Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3232382e302f32342d3234203d3e203238363135.roa
File:                     3137372e3133312e3232382e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          LgEq8VL4itbd0/YEqiHaG4+hKDJ7JoXC9cisK8TbRYE=
Subject key identifier:   C4:25:C9:E8:C1:6C:26:49:83:2F:E7:8D:B1:84:37:0E:5F:29:C2:D2
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       309FE26A026E402960CB1A0460F28E12857D4137
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3232382e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:49:15 +0000
ROA not before:           Thu 30 Oct 2025 02:44:15 +0000
ROA not after:            Thu 29 Oct 2026 02:49:15 +0000
asID:                     28615
IP address blocks:        177.131.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9f:e2:6a:02:6e:40:29:60:cb:1a:04:60:f2:8e:12:85:7d:41:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:15 2025 GMT
            Not After : Oct 29 02:49:15 2026 GMT
        Subject: CN=C425C9E8C16C2649832FE78DB184370E5F29C2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:a2:a4:de:12:1e:03:ab:94:9a:53:83:67:
                    e5:79:c3:36:71:f4:9a:e2:70:d4:31:15:bb:6a:09:
                    8f:f6:ad:6a:05:a3:a2:a9:b2:d8:7e:67:94:78:df:
                    38:1c:06:b5:24:df:b2:15:ab:bd:9a:c3:b2:8b:58:
                    40:6a:99:af:98:e9:c1:87:b0:86:83:5c:28:2d:0d:
                    c5:a9:2f:15:c6:9d:18:10:ee:9b:a7:96:95:29:1e:
                    d3:99:fc:31:95:48:be:90:6a:31:db:98:0c:24:f7:
                    74:f8:ba:3a:51:f5:38:0b:43:8b:c4:bd:1a:60:29:
                    03:2a:74:26:8a:d8:7b:70:b0:08:8e:a9:13:04:03:
                    cb:59:72:a7:a1:64:52:b4:67:36:6b:a1:e9:a1:05:
                    3b:73:8c:52:90:e7:fe:7d:db:81:65:89:dd:07:2d:
                    c0:9f:44:ab:38:db:f4:59:a3:7c:05:92:8e:8c:82:
                    64:67:6e:0d:ff:b3:8e:d2:da:fd:fd:b7:67:2d:48:
                    6e:55:09:e2:0b:c1:ab:04:1e:b0:c5:60:60:29:d9:
                    34:7c:55:63:2e:83:ab:fb:6f:bb:76:4a:67:1b:a0:
                    19:a2:65:8d:1a:1a:ee:e0:c4:61:ba:a4:4f:c8:dc:
                    96:b8:83:0f:35:f3:47:42:cd:6f:e1:3d:94:9c:fa:
                    78:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:25:C9:E8:C1:6C:26:49:83:2F:E7:8D:B1:84:37:0E:5F:29:C2:D2
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3232382e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:69:68:7f:9e:e3:3c:a8:6e:ff:46:c1:ea:a9:1c:17:0e:b4:
         6a:4f:29:37:aa:8e:6b:7c:82:f2:e7:ce:4f:80:e4:3a:af:90:
         9e:a9:38:f1:e9:b4:12:ac:73:f3:f7:0a:56:75:8a:86:e4:06:
         35:9f:4b:a9:ef:fe:7d:2c:36:1e:55:88:41:5c:50:b5:69:ba:
         df:4e:ea:c5:fb:e0:7c:59:49:8f:39:74:ee:ad:55:9b:73:c5:
         48:c6:3a:8b:f3:82:83:cb:66:07:bc:35:0c:59:65:80:fd:c3:
         e7:e0:8a:b2:d2:b3:01:59:db:86:bd:fe:17:e1:f2:d2:e4:d8:
         3a:1e:57:70:67:b1:6c:8f:2a:12:5b:ef:2c:31:f5:24:58:06:
         8c:54:71:cb:51:40:90:22:04:fe:9e:99:a8:cc:10:72:a7:86:
         b9:a0:10:70:86:ca:e9:48:dd:ac:29:60:7a:c1:7d:a5:86:56:
         6e:37:3f:33:1d:3f:2e:94:b6:64:bf:f2:d6:52:29:f1:dc:ab:
         83:66:f1:0b:ee:93:26:3c:5e:83:63:15:e3:ef:43:85:dd:01:
         8f:5b:80:a2:4e:62:48:4b:0f:fe:5c:10:82:9f:ba:ac:55:a6:
         e9:9f:8f:8a:8b:c5:06:ce:4e:94:0c:82:2c:36:0f:9f:3a:b8:
         07:f9:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:01:43 2025 by rpki-client