Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3137372e382e3232342e302f32302d3234203d3e203238313836.roa
File:                     3137372e382e3232342e302f32302d3234203d3e203238313836.roa (raw, json)
Hash identifier:          4QCJme3Qx1fd8teGEAhurM/e2BkTiyAVEkbenftYOvI=
Subject key identifier:   76:92:02:D7:C7:02:F8:D8:15:60:A3:D7:C9:C6:64:C4:01:BB:8B:7E
Certificate issuer:       /CN=8CAC75CE2881CD7669B1A00B98185D6B35836A16
Certificate serial:       1B8C9FD930481C649D243A662D063720DE3A7D7E
Authority key identifier: 8C:AC:75:CE:28:81:CD:76:69:B1:A0:0B:98:18:5D:6B:35:83:6A:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAC75CE2881CD7669B1A00B98185D6B35836A16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3137372e382e3232342e302f32302d3234203d3e203238313836.roa
Signing time:             Wed 27 Aug 2025 21:10:52 +0000
ROA not before:           Wed 27 Aug 2025 21:05:52 +0000
ROA not after:            Wed 26 Aug 2026 21:10:52 +0000
asID:                     28186
IP address blocks:        177.8.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.crl
                          rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAC75CE2881CD7669B1A00B98185D6B35836A16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8c:9f:d9:30:48:1c:64:9d:24:3a:66:2d:06:37:20:de:3a:7d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAC75CE2881CD7669B1A00B98185D6B35836A16
        Validity
            Not Before: Aug 27 21:05:52 2025 GMT
            Not After : Aug 26 21:10:52 2026 GMT
        Subject: CN=769202D7C702F8D81560A3D7C9C664C401BB8B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:31:d1:ad:fc:ad:b5:91:7e:9b:e9:98:23:
                    18:0f:cd:01:b6:bd:6f:2d:4d:87:62:1a:55:cd:2b:
                    10:b7:be:fe:d9:cd:d1:cb:c0:a3:5e:76:18:55:8e:
                    9f:41:e0:47:db:d2:31:01:74:41:f9:a6:da:f0:e5:
                    b5:f5:a5:2e:95:b0:31:ec:0c:d6:d5:38:ba:cd:83:
                    30:f3:84:c1:ec:9f:62:06:2d:f6:fc:aa:5c:22:18:
                    37:0f:d0:57:ca:78:32:d7:13:6b:be:31:89:e9:53:
                    20:86:88:c2:cb:22:bf:8f:80:c9:18:cd:11:bb:aa:
                    94:58:b9:f7:b8:d6:d8:9b:76:38:c5:3e:9c:e6:8e:
                    9e:75:6d:87:8f:fc:68:d8:99:53:6e:72:4e:6e:39:
                    c8:76:a8:bc:cc:e2:ca:3d:9b:57:5b:97:9b:e8:76:
                    70:bc:a9:34:79:75:e3:72:c7:95:49:2d:5b:44:ad:
                    73:f3:33:b9:2e:84:3c:b6:eb:d9:cc:10:7a:35:1b:
                    ac:44:a2:9d:d0:db:97:95:90:9d:1e:d1:07:65:ba:
                    0d:13:4b:29:3c:f3:9d:9c:40:70:9c:e1:25:4d:05:
                    af:2f:8d:3b:90:66:26:6d:62:a0:10:8d:30:15:37:
                    c0:6f:0a:0f:21:95:04:dc:95:4c:c6:ab:19:b7:80:
                    14:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:92:02:D7:C7:02:F8:D8:15:60:A3:D7:C9:C6:64:C4:01:BB:8B:7E
            X509v3 Authority Key Identifier:
                keyid:8C:AC:75:CE:28:81:CD:76:69:B1:A0:0B:98:18:5D:6B:35:83:6A:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/8CAC75CE2881CD7669B1A00B98185D6B35836A16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAC75CE2881CD7669B1A00B98185D6B35836A16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/3137372e382e3232342e302f32302d3234203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:f1:1a:d6:d2:dd:24:e9:ae:06:75:28:34:89:60:6e:c3:ec:
         8f:84:c8:2f:c9:5b:18:ca:9b:b7:90:c5:65:20:31:fd:b2:7f:
         c0:ac:03:40:09:6c:b8:ee:dd:d8:27:83:3c:ce:5f:e5:2b:2b:
         6b:37:dd:e4:8c:18:87:8f:ff:6c:21:a6:b5:83:ea:2e:6e:78:
         3e:b9:ab:84:3f:ce:0f:bb:84:cd:80:e4:87:9a:07:ac:e8:07:
         92:29:e0:a5:fa:54:be:1a:cd:5f:a5:77:20:b9:9c:c6:cf:62:
         ff:ca:bb:64:c8:6c:3e:98:d9:ab:7b:49:38:35:3a:b2:95:7f:
         19:df:89:ba:84:83:a9:cf:89:87:ae:54:08:60:f3:ee:a5:96:
         81:f5:fc:c6:3c:f6:d4:b9:7b:ab:d9:f5:b6:1c:94:58:07:f8:
         e4:42:b8:af:e6:a3:26:8a:a5:a6:0c:05:b3:0b:5a:03:b7:ec:
         4e:33:a2:dd:7f:80:14:bf:0f:c9:61:65:c3:e3:08:ee:8b:8e:
         15:40:c1:8a:c4:b7:40:08:e0:d1:45:38:51:d4:b9:f3:19:d1:
         8e:7f:66:66:30:0b:65:57:67:26:0e:b0:50:e9:30:9b:20:d6:
         a8:5a:d1:dc:64:75:e0:0b:0e:c1:76:78:29:f8:4a:dd:df:8c:
         65:3b:f1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:14:21 2025 by rpki-client