Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233392e302f32342d3234203d3e203238363234.roa
File:                     3137372e3133312e3233392e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          nWO2vE6ei90OIwIvxmtDT02yrooJV/egxpUGTStuuMk=
Subject key identifier:   2B:1E:BD:BF:E1:71:9E:E7:0D:38:80:5F:AE:67:B0:61:20:25:DC:8E
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       53F6E7678D46188F5E6561CF939D07D8F270D807
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233392e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:49:01 +0000
ROA not before:           Thu 30 Oct 2025 02:44:01 +0000
ROA not after:            Thu 29 Oct 2026 02:49:01 +0000
asID:                     28624
IP address blocks:        177.131.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f6:e7:67:8d:46:18:8f:5e:65:61:cf:93:9d:07:d8:f2:70:d8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:01 2025 GMT
            Not After : Oct 29 02:49:01 2026 GMT
        Subject: CN=2B1EBDBFE1719EE70D38805FAE67B0612025DC8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:69:20:de:be:82:0d:e2:b3:55:92:c2:de:
                    09:9b:9d:c3:80:84:97:65:95:42:01:f3:4d:69:cf:
                    f2:42:9a:ac:b2:43:4e:f8:8c:7e:b1:91:44:e0:d3:
                    66:0e:b4:95:f7:bd:df:79:e3:cb:a9:88:8a:d3:09:
                    d7:a7:cd:d9:4f:04:5e:4e:55:35:2a:3a:b8:69:0a:
                    01:d8:ce:0e:e7:e5:9b:59:17:4b:5f:b9:60:89:5b:
                    1a:c8:fa:99:c8:f7:b0:38:df:a3:51:8e:22:f8:43:
                    ba:1d:35:6d:58:de:7e:42:97:a2:53:32:aa:04:2c:
                    a8:f4:a1:ee:dd:3b:ef:b9:8b:2a:b1:79:e4:30:b2:
                    b8:82:ff:37:45:ca:07:10:be:ad:37:7f:ed:cc:3b:
                    71:c4:d1:66:9b:56:3c:a7:c4:66:64:3c:fb:bc:24:
                    62:69:70:3f:4d:20:37:84:8b:c4:d3:c1:bd:92:a3:
                    2a:5f:37:e0:d6:2f:d9:4b:3d:d3:9f:9f:06:21:2b:
                    ae:39:ea:e8:33:75:ea:d2:1b:49:3f:cd:de:1a:a5:
                    cd:15:52:91:27:cf:0b:f6:65:3e:36:99:28:b7:a0:
                    cb:0d:02:f8:4e:98:71:fe:6d:5f:56:d1:eb:ee:04:
                    eb:00:e8:16:4d:8b:90:40:32:b2:ab:56:56:91:1b:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1E:BD:BF:E1:71:9E:E7:0D:38:80:5F:AE:67:B0:61:20:25:DC:8E
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3133312e3233392e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:5f:d0:3c:41:24:f6:9a:25:c3:8d:e4:54:fa:14:dc:fe:7c:
         20:7d:ee:49:db:67:52:bb:bb:ba:81:c7:df:a1:54:13:d9:c4:
         bd:de:0c:6d:88:20:c8:bd:df:4b:fd:90:2d:ec:77:c0:c4:88:
         35:ee:e8:a7:7f:0d:26:a0:e2:5a:d5:5a:6f:36:ee:c2:38:88:
         89:32:5c:0c:f3:51:ef:c4:e2:fb:7e:51:f1:26:f7:61:cf:97:
         8e:b4:f6:5e:0a:c8:30:ac:49:d4:5b:ae:a6:e9:a6:c1:78:4d:
         52:43:eb:7e:5f:4e:a1:95:0f:24:9f:88:94:be:ab:1d:10:af:
         7f:7c:8a:37:d0:90:11:d5:79:90:c7:48:42:31:37:bb:b2:d6:
         c6:9a:1b:37:89:ab:2b:da:a2:47:bb:3b:b9:cb:7f:21:f5:a4:
         7a:63:32:d8:82:7d:9e:10:4f:89:29:ef:33:a7:34:7d:c9:d5:
         30:b9:e4:81:6d:57:a6:5a:bb:16:50:c3:3f:d6:87:81:db:ec:
         09:bd:11:3b:19:89:8b:9a:33:b7:9f:ba:f6:7c:88:00:e1:c2:
         0d:33:52:92:fc:9a:ff:a4:45:eb:5b:34:c2:c8:5d:5a:cd:be:
         05:66:31:56:90:33:68:13:27:11:36:27:2b:17:9d:bf:71:61:
         57:a1:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:01:47 2025 by rpki-client