Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233372e302f32342d3234203d3e203238363234.roa
File:                     3137372e3133312e3233372e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          wA5u3ovc0IduCxTooo1m5Ea1LTtn8pf1AKNYcjXIC5k=
Subject key identifier:   2B:D1:6D:90:4F:3F:53:06:A7:8B:9F:2E:1B:E0:6B:5D:E2:AF:4B:85
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       3508295BC17567906639357CEBECB042DFED1006
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233372e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:49:05 +0000
ROA not before:           Thu 30 Oct 2025 02:44:05 +0000
ROA not after:            Thu 29 Oct 2026 02:49:05 +0000
asID:                     28624
IP address blocks:        177.131.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:08:29:5b:c1:75:67:90:66:39:35:7c:eb:ec:b0:42:df:ed:10:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:05 2025 GMT
            Not After : Oct 29 02:49:05 2026 GMT
        Subject: CN=2BD16D904F3F5306A78B9F2E1BE06B5DE2AF4B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:80:d8:03:22:00:1b:36:81:28:27:82:5d:
                    08:53:d8:39:a6:bb:69:0c:33:76:df:19:12:49:3e:
                    bf:5a:ab:4d:71:6d:ff:ba:5c:8b:5a:68:11:ff:d3:
                    43:38:fb:30:85:7b:aa:89:da:ce:4b:bc:b0:3d:78:
                    1c:fd:16:84:ce:8d:cc:df:55:4c:60:65:4b:06:7f:
                    f0:8e:cd:0d:78:2f:85:01:38:08:d6:72:cd:9e:46:
                    45:4d:a9:a8:0d:ea:1d:e5:47:81:90:6f:6f:43:db:
                    a9:04:aa:e3:1f:7e:70:68:33:26:01:c0:e1:e3:cf:
                    9f:13:88:80:5b:fd:6f:aa:70:ee:7e:27:5b:9a:c5:
                    ff:bf:7a:38:f5:86:7f:1d:8f:24:df:00:58:8f:3d:
                    7d:47:0d:9c:f8:c9:b1:a2:20:6f:fd:ac:1c:37:6b:
                    27:70:97:b9:7a:29:c4:53:af:de:e0:14:81:56:e6:
                    c8:e2:dc:c5:ce:3d:49:e0:52:72:3d:3f:91:86:1a:
                    d4:26:d1:eb:ab:3c:f0:5d:8e:46:ac:69:36:b4:3b:
                    fc:ff:e6:5e:e2:ef:63:af:51:05:82:62:a4:c6:68:
                    e1:51:fd:c0:d5:07:24:7c:de:7f:d2:23:ab:59:19:
                    58:3a:b8:60:90:79:ad:02:2d:71:e6:40:4c:2d:d0:
                    b3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D1:6D:90:4F:3F:53:06:A7:8B:9F:2E:1B:E0:6B:5D:E2:AF:4B:85
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233372e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:39:a9:69:63:ff:e5:09:51:05:b8:c6:5d:e0:23:ee:42:57:
         7c:db:42:c8:d6:3f:97:54:e4:a1:26:d5:2c:20:38:d6:5f:97:
         d6:93:b2:da:4b:19:58:33:a8:3d:67:ce:09:39:76:15:78:fb:
         bf:31:0d:41:39:5f:8d:7e:a0:98:43:74:cb:60:cd:df:14:f3:
         b2:f8:6f:7a:92:2f:18:0a:24:35:7f:7c:6e:1f:e7:db:a1:d4:
         14:8c:cb:26:b6:8b:80:16:27:b0:f3:ac:99:8b:69:ab:bf:17:
         66:f8:33:9b:7f:df:84:de:8a:66:29:57:ba:e9:b6:af:c0:d1:
         71:18:29:56:ef:8a:e7:71:63:51:f3:82:ec:19:4c:e6:ca:81:
         f6:eb:71:00:b0:34:09:12:e6:35:9c:60:1c:de:e9:02:a9:49:
         07:2c:44:a7:69:e0:d9:a1:0a:87:51:e3:9c:c7:d1:02:51:94:
         7c:22:36:3b:f2:d3:8b:c1:f7:b9:e5:86:6f:be:26:0b:e7:15:
         83:be:e8:53:e9:8a:a6:77:4e:7a:89:15:40:17:af:d7:69:23:
         f1:e4:76:dc:ad:53:b6:8c:f1:6b:e9:66:8a:70:14:b8:eb:d4:
         46:f5:ca:2c:a0:4f:ad:f1:09:03:6d:71:5a:44:e7:f5:c9:38:
         52:72:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:01:59 2025 by rpki-client