Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3231392e302f32342d3234203d3e203238363135.roa
File:                     3137372e3133312e3231392e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          IIbNhKwnhw9YuUbK1a03d70NVVWdoXNB7jL8Io7JeLI=
Subject key identifier:   3B:55:2A:C0:D5:88:77:FC:2A:93:D2:FF:46:FB:95:CA:30:84:4A:52
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       0DBC860F4351760B0EB6C2F97D7BF6D45CA39810
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3231392e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:49:04 +0000
ROA not before:           Thu 30 Oct 2025 02:44:04 +0000
ROA not after:            Thu 29 Oct 2026 02:49:04 +0000
asID:                     28615
IP address blocks:        177.131.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bc:86:0f:43:51:76:0b:0e:b6:c2:f9:7d:7b:f6:d4:5c:a3:98:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:04 2025 GMT
            Not After : Oct 29 02:49:04 2026 GMT
        Subject: CN=3B552AC0D58877FC2A93D2FF46FB95CA30844A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:e3:b7:41:16:ea:e9:db:24:93:59:a8:0b:
                    54:7e:9c:02:ae:76:8f:90:60:2c:0d:57:a8:24:24:
                    7e:45:89:25:03:64:2e:0f:5c:8e:12:a0:9c:e8:f9:
                    d1:0e:0a:ea:6e:2b:c8:ae:ed:1d:56:bc:6e:f3:d8:
                    e2:e3:87:f5:9a:fa:97:c9:eb:b9:ba:5a:dc:4d:7a:
                    13:26:2c:42:93:9a:21:42:b2:71:fe:5e:3f:7c:62:
                    bb:2f:b3:d1:23:11:c1:85:6e:d2:5c:36:c8:91:8e:
                    11:f4:38:a3:0e:07:31:f8:99:68:2d:6a:39:fa:8f:
                    d1:8b:a7:21:ec:98:d1:dd:d5:86:95:ea:03:4e:00:
                    e6:f7:5d:58:e9:ea:e3:77:ff:d9:3f:b8:ed:33:76:
                    46:72:af:40:8b:94:25:ce:86:c1:a9:dc:a9:a8:3e:
                    99:1d:a1:ff:f1:67:59:c5:2b:f4:e7:51:52:b5:5d:
                    73:1a:45:5d:76:b1:07:18:c6:fa:bf:01:5a:87:81:
                    f5:0a:98:a9:7d:71:fe:ef:d9:f7:bb:92:d9:73:02:
                    28:09:54:4c:36:70:a0:28:a8:37:f3:56:f3:bc:0b:
                    3d:fa:01:a5:a8:09:91:56:f3:c3:04:ca:ac:6b:46:
                    84:e3:0b:9c:7e:19:2e:68:28:ad:25:4b:a7:22:64:
                    90:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:55:2A:C0:D5:88:77:FC:2A:93:D2:FF:46:FB:95:CA:30:84:4A:52
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3231392e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:a2:92:da:ff:e1:05:41:15:92:0a:78:ff:78:78:25:1d:ec:
         2f:18:13:2c:26:31:97:82:24:ea:43:2d:fe:e2:95:72:fb:2c:
         1d:05:45:15:a1:15:68:b3:51:5f:21:72:e2:2d:f5:88:c5:2c:
         10:0c:cd:2c:24:b1:42:79:c8:17:cb:68:77:cf:da:d0:25:b1:
         25:98:ce:64:fe:11:92:eb:cd:4e:50:14:2f:17:57:fc:f1:91:
         ba:32:c1:8b:33:76:1a:62:40:0f:37:bf:ff:84:9b:6f:98:b9:
         1a:c9:04:23:76:94:77:78:a2:15:a7:6e:5d:18:c8:1a:f3:a5:
         40:e8:33:87:01:33:df:66:f4:f6:7f:9d:d5:b0:6e:b0:80:45:
         83:5b:dd:2c:57:4e:a2:03:0e:4c:98:d0:dd:f5:ac:25:08:d6:
         37:a2:5e:1b:ff:07:6a:49:b6:0a:8b:70:3e:5d:bc:7c:4d:19:
         8a:e8:b7:57:f1:52:4c:bb:68:5f:7a:b2:c4:58:65:fd:f4:0f:
         5c:a7:91:66:3d:36:a4:0e:65:3a:bf:3a:bc:40:60:d6:db:88:
         76:88:53:fe:e7:8a:ce:b7:41:9f:4e:c8:85:9c:f4:25:39:3b:
         03:0d:95:b7:d8:8c:aa:46:ea:14:84:61:07:2e:37:1d:f6:5d:
         4d:b4:70:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:06:02 2025 by rpki-client