Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233362e302f32342d3234203d3e203238363135.roa
File:                     3137372e3133312e3233362e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          hv/aqddPM7vnOOpL4K49rlSjbAemYSuD/J8IeMq+yWQ=
Subject key identifier:   3F:C1:20:A6:96:58:17:D5:4E:9B:93:4A:63:D1:FD:40:BF:A8:D9:12
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       0493D6FE0055476A13665DE1E52359C2C62B7CF9
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233362e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:49:01 +0000
ROA not before:           Thu 30 Oct 2025 02:44:01 +0000
ROA not after:            Thu 29 Oct 2026 02:49:01 +0000
asID:                     28615
IP address blocks:        177.131.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:93:d6:fe:00:55:47:6a:13:66:5d:e1:e5:23:59:c2:c6:2b:7c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:01 2025 GMT
            Not After : Oct 29 02:49:01 2026 GMT
        Subject: CN=3FC120A6965817D54E9B934A63D1FD40BFA8D912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:cf:b9:63:b2:f5:7c:d6:a2:69:69:d2:13:
                    24:92:f9:fa:15:08:7c:9c:b8:0f:39:86:76:da:ce:
                    6e:23:c8:db:0a:c4:09:66:a8:46:60:4a:72:54:3c:
                    e5:2a:64:60:85:36:3a:01:38:48:70:76:f7:88:2e:
                    e0:09:da:f5:d0:65:53:a7:4c:ae:c4:3e:f3:0a:f5:
                    03:8b:c0:ff:ee:b6:d0:69:ff:1e:ba:14:f0:81:f5:
                    be:b0:29:b3:87:00:e4:0c:3c:10:62:ce:9c:c1:c7:
                    a1:26:48:e0:aa:4c:cd:45:95:ea:a2:6d:e3:71:c5:
                    79:1d:ff:f2:ea:21:6d:57:90:01:ad:f8:24:af:12:
                    32:6e:31:15:85:db:0c:83:59:9c:95:06:a3:ce:43:
                    cf:f5:1a:4a:85:f0:55:32:51:17:4f:e4:47:9e:db:
                    c6:3b:41:61:e2:90:d8:a8:d9:7d:d5:99:27:a9:57:
                    5e:54:93:79:c2:4d:30:6c:7d:5a:29:a6:30:c4:17:
                    9d:93:33:96:d7:09:09:a1:44:77:55:4d:cc:99:d0:
                    58:f3:da:1e:00:6c:fb:e5:1e:7e:b7:fd:d2:e4:14:
                    ee:28:92:dd:41:84:17:97:e0:5f:76:3e:92:af:19:
                    49:77:17:02:b8:a5:3c:d2:aa:ff:89:f5:e5:bc:03:
                    25:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C1:20:A6:96:58:17:D5:4E:9B:93:4A:63:D1:FD:40:BF:A8:D9:12
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233362e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:5e:97:50:17:f8:d4:c1:48:1b:62:92:65:d0:fd:9c:58:55:
         d1:a6:58:64:da:f5:98:47:06:ff:99:60:f2:74:94:02:37:11:
         79:13:2a:37:bf:17:d8:7e:b3:8c:06:9d:3b:c2:12:24:ea:bd:
         d0:cb:78:ba:41:2d:76:b4:7c:92:13:3e:ba:ee:de:7c:3d:00:
         df:db:02:54:59:67:14:87:c5:eb:5a:50:7c:28:6f:32:4e:cd:
         f4:9b:fb:8a:29:0e:94:bf:d5:1d:36:1d:48:03:27:70:8a:48:
         d3:b1:54:9a:35:a0:ac:28:19:29:bb:ff:a4:b5:a8:d3:66:60:
         7c:fa:1a:74:d4:da:ba:d9:78:99:19:cc:c9:c6:83:6b:d6:82:
         0a:58:61:95:2e:1c:2e:6b:61:a1:5a:4e:d8:20:b3:7c:2e:89:
         41:5e:be:98:1d:da:99:01:ac:5f:84:76:51:ff:f4:ce:dc:48:
         40:c5:eb:47:fe:f7:7e:6f:39:19:99:c4:de:35:9c:36:15:83:
         4c:83:c3:7c:31:ac:c2:fb:d5:d7:42:4c:6d:59:a6:37:d7:68:
         ed:7a:74:39:f1:4a:cf:98:47:66:e6:bd:36:24:c2:e4:6b:dd:
         0a:3a:9d:c7:19:e1:4a:2c:fd:dc:af:56:5d:2c:4e:7a:be:f5:
         aa:06:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:01:57 2025 by rpki-client