Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233302e302f32342d3234203d3e203238363135.roa
File:                     3137372e3133312e3233302e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          SwXqjB+FUeQjWJumP0I5E15v79BU7EkgQVT9+ihjc5k=
Subject key identifier:   45:F8:26:36:CD:34:05:2C:59:51:4C:15:2F:E6:1C:56:8C:2B:1D:05
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       52EADA864FED491A4EC0F671336A1ACA543B6EDE
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233302e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:49:09 +0000
ROA not before:           Thu 30 Oct 2025 02:44:09 +0000
ROA not after:            Thu 29 Oct 2026 02:49:09 +0000
asID:                     28615
IP address blocks:        177.131.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ea:da:86:4f:ed:49:1a:4e:c0:f6:71:33:6a:1a:ca:54:3b:6e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:09 2025 GMT
            Not After : Oct 29 02:49:09 2026 GMT
        Subject: CN=45F82636CD34052C59514C152FE61C568C2B1D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9b:09:44:a1:71:28:b2:83:1f:66:9e:58:eb:
                    2a:cb:a1:38:73:77:dc:86:20:8e:22:f7:cd:cf:9d:
                    62:12:f6:94:40:4a:42:9d:87:b4:98:00:00:20:46:
                    c4:c6:a8:29:b9:4d:85:17:63:96:64:27:f0:b6:69:
                    dd:f0:dc:fb:89:14:01:d7:ec:a1:82:b3:57:90:32:
                    9e:0f:fc:75:b1:17:53:7e:18:95:2b:c7:d0:af:95:
                    19:2e:5c:dc:44:0a:eb:c1:94:a9:d0:23:49:80:49:
                    a4:f2:6d:e1:53:3a:b8:46:45:b2:1d:b9:d4:f5:de:
                    4a:e5:b0:b1:f9:56:48:fe:cb:8d:86:dc:67:70:8d:
                    f8:96:ca:6a:03:cf:b1:51:bc:93:a4:f4:74:e8:4f:
                    b0:cf:da:3f:17:62:2a:6a:df:20:5d:43:6f:86:ff:
                    c5:df:80:41:61:da:b5:36:aa:23:79:f2:24:65:55:
                    03:0b:b6:be:3e:b3:f8:70:7a:00:bd:87:69:fb:05:
                    7e:a2:d1:a7:eb:7a:f8:bd:dc:29:a1:30:c4:6e:92:
                    ca:7e:16:dd:28:04:ed:a4:28:80:cd:c5:36:eb:39:
                    e1:5f:a6:5c:ef:f2:b8:77:4b:97:1c:d9:47:05:92:
                    29:9e:d8:7f:53:31:c7:31:c1:02:87:e6:e9:32:e1:
                    c0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F8:26:36:CD:34:05:2C:59:51:4C:15:2F:E6:1C:56:8C:2B:1D:05
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233302e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:6a:86:a6:bc:69:31:45:0b:62:af:de:25:d6:cf:4d:c4:7e:
         9b:13:42:45:d3:b4:91:20:24:9d:4e:ff:b8:e4:5e:09:d4:59:
         73:27:38:a2:1c:23:2e:f5:aa:4b:bb:ba:72:e2:f5:9c:7d:99:
         b5:76:23:6b:da:9b:6d:79:b7:b7:d2:61:1e:4f:f8:2d:7d:8f:
         64:50:01:d9:f2:33:52:a1:02:a8:b3:e6:f9:49:79:9e:38:09:
         de:2e:f6:62:f5:ae:9f:f8:a7:c1:df:7e:7b:f6:29:a3:72:81:
         04:26:39:82:4d:82:3f:3a:b1:9e:24:93:23:5a:84:99:7f:c3:
         4f:5f:08:0f:6c:cf:3f:c3:f1:5e:7f:a6:fd:6b:76:54:55:1f:
         1e:8a:53:7f:36:8e:bf:e9:d9:94:d4:c1:c1:df:80:52:25:90:
         98:75:7b:65:21:b2:63:7b:5d:b0:b9:62:24:70:38:71:e1:a5:
         e6:dc:25:db:64:8c:6e:71:c6:ae:7e:12:75:b0:5e:54:f9:33:
         a2:0a:52:15:c7:21:ca:e0:b1:7b:5c:87:ef:9a:0a:3c:3d:1f:
         63:a6:e6:89:ff:4c:ad:da:01:44:e5:98:1d:cf:2a:bc:2e:8b:
         7d:07:77:67:80:c9:f1:ec:e6:f4:6a:65:35:01:67:d2:cd:fc:
         a5:5c:00:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:05:57 2025 by rpki-client