Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3232352e302f32342d3234203d3e203238363135.roa
File:                     3137372e3133312e3232352e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          2Un7WOTaH+57ngOJ6qaWagIk8wkkk4N/UaW+v0Vq9fg=
Subject key identifier:   D9:8E:3B:5F:80:2D:06:6B:C9:06:49:D2:03:4E:81:70:42:F3:D9:5A
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       1806887D71564EB9F717E986488A7D205D17D92F
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3232352e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:48:59 +0000
ROA not before:           Thu 30 Oct 2025 02:43:59 +0000
ROA not after:            Thu 29 Oct 2026 02:48:59 +0000
asID:                     28615
IP address blocks:        177.131.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:06:88:7d:71:56:4e:b9:f7:17:e9:86:48:8a:7d:20:5d:17:d9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:43:59 2025 GMT
            Not After : Oct 29 02:48:59 2026 GMT
        Subject: CN=D98E3B5F802D066BC90649D2034E817042F3D95A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:dc:b8:05:6a:13:a3:ad:42:70:39:d9:12:
                    ef:a8:b8:a6:df:97:55:6e:f4:3a:ea:27:80:19:e0:
                    ab:4e:ff:f1:d2:e2:84:18:00:50:ba:05:02:a1:fe:
                    2e:25:a0:5e:fe:b1:63:27:70:6a:65:95:0f:7d:34:
                    00:a7:5a:e8:74:5f:21:8a:93:09:67:87:63:92:b5:
                    a4:82:78:88:f1:14:9d:2e:82:8c:57:40:df:78:e1:
                    ec:5d:17:fc:ef:ae:a4:19:eb:d3:22:e5:13:73:56:
                    99:33:9b:5f:19:5f:2a:11:6a:e2:cd:83:57:4d:33:
                    ba:b9:e3:09:40:03:b2:cb:ae:ee:d0:c0:f4:c7:1f:
                    6c:c9:cd:c9:4f:c8:66:73:b5:7d:cb:11:b1:2f:0c:
                    40:da:16:47:09:7e:e3:b0:ed:54:cc:b0:a8:8d:59:
                    11:ce:b2:e2:9f:58:35:e1:cb:6c:09:8c:b5:07:fe:
                    02:68:c8:e5:3d:af:f5:14:98:73:40:fd:60:39:7a:
                    f1:7d:b9:d6:b2:c6:82:e9:b7:a5:a5:c1:21:eb:a8:
                    12:4f:1e:df:e4:87:0a:49:c9:26:fe:d9:04:0e:ee:
                    e8:44:2d:b7:e5:d8:04:0c:07:88:1c:ff:f2:6d:f9:
                    a6:01:db:58:70:14:b5:e9:f7:fb:d6:fc:9e:23:de:
                    1a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8E:3B:5F:80:2D:06:6B:C9:06:49:D2:03:4E:81:70:42:F3:D9:5A
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3232352e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:cf:76:8e:ae:c7:33:91:c1:4d:bb:30:11:45:92:48:fa:27:
         07:d6:bc:c4:31:2f:44:ca:d7:2a:66:4f:a4:0b:5b:0c:ec:49:
         bc:5a:f6:16:b7:97:da:a5:94:71:5b:b8:25:0c:65:27:a1:39:
         d1:76:90:a9:72:03:ea:a0:c2:e6:52:7a:3c:2a:7e:dd:d1:cf:
         89:aa:04:25:5d:f0:d3:82:0c:98:27:f3:57:88:25:dc:06:80:
         10:2d:02:31:6d:42:12:7a:06:ec:6a:5a:76:b1:8b:de:20:89:
         42:ae:56:b2:e6:1e:2e:c7:36:c5:25:31:22:72:9d:9c:61:7e:
         37:71:1f:18:ef:9b:27:fc:02:a8:bb:f5:e5:de:6a:db:dd:22:
         e2:c8:f0:d2:42:a5:27:e4:87:66:85:24:9b:4f:f4:14:bb:df:
         40:ef:a5:c8:b6:6a:2f:27:f4:21:3e:d1:6b:1b:13:69:9f:c8:
         e3:c7:45:92:ab:69:4b:7f:2d:e6:62:09:dd:58:83:0d:0e:c5:
         de:74:fb:aa:01:63:d2:e8:1a:09:ae:ce:98:d2:af:99:d5:cd:
         9a:32:ab:27:30:a5:b8:21:b2:42:1e:6d:da:5d:05:c8:4a:27:
         47:b8:f3:d9:6c:d1:c1:ee:bb:f4:a2:97:20:a5:37:00:0a:6f:
         f8:15:3b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:05:59 2025 by rpki-client