Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e38362e302e302f32312d3234203d3e203238313436.roa
File:                     3137372e38362e302e302f32312d3234203d3e203238313436.roa (raw, json)
Hash identifier:          RBz+Y/aPbDTUHfWK7QhFK1IeIdHWNRzqy/RP5YOx5NA=
Subject key identifier:   D6:EA:ED:B0:80:E6:21:A2:66:D1:65:5A:14:09:E1:91:A3:45:50:5F
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       57CEB876811F595FCAF8945622638FB92354EF05
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e38362e302e302f32312d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:57:06 +0000
ROA not before:           Mon 12 May 2025 12:52:06 +0000
ROA not after:            Mon 11 May 2026 12:57:06 +0000
asID:                     28146
IP address blocks:        177.86.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 03:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ce:b8:76:81:1f:59:5f:ca:f8:94:56:22:63:8f:b9:23:54:ef:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:52:06 2025 GMT
            Not After : May 11 12:57:06 2026 GMT
        Subject: CN=D6EAEDB080E621A266D1655A1409E191A345505F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:89:da:0c:cf:f5:3d:24:9e:d1:6e:b7:18:19:
                    17:fa:48:b4:b6:18:82:e8:bd:bd:ff:28:9c:ae:04:
                    34:9e:75:69:98:3f:7f:94:f3:70:29:9a:34:19:8e:
                    bd:01:50:4c:ae:e3:21:4f:04:c3:4f:c4:b5:d8:a2:
                    24:e8:16:14:f7:63:45:ac:fd:79:20:94:cc:ea:16:
                    59:02:6a:10:1f:ba:a7:e5:18:6a:a1:c8:05:8b:53:
                    94:9d:70:c2:e3:b0:04:4a:19:fb:ed:05:25:17:1b:
                    e4:91:14:96:66:b5:02:c6:35:f6:18:20:a0:eb:fb:
                    5f:9a:7a:86:aa:7e:36:ed:95:6c:ab:de:6e:47:0b:
                    c3:c8:32:b6:27:93:c4:d7:a7:1b:b7:65:2b:9d:bd:
                    0a:9c:17:ff:27:0d:0f:97:7f:5b:39:22:e3:18:26:
                    a2:04:35:1c:f4:95:49:cb:75:f4:5d:38:03:53:ed:
                    a4:b8:85:64:68:4f:4a:9a:c1:4f:a2:1a:b2:da:0d:
                    bd:0e:ae:cb:94:e4:4d:05:28:ec:a1:d3:94:eb:d9:
                    39:18:9b:c2:e5:d8:3a:d1:98:a4:4a:2a:97:5b:e6:
                    b1:63:99:57:ce:6b:32:54:60:a6:b2:ab:f7:14:86:
                    61:40:7d:c2:70:b1:cb:61:d8:b5:68:ae:54:0d:43:
                    19:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EA:ED:B0:80:E6:21:A2:66:D1:65:5A:14:09:E1:91:A3:45:50:5F
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3137372e38362e302e302f32312d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:d7:a8:71:b4:2c:92:86:a4:2c:74:47:e9:ed:f1:3c:d1:a0:
         5b:37:b1:07:cc:09:f4:2c:48:82:52:15:18:90:44:e9:0a:22:
         c6:41:ca:b4:5a:5e:59:4d:22:5a:7a:3c:54:74:87:06:39:95:
         2e:d8:17:ec:85:6f:c2:35:e1:3e:a2:2e:6d:21:da:7c:3b:3c:
         00:35:b2:d4:d7:5c:c5:77:9c:69:41:bd:68:f8:74:30:62:38:
         a3:46:11:7b:15:f6:f4:8d:2a:24:f5:4b:bf:36:24:d6:7e:15:
         b2:81:a8:25:7d:ad:be:e5:19:f9:b0:41:65:e6:80:07:d0:63:
         0f:18:1a:90:5b:2e:65:ea:73:5e:08:be:e1:3f:24:57:c4:d4:
         47:dd:ff:90:c3:c0:06:c7:0f:85:37:b3:c3:fb:cd:26:43:09:
         ac:b7:01:16:9a:0b:20:b0:0a:d0:33:54:77:e2:6e:02:b9:c4:
         a1:3a:e7:0f:85:a6:65:6c:f1:77:c1:25:0f:64:fe:77:bf:5f:
         e3:9f:30:f4:a4:ec:49:e7:04:3c:f2:20:31:ab:cd:3c:b4:bd:
         01:84:99:69:ae:8d:26:ea:50:50:5b:bb:1a:9f:cb:46:d5:4b:
         fe:50:3b:1d:7f:7e:20:18:64:50:fd:cb:5f:c5:b4:5c:f0:79:
         4f:e6:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:08:32 2025 by rpki-client