Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3139372e302f32342d3234203d3e203238363234.roa
File:                     3137372e3133312e3139372e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          a6nxxT5ismqIRg12avXKWHriUcWfCSuNtCedkRuP2A4=
Subject key identifier:   F1:8D:F0:4F:EC:40:7A:F7:7E:EB:A3:0C:3E:E1:2F:A5:0F:59:D3:41
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       3DD228BACACC746C4859E0C8DCA0F5E87824EC35
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3139372e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:49:06 +0000
ROA not before:           Thu 30 Oct 2025 02:44:06 +0000
ROA not after:            Thu 29 Oct 2026 02:49:06 +0000
asID:                     28624
IP address blocks:        177.131.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d2:28:ba:ca:cc:74:6c:48:59:e0:c8:dc:a0:f5:e8:78:24:ec:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:06 2025 GMT
            Not After : Oct 29 02:49:06 2026 GMT
        Subject: CN=F18DF04FEC407AF77EEBA30C3EE12FA50F59D341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:8d:7c:b5:b4:bd:e7:7c:1b:21:d6:6f:26:
                    9c:1e:f3:04:f8:84:5c:88:c6:31:89:cc:54:50:98:
                    8c:5f:bc:f8:46:94:dc:5e:fe:52:b6:e4:d7:47:22:
                    3a:60:36:4b:d8:28:5a:9e:3e:b9:c6:c1:45:be:46:
                    67:0e:72:41:8f:88:c4:8d:3e:9f:01:b8:e2:ed:c5:
                    44:75:a2:f4:80:6f:93:d2:aa:4e:a6:eb:bd:3f:ee:
                    4e:04:4d:1c:78:1b:60:b6:5d:c1:91:3e:7f:66:05:
                    f5:ea:7a:11:e2:c3:b0:b0:f9:d3:36:80:2c:5f:9f:
                    12:97:fe:f2:9c:a9:2c:d8:04:33:9c:39:c8:2b:8c:
                    ab:61:b5:9d:d1:60:f9:95:65:36:8b:a3:a0:67:df:
                    3d:a5:4a:39:b6:fb:64:25:5f:22:e3:64:85:48:77:
                    5a:4f:6f:c6:2b:d8:86:58:c6:e6:91:f0:03:95:f4:
                    7c:12:53:b4:98:55:91:55:42:23:3b:47:22:96:99:
                    ba:79:37:0e:3e:6c:d6:56:b4:41:ae:46:bb:31:55:
                    7e:9c:b1:56:79:a8:fd:d1:70:6c:96:20:e4:bd:01:
                    61:b5:0c:dd:f4:53:cd:c0:e6:26:77:a7:c4:a8:92:
                    c2:e7:40:2a:13:a2:75:b3:0d:60:de:4e:44:78:4b:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8D:F0:4F:EC:40:7A:F7:7E:EB:A3:0C:3E:E1:2F:A5:0F:59:D3:41
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3139372e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:74:bf:2d:e0:e7:1b:fe:27:24:95:1f:1d:08:25:fa:c7:42:
         0b:2f:29:9c:85:9e:39:07:67:6d:50:e4:36:60:6a:db:44:f1:
         b4:94:d3:4e:61:3e:d4:92:df:22:10:09:9f:93:0a:a2:21:b1:
         38:f7:41:ff:55:51:b7:78:42:9a:bf:db:08:51:de:71:3a:78:
         cd:eb:bc:ab:00:46:90:ba:ea:4e:7d:c2:1b:e4:87:7a:cc:9e:
         26:46:01:59:da:03:67:14:37:09:49:15:0c:73:92:bb:fa:f7:
         5c:9b:a3:f6:91:bf:cf:b3:ff:bd:b4:7d:ba:90:2e:5c:a7:1d:
         45:e4:94:81:b3:a7:f9:9e:ab:29:2d:ab:75:69:a7:c2:5e:8c:
         2b:88:3e:59:1f:3f:88:5d:8f:88:51:ea:af:79:ad:98:e6:25:
         52:8c:a9:14:cd:fa:ab:db:ca:e7:9f:f1:75:1e:5e:c3:55:69:
         ad:54:d5:37:aa:12:4e:21:14:d5:5a:29:79:61:76:6e:d6:8c:
         ee:b7:e5:78:c0:0b:fa:2d:08:16:28:df:5a:e7:fc:30:f0:61:
         88:57:32:9d:d3:6e:e2:39:fd:c5:7e:75:9c:52:68:1c:21:93:
         03:46:f3:4a:07:cb:9f:af:b7:2e:30:36:8c:22:6a:8b:e2:4e:
         45:f5:d3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:01:56 2025 by rpki-client