Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233382e302f32342d3234203d3e203238363135.roa
File:                     3137372e3133312e3233382e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          jxCdJp9EuSi8V9GW7pRSKo9Sqv7O0W1dI5+EhFt/W3A=
Subject key identifier:   D0:B0:EB:A8:E5:72:7D:67:D8:42:C0:85:70:1C:83:D8:E0:F8:45:D2
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       379A2FAE74E173195E779297C6718CBF677B0EEB
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233382e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:48:56 +0000
ROA not before:           Thu 30 Oct 2025 02:43:56 +0000
ROA not after:            Thu 29 Oct 2026 02:48:56 +0000
asID:                     28615
IP address blocks:        177.131.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9a:2f:ae:74:e1:73:19:5e:77:92:97:c6:71:8c:bf:67:7b:0e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:43:56 2025 GMT
            Not After : Oct 29 02:48:56 2026 GMT
        Subject: CN=D0B0EBA8E5727D67D842C085701C83D8E0F845D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7a:9f:a8:3c:e7:f7:3a:19:2c:da:07:0a:f5:
                    da:8d:ce:30:ea:ac:fc:a1:25:da:48:57:12:f7:fc:
                    5f:65:87:55:8d:d5:eb:e7:62:6d:98:72:98:16:27:
                    5b:fe:73:4b:d9:a6:69:5b:3a:ee:ac:22:04:f5:82:
                    75:d7:54:c6:d5:bb:bf:22:d8:5f:e3:bf:9a:35:14:
                    27:4c:82:8f:28:ca:db:fb:8c:75:dc:bf:f4:1d:a0:
                    20:c0:df:99:81:a8:95:e0:56:52:b5:b8:ea:73:5f:
                    aa:f4:d6:5c:88:58:c3:59:3e:08:fc:47:3d:55:f2:
                    20:c1:32:55:97:9d:95:91:e9:b4:f1:56:3b:c4:73:
                    f2:f0:23:cb:74:a1:f5:f5:44:7e:26:f4:f8:9d:6a:
                    16:89:cb:19:ea:bd:4b:ae:04:cf:23:94:43:7c:76:
                    c9:4f:15:4c:2d:8b:06:68:cd:4a:c9:8b:27:20:a2:
                    d7:1c:3b:59:f6:b9:3a:ef:f1:ba:53:de:78:7c:6e:
                    88:d3:26:43:15:63:76:2e:75:47:c4:ee:9d:d7:21:
                    00:1f:7c:d0:58:47:13:27:72:11:0d:a6:be:dd:69:
                    a7:de:58:0b:c2:a9:5d:b2:8a:75:e6:8f:d9:43:d6:
                    b5:f0:f0:1a:61:6c:4e:dc:33:0a:05:7b:c8:de:4c:
                    9f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B0:EB:A8:E5:72:7D:67:D8:42:C0:85:70:1C:83:D8:E0:F8:45:D2
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233382e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:6c:a9:bb:0f:21:45:7e:b7:a7:38:cd:a4:1b:f7:26:e6:fa:
         43:86:2d:b6:af:69:5f:26:34:0f:7d:c6:0b:16:73:cd:a0:e7:
         5a:a3:4d:91:ee:23:b6:d1:d8:23:54:52:53:95:ed:ca:c2:f1:
         13:6a:9e:3f:a4:c3:73:05:8f:34:9a:de:bf:50:90:51:67:b8:
         f0:d2:83:66:7d:60:41:e8:eb:03:84:f1:6d:ff:a4:e7:5f:8c:
         f9:1f:13:08:0c:dd:07:50:48:92:b5:9a:6c:03:3e:7e:4d:0d:
         3d:d4:82:eb:8f:db:aa:3e:64:26:5e:66:82:f2:97:b4:eb:3e:
         1b:3d:0d:e9:7a:aa:5b:ea:af:02:0d:69:c0:18:f5:38:a5:b2:
         6c:1f:b9:49:23:3d:7c:dd:a7:9e:ef:48:31:93:8b:3e:29:d9:
         9a:cd:a3:95:ae:4d:62:01:4c:21:4f:29:fa:5c:52:4c:4d:db:
         e0:c2:f4:10:ec:fb:f0:a6:2d:9b:d0:aa:9c:9b:43:46:8a:43:
         b3:0a:24:8b:d1:76:c0:af:a6:1e:cc:b1:83:64:37:35:f0:75:
         68:f2:c9:dc:09:ae:30:cb:bd:6d:f5:eb:ae:5e:62:88:6b:7c:
         60:db:f4:e9:64:16:3c:2d:1c:75:5f:9b:1d:3e:53:4b:20:f2:
         b4:97:e1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:06:57 2025 by rpki-client