Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3232312e302f32342d3234203d3e203238363135.roa
File:                     3137372e3133312e3232312e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          KlIPl9Of4DoBJE7qEQQGdQqMOmZmT4DTrtI1S1Q+pCw=
Subject key identifier:   58:85:63:BB:E4:F7:4B:00:60:8B:A8:5D:0B:18:A8:5A:48:7A:15:69
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       56D69F411A6348AE2CDBB26DDB1B96601FE42815
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3232312e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:49:14 +0000
ROA not before:           Thu 30 Oct 2025 02:44:14 +0000
ROA not after:            Thu 29 Oct 2026 02:49:14 +0000
asID:                     28615
IP address blocks:        177.131.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d6:9f:41:1a:63:48:ae:2c:db:b2:6d:db:1b:96:60:1f:e4:28:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:14 2025 GMT
            Not After : Oct 29 02:49:14 2026 GMT
        Subject: CN=588563BBE4F74B00608BA85D0B18A85A487A1569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:27:6b:17:99:91:98:0e:0b:ee:27:d2:15:
                    19:ba:99:69:f6:20:62:83:9b:cc:a6:fd:31:de:e7:
                    33:7d:cd:c4:76:60:1c:d2:e5:57:70:b2:74:2e:3d:
                    13:77:26:a1:dc:e2:5d:7b:cc:dd:ff:f4:26:ea:b8:
                    ad:21:c2:fd:48:ef:d6:3d:0b:d4:0a:09:60:ce:a6:
                    e3:9d:e8:c2:38:03:e9:97:cc:1f:7e:76:52:a0:c1:
                    4c:cc:37:8f:6d:6d:0f:52:14:8b:00:23:c6:3e:99:
                    2d:33:a7:41:e1:0f:5a:21:08:9c:7b:00:41:ed:9f:
                    58:1a:bd:b9:97:3e:73:79:51:11:8b:87:b0:4e:03:
                    4b:66:40:e6:02:c9:da:b1:00:ca:81:bf:0c:35:4b:
                    ed:bd:c4:2a:ff:3c:38:4c:fe:57:88:79:59:e9:00:
                    5e:4d:55:29:47:1b:22:9c:53:82:7a:44:97:5d:0e:
                    7c:ab:68:7e:02:94:47:7d:af:5e:0b:ad:2e:c9:78:
                    00:f5:73:b9:51:cf:a0:b1:8d:bb:e1:4d:b4:ad:c9:
                    47:8c:79:b6:06:13:dd:b9:e5:e6:f6:4f:af:97:3c:
                    8e:a9:bf:12:75:b2:fd:85:30:9c:8b:41:fa:c1:b8:
                    d9:18:77:6e:57:07:c4:0d:65:d3:1a:f9:a8:46:b8:
                    46:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:85:63:BB:E4:F7:4B:00:60:8B:A8:5D:0B:18:A8:5A:48:7A:15:69
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3232312e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ac:43:42:19:d2:37:d8:84:28:44:6e:b0:82:4a:97:f6:06:
         1b:fc:e5:9e:21:5a:e1:a5:78:26:84:f2:ef:9f:fa:eb:32:43:
         07:03:52:cf:7b:f6:8a:85:d2:a4:15:bf:e3:5b:bb:6d:e2:c9:
         c3:05:d2:9d:e8:77:ba:84:94:ed:ce:52:41:2d:bb:d7:8d:33:
         86:a4:e5:54:8a:c8:8b:bb:55:7e:86:5d:3a:4b:e4:8a:30:15:
         f7:b4:e7:e3:49:1b:e9:84:c6:78:a9:48:4b:89:50:be:9a:8a:
         0e:c2:06:c0:79:d1:9a:de:c3:74:75:9f:12:0e:00:51:90:b6:
         1d:47:b6:36:cc:c8:27:b6:4c:ea:5c:87:8f:87:48:89:35:66:
         1c:ce:22:e9:90:1d:b0:45:71:73:f7:35:1b:b0:6d:75:77:cf:
         a5:79:ed:32:3e:1a:81:6e:bb:3c:90:8a:e9:9a:33:53:52:f7:
         f2:2f:1e:0c:94:24:0a:5a:84:86:9c:96:d0:f0:66:cc:ac:11:
         84:d2:5a:8e:8c:54:4e:6b:87:ba:08:ff:5b:1b:99:93:63:94:
         f8:49:ff:c2:e7:07:e5:cb:35:cd:49:73:05:57:22:7c:1a:f1:
         34:51:6f:85:6e:f7:44:9b:1a:d5:22:de:03:4c:af:9a:f0:6e:
         68:c3:58:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:06:57 2025 by rpki-client