Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3231332e302f32342d3234203d3e203238363135.roa
File:                     3137372e3133312e3231332e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          JsTocHmta2e8XduOofajyns3K34JFdk9nTpJcq7Ihwg=
Subject key identifier:   B7:1B:7E:C1:F6:43:C6:28:1D:12:1B:71:CF:1D:D8:27:9F:7C:72:DA
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       156CE10D7B54A482A4E7522A8CE5D7FEC94F2866
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3231332e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:49:12 +0000
ROA not before:           Thu 30 Oct 2025 02:44:12 +0000
ROA not after:            Thu 29 Oct 2026 02:49:12 +0000
asID:                     28615
IP address blocks:        177.131.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6c:e1:0d:7b:54:a4:82:a4:e7:52:2a:8c:e5:d7:fe:c9:4f:28:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:12 2025 GMT
            Not After : Oct 29 02:49:12 2026 GMT
        Subject: CN=B71B7EC1F643C6281D121B71CF1DD8279F7C72DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:d5:13:0a:62:a9:21:0f:cd:e2:38:15:c4:
                    36:e2:a1:8e:2a:47:2c:37:1f:e1:ce:1e:92:31:4b:
                    ce:35:0e:e1:3d:71:ff:af:62:9d:a9:3b:9e:8e:8c:
                    c3:9c:1b:32:8f:18:4d:3b:fa:44:e5:a2:71:7a:cd:
                    2d:62:c2:9a:f6:5d:33:d7:8d:ee:fc:e5:2e:b8:5e:
                    a9:f8:52:a5:a5:8f:4f:0b:0d:54:76:7b:cc:7b:1a:
                    5e:34:aa:4b:b1:4a:81:b9:d7:88:f7:08:de:59:64:
                    e8:d5:a2:a8:46:7b:66:df:64:17:e0:63:fb:86:16:
                    a6:54:59:1f:2e:9b:7e:64:16:4d:50:0c:96:6c:5c:
                    e6:0b:e8:0f:60:89:09:6a:64:19:c0:8f:ff:ab:ca:
                    9d:d8:7d:5f:0b:98:e6:38:98:e2:f8:c1:80:49:79:
                    e2:30:bc:4b:92:a1:58:27:b3:2e:4b:37:3d:9b:12:
                    bf:e3:6d:83:09:ac:a6:d0:7b:8c:17:e8:2b:6f:44:
                    ae:67:5d:2d:b8:ef:cc:08:8e:da:f6:51:22:e8:26:
                    56:47:4a:bc:ad:1d:1c:4e:ed:a8:2e:96:8c:77:6f:
                    e5:b1:27:cd:99:35:4f:6b:76:84:0b:9b:ec:b1:32:
                    1b:96:b4:38:b1:31:92:81:c9:b9:84:26:c4:fe:5f:
                    95:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1B:7E:C1:F6:43:C6:28:1D:12:1B:71:CF:1D:D8:27:9F:7C:72:DA
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3231332e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:c1:bd:5b:2d:c0:96:fe:fa:d5:d3:94:13:74:c8:9a:80:2c:
         11:31:eb:7b:c9:2d:fe:c2:6d:e1:3b:17:2a:3c:8f:2f:3a:0d:
         7e:50:db:e5:51:15:23:bb:ef:ea:69:b9:fe:67:f7:6b:61:de:
         8d:b7:2d:72:87:8a:6c:e1:5e:46:52:68:e2:1b:fc:55:a7:56:
         5a:88:93:db:9e:b5:b5:12:f4:ff:9d:31:82:59:d0:ca:44:a9:
         1d:83:6c:d4:6a:ef:aa:cc:3a:95:c9:3e:45:2d:c3:55:69:51:
         4b:51:a9:76:67:8b:b9:8c:33:3c:d4:aa:15:07:e8:ea:e2:0d:
         cc:3a:01:54:48:a5:6e:6b:c0:cb:45:c4:48:a6:ee:2a:aa:19:
         f4:c2:17:3f:7e:81:17:42:89:fd:8c:c6:28:98:ad:7c:37:ea:
         bf:af:02:d5:10:e2:88:7a:34:c3:5a:69:aa:c7:c4:e0:52:5e:
         5f:fd:9c:58:0d:40:cb:e0:40:28:bf:39:06:b1:88:72:d5:c0:
         5b:ba:42:f8:f2:76:de:47:ea:b5:fe:08:80:e7:5b:76:43:69:
         d3:82:76:ae:c0:91:a5:11:e5:d3:05:e2:78:ba:e3:9d:ac:34:
         ea:08:b8:60:1c:55:62:86:59:26:b1:5b:ee:86:79:07:d7:86:
         2c:dc:91:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:06:01 2025 by rpki-client