Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35332e302f32342d3234203d3e20323632353033.roa
File:                     3137372e39312e35332e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          aUJUlFRafk4yTlE/M2HRsWPQT0tZX2T4mZ4dA8QTHJc=
Subject key identifier:   2D:61:AA:A5:96:AF:4A:8E:E0:E5:5B:C1:81:2B:61:55:5A:33:32:AA
Certificate issuer:       /CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Certificate serial:       0ED100295D8E4C3105C5F9760310B2A54159D77B
Authority key identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35332e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 19 Aug 2025 20:06:21 +0000
ROA not before:           Tue 19 Aug 2025 20:01:21 +0000
ROA not after:            Tue 18 Aug 2026 20:06:21 +0000
asID:                     262503
IP address blocks:        177.91.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d1:00:29:5d:8e:4c:31:05:c5:f9:76:03:10:b2:a5:41:59:d7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
        Validity
            Not Before: Aug 19 20:01:21 2025 GMT
            Not After : Aug 18 20:06:21 2026 GMT
        Subject: CN=2D61AAA596AF4A8EE0E55BC1812B61555A3332AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:32:cb:18:6e:2c:4d:eb:53:be:07:81:af:
                    da:4d:62:4e:62:13:dc:57:8c:6c:f6:71:1c:85:4c:
                    5d:c3:0d:aa:32:69:5b:e1:0a:8b:db:d2:b7:13:1f:
                    1d:b6:eb:a5:14:e8:7f:df:7d:11:56:ad:34:29:48:
                    92:f8:98:87:5c:19:97:3d:7f:4f:03:05:83:bc:6c:
                    33:c1:44:ff:49:d7:45:e7:1f:2e:9f:ef:cc:d9:b7:
                    65:51:f5:9b:f7:5e:97:e3:22:8e:55:f3:83:04:8c:
                    a9:d9:46:f7:79:f1:4d:4d:b6:53:c5:68:d5:b2:76:
                    a0:15:d6:7a:af:31:cb:88:7a:90:8c:e1:9b:24:bb:
                    07:bf:e4:97:51:be:e2:9e:03:26:73:ac:e8:3c:20:
                    7f:77:f6:0f:34:34:6d:48:b6:11:02:6c:b3:58:7b:
                    23:9d:71:19:09:e7:35:a8:fe:85:9a:fd:62:ef:6a:
                    6c:9d:81:51:b4:6f:34:9e:61:29:35:b7:e9:f1:da:
                    d5:04:02:b1:03:75:a9:43:23:91:81:bc:1c:0d:7a:
                    22:cb:dc:27:ca:92:5f:7a:26:8b:86:69:86:d0:93:
                    09:0e:5d:aa:2a:56:11:de:60:c5:59:5c:af:4f:56:
                    c5:f9:c7:fc:61:1b:79:a1:6a:08:ca:2f:94:a9:23:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:61:AA:A5:96:AF:4A:8E:E0:E5:5B:C1:81:2B:61:55:5A:33:32:AA
            X509v3 Authority Key Identifier:
                keyid:12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35332e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:97:40:fd:86:f8:5a:12:58:09:43:5c:f7:f4:71:51:8b:df:
         30:9e:5e:21:fc:0d:4e:ad:96:6f:68:49:63:55:f3:24:ca:e1:
         c4:d0:66:8b:bc:1b:7b:62:84:3f:aa:20:4a:5e:7a:2a:42:4e:
         61:34:d1:49:8e:97:66:c7:78:a4:c3:b0:af:41:05:7c:8d:77:
         8f:e1:d4:bb:0a:f8:c5:a3:e3:4e:df:8a:c0:3d:45:e1:94:e0:
         d4:90:0c:81:2d:2c:fa:4c:35:d8:3b:44:c5:d4:d7:15:35:ce:
         11:f2:e2:eb:b9:6c:37:d7:72:f9:b8:9f:9a:78:fd:b2:7f:c8:
         3a:80:6a:2e:9e:8f:70:38:10:d6:0d:a6:73:38:48:94:46:0a:
         39:bb:aa:0e:17:2c:5a:c1:40:1f:05:06:1d:35:e9:0d:6f:0e:
         35:bd:46:2d:cb:20:16:b6:ab:3f:61:a2:69:02:87:d0:7a:4b:
         03:d6:d0:5f:0d:d4:bf:06:46:0b:dc:95:e1:6e:04:a5:a7:28:
         c8:61:55:57:de:39:f8:0c:43:0c:b9:37:e2:90:a8:10:51:1e:
         03:62:36:67:9e:c4:bb:4b:8f:dd:e1:51:cd:76:45:3c:c6:ff:
         a9:56:0e:6f:27:59:0c:01:92:cc:5d:76:7a:9f:14:f5:37:5a:
         09:78:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:24:09 2025 by rpki-client