Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3232372e302f32342d3234203d3e203238363135.roa
File:                     3137372e3133312e3232372e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          7S64CYfbKnxAgRYTk1SFXOBboO5PvFQHDvkdDCGPguM=
Subject key identifier:   5B:3F:90:A2:FF:0A:BC:F3:20:20:24:D9:22:C8:5C:43:D6:09:C7:9F
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       65DE4DFA2144427765AB46CF12E91D19965848AD
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3232372e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:49:08 +0000
ROA not before:           Thu 30 Oct 2025 02:44:08 +0000
ROA not after:            Thu 29 Oct 2026 02:49:08 +0000
asID:                     28615
IP address blocks:        177.131.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:de:4d:fa:21:44:42:77:65:ab:46:cf:12:e9:1d:19:96:58:48:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:08 2025 GMT
            Not After : Oct 29 02:49:08 2026 GMT
        Subject: CN=5B3F90A2FF0ABCF3202024D922C85C43D609C79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:4b:32:2a:53:d4:23:5e:7c:9b:fa:ee:43:
                    e7:6f:16:6d:04:30:33:6c:3e:82:96:63:20:c1:39:
                    8d:5e:b8:17:91:56:c3:c6:4e:f1:e4:b3:6a:82:80:
                    2c:69:74:2c:68:d7:c6:c1:ec:9c:c5:75:3f:77:b9:
                    76:0a:f0:ae:a7:21:6a:5c:12:3d:d3:6a:a5:c4:15:
                    2c:9a:94:a2:c7:65:63:13:b2:42:0a:8a:cd:53:b1:
                    18:40:24:8f:28:d3:53:04:b2:1e:57:de:d3:91:44:
                    1c:5b:31:e9:12:9f:bf:d1:b0:d1:99:46:fb:56:c5:
                    47:1c:b1:bd:52:49:17:de:95:aa:b8:3d:ee:32:fa:
                    60:ce:0f:4b:9e:e2:c2:57:27:77:a8:3e:74:aa:1d:
                    66:43:c0:b9:79:8d:55:2f:3d:7a:06:f8:13:e3:a4:
                    68:91:61:38:0a:72:ce:8b:9f:49:f3:70:66:4f:a3:
                    92:73:d8:03:9a:25:49:24:3e:2a:80:fd:fd:ea:99:
                    7f:fa:f7:64:dd:b1:db:de:8f:8d:47:c7:1a:c5:75:
                    8b:c6:85:8e:b0:72:64:db:ed:8e:b7:e8:34:06:11:
                    87:56:46:17:c4:6f:d6:75:00:c4:dd:9b:23:d7:92:
                    ed:cf:72:d3:2f:2f:4b:74:86:03:f2:ed:c1:a7:3f:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3F:90:A2:FF:0A:BC:F3:20:20:24:D9:22:C8:5C:43:D6:09:C7:9F
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3232372e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:2b:0c:94:f1:09:1a:7f:a2:7e:4c:15:06:51:3c:e1:32:
         34:05:b7:df:da:75:e1:97:f6:78:50:9d:19:5f:c8:e6:5c:9c:
         a3:b6:1b:f9:2b:54:d7:17:4d:2f:23:f6:03:5d:cb:26:09:b5:
         a5:30:f0:bb:cb:4a:9c:4b:a1:97:f6:1a:2a:93:09:50:6a:98:
         bf:26:c7:15:9a:3b:26:96:95:31:52:1f:aa:14:03:f5:f1:ad:
         a8:f4:54:b4:35:1a:11:a8:d0:02:7a:ac:76:12:49:a9:f8:7c:
         e6:b4:55:f5:81:8b:3a:90:7a:6c:11:4e:3c:18:f0:04:9c:98:
         9a:56:0a:d7:1d:45:a6:6c:87:fc:fb:70:f3:c9:ab:05:07:33:
         bd:a4:40:86:02:7f:a9:7f:ab:97:c3:c8:02:26:1f:fc:8e:83:
         ba:91:6a:f7:c0:2e:b1:b4:07:4f:c9:8f:a7:f7:da:ab:68:71:
         84:fb:f6:32:c7:42:19:55:20:05:87:ef:3d:28:cf:f0:98:d4:
         dd:00:e2:c3:d8:e1:6e:f3:a4:1a:ed:b5:5a:30:72:ff:6f:c8:
         b7:13:ea:14:52:8f:3c:13:dc:c5:25:c1:f8:37:5c:16:f9:60:
         e5:e3:1b:df:07:bf:95:9f:59:f1:bb:e8:ba:21:52:09:05:c3:
         83:c4:34:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:02:02 2025 by rpki-client