Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3230302e302f32322d3232203d3e203238363135.roa
File:                     3137372e3133312e3230302e302f32322d3232203d3e203238363135.roa (raw, json)
Hash identifier:          3qbFhI3PyNdsG1qbGgrOEQfez78Odncv9HASor1Ab34=
Subject key identifier:   FC:89:4D:7F:FD:F3:FC:75:59:CE:03:04:F1:7D:4B:F8:56:20:D6:58
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       59E5AA9E089755308618FA5350A474BE89B638EC
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3230302e302f32322d3232203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:49:09 +0000
ROA not before:           Thu 30 Oct 2025 02:44:09 +0000
ROA not after:            Thu 29 Oct 2026 02:49:09 +0000
asID:                     28615
IP address blocks:        177.131.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e5:aa:9e:08:97:55:30:86:18:fa:53:50:a4:74:be:89:b6:38:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:09 2025 GMT
            Not After : Oct 29 02:49:09 2026 GMT
        Subject: CN=FC894D7FFDF3FC7559CE0304F17D4BF85620D658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:95:5f:ba:8f:49:7c:35:ea:97:87:52:92:
                    2e:57:6c:84:bd:0d:96:82:7a:c2:58:78:5b:d0:1e:
                    38:a2:78:8b:d3:b6:f3:d8:29:9d:82:79:7f:42:16:
                    df:20:d4:bc:93:00:42:ca:0c:b0:63:37:0b:2b:e5:
                    55:b1:18:65:cd:2d:b8:20:e4:53:ba:36:0f:3a:1b:
                    f5:aa:2d:2a:36:39:a1:99:b2:e5:e8:ad:40:62:ac:
                    f7:8d:27:aa:1e:62:e9:47:eb:ba:5f:18:0a:77:1c:
                    7c:c2:a1:99:49:fc:45:78:68:08:d3:51:94:3c:15:
                    ee:3b:e9:28:ac:d9:06:4f:9c:43:d8:21:37:03:47:
                    d1:34:b7:7c:61:98:72:5b:3d:8c:7a:c0:f5:9d:b8:
                    13:8e:e1:ab:6a:1d:fe:b6:d4:91:37:66:f6:70:70:
                    bd:42:da:28:a5:dd:a3:c8:cf:1f:d0:8a:04:55:0b:
                    f7:6f:d8:08:59:0b:67:95:bb:4f:35:69:ab:3d:4e:
                    ff:f9:38:1b:a5:1f:f7:1f:90:4a:cd:15:2b:a2:06:
                    f0:dd:c9:3a:d4:f8:76:de:70:65:d5:28:cd:11:85:
                    b5:23:e0:a8:8b:9c:7d:a2:99:ab:e9:3e:69:45:c3:
                    64:40:f9:fb:73:4e:05:61:ac:d5:9b:c5:ce:ca:eb:
                    6f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:89:4D:7F:FD:F3:FC:75:59:CE:03:04:F1:7D:4B:F8:56:20:D6:58
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3230302e302f32322d3232203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:5b:57:04:64:02:dd:a0:ad:47:4b:6d:be:7b:20:19:83:68:
         b2:cb:af:13:86:af:d7:86:e4:76:f1:15:95:6b:c2:3c:74:a1:
         0f:48:3b:5c:e1:d3:5b:70:4f:4e:d2:c8:e4:3c:f3:d0:6e:6e:
         d2:63:32:10:b6:74:9d:51:9d:be:01:15:65:46:1e:68:fd:a6:
         f2:ab:39:8f:52:db:e3:7b:b7:5d:77:5a:4d:19:8a:5b:8b:da:
         ef:98:ff:3e:ab:b3:16:0c:39:71:c1:67:76:97:aa:2b:8f:bc:
         1c:a3:f3:ea:af:ed:88:b6:c1:5b:b4:f2:93:f7:06:7b:39:58:
         60:c2:e0:60:ce:af:da:86:1f:b3:98:3e:d2:cf:e0:d9:c5:ad:
         86:ef:36:20:54:59:58:85:80:cd:ed:07:83:0a:48:fd:d4:87:
         bd:41:fa:41:46:5f:f9:ee:9a:67:e2:73:f2:02:d4:f3:77:a6:
         23:1a:40:bb:fd:ba:45:10:62:da:56:7f:83:ec:fa:00:0e:b8:
         29:a5:0a:69:e5:64:aa:cc:18:c4:50:cc:b8:91:a8:ac:6d:5e:
         5f:2c:1f:8c:a8:b4:69:07:9a:69:ce:78:27:64:2b:82:64:39:
         b4:7e:93:e3:56:45:fb:f7:fe:5b:15:75:b9:a6:3b:a4:77:1a:
         9c:a9:96:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:01:46 2025 by rpki-client