61:8d:da:78:96:9f:f1:ee:ca:07:
         4d:10:18:28:e9:eb:57:a8:a4:3a:60:31:54:35:a1:a8:af:05:
         a7:85:0e:8a:93:ca:49:cd:df:c8:29:50:c4:5d:48:b1:68:be:
         b2:48:27:09:df:96:3a:3f:3c:09:df:a1:0a:7f:5a:1e:30:22:
         6f:2c:a0:14:42:0b:8f:92:28:12:cd:6d:92:ab:ac:99:0a:20:
         08:b4:96:d5:3c:ff:d1:01:d4:63:bd:f0:72:b4:da:72:09:1b:
         f2:67:fe:b7:45:30:10:59:8d:d4:2c:6f:4d:15:08:44:f0:1e:
         3a:a6:de:12:85:9a:65:8d:10:77:ec:b7:c8:98:10:d1:6a:49:
         b6:d5:21:70:81:02:54:01:5b:7e:5c:3a:5d:e5:f6:b5:91:cc:
         3b:5d:6c:d8:4a:27:b0:8d:0e:3c:17:08:f0:ab:78:2b:df:34:
         a6:61:8d:e0:ff:b7:89:4d:93:b2:31:df:8f:b8:f6:8a:2f:8d:
         ac:fd:ea:5a:86:5c:33:7a:90:6a:de:13:51:33:f0:e7:69:e6:
         78:82:53:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:01:49 2025 by rpki-client