Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/3137372e3132392e3137322e302f32322d3332203d3e20323632393337.roa
File:                     3137372e3132392e3137322e302f32322d3332203d3e20323632393337.roa (raw, json)
Hash identifier:          iqNa56tx//+u9qieIK9DOLwqegcy4lUTN5G/wjF6sJ0=
Subject key identifier:   FC:7F:35:A6:2B:7F:05:83:7C:29:DB:0E:2A:61:5C:2E:4C:37:4A:CD
Certificate issuer:       /CN=D5A1856A52E7F9EBF280FCB86750839A6466C111
Certificate serial:       3938D7C5E5DBC0261620BDAFF98E09DA78B2DE46
Authority key identifier: D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/3137372e3132392e3137322e302f32322d3332203d3e20323632393337.roa
Signing time:             Mon 15 Sep 2025 13:21:34 +0000
ROA not before:           Mon 15 Sep 2025 13:16:34 +0000
ROA not after:            Mon 14 Sep 2026 13:21:34 +0000
asID:                     262937
IP address blocks:        177.129.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl
                          rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:38:d7:c5:e5:db:c0:26:16:20:bd:af:f9:8e:09:da:78:b2:de:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A1856A52E7F9EBF280FCB86750839A6466C111
        Validity
            Not Before: Sep 15 13:16:34 2025 GMT
            Not After : Sep 14 13:21:34 2026 GMT
        Subject: CN=FC7F35A62B7F05837C29DB0E2A615C2E4C374ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:f1:a3:5b:69:d0:d6:90:b9:f2:ae:de:55:
                    e9:d9:ed:e6:b6:c1:2c:fd:ef:f6:22:f7:39:6c:78:
                    82:4f:64:a9:cf:e6:5f:28:47:bd:5d:30:78:47:d9:
                    60:4d:71:b3:f4:f1:6e:09:d3:0b:60:1a:38:47:52:
                    a5:02:18:0b:ef:c3:22:f0:e1:c2:b1:e8:f5:7b:f2:
                    fd:87:20:4f:87:6f:35:03:0c:52:7f:eb:d0:7e:bb:
                    b3:97:b3:b5:a1:cb:ce:7b:4d:8e:44:d0:72:96:7c:
                    9b:f2:c7:31:d4:06:fd:8c:c3:7f:45:7e:f4:49:07:
                    39:11:11:80:ff:a3:a6:53:0a:70:ec:02:fc:78:6d:
                    9d:a8:87:92:f3:fc:ca:8f:55:ab:e4:db:56:7b:39:
                    6c:a0:5a:0a:50:b9:c8:a7:dd:9e:a0:aa:db:0b:a2:
                    16:cc:71:5b:23:3e:5d:5a:23:0a:ac:de:c8:2b:0a:
                    8b:19:b9:02:b1:15:7d:29:a3:34:3e:80:37:b7:59:
                    ed:06:5b:48:ef:ab:3a:12:45:5b:38:af:47:a7:aa:
                    f3:40:1e:d4:cb:ad:25:fc:6e:c9:ec:2c:5f:17:b7:
                    a4:2e:22:28:f3:d2:d9:d1:63:3c:27:e7:33:7a:81:
                    cc:ff:66:94:0e:84:1d:3a:bc:06:dc:06:fe:53:f9:
                    bf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7F:35:A6:2B:7F:05:83:7C:29:DB:0E:2A:61:5C:2E:4C:37:4A:CD
            X509v3 Authority Key Identifier:
                keyid:D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/3137372e3132392e3137322e302f32322d3332203d3e20323632393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:c9:33:0f:4b:91:52:86:8c:87:5b:a5:98:e0:e3:82:63:38:
         4e:88:42:e3:56:07:b6:8f:e1:d1:8c:be:7b:02:de:ed:43:17:
         d1:bc:de:2b:e5:40:e8:a0:47:30:4b:6e:1d:e3:47:53:e1:3d:
         7b:cd:e5:8d:1c:f6:66:0e:1d:2c:ea:ac:1a:e2:91:94:bb:6c:
         a8:0e:47:3d:2d:d7:71:d6:58:ef:3a:45:87:ca:6e:13:5e:85:
         c6:4b:ff:46:10:74:97:17:d3:51:b1:dd:e1:83:42:a5:14:31:
         5a:7e:1c:9b:3e:ae:b7:7e:55:6f:6b:ba:f0:b9:7e:98:27:12:
         c1:2b:5f:a6:24:a1:83:a4:b9:31:49:73:a6:b3:12:28:58:9e:
         ca:86:d3:ab:d3:9e:e6:d6:8a:f6:48:2f:77:04:46:1e:d6:d8:
         30:cc:31:06:06:2b:10:55:2b:dc:e0:15:5a:b9:e2:c3:68:a1:
         0d:d5:7c:3a:48:02:8e:3f:85:e7:53:56:1a:5f:7e:54:1a:9f:
         88:9a:7f:e0:15:4b:c2:78:31:73:55:43:a7:f3:1c:58:ee:40:
         51:4e:b1:f4:7b:ab:1e:71:04:63:61:6b:d8:4f:d8:da:8c:62:
         62:8c:f3:e9:9c:16:9a:0a:cc:ed:1d:ef:ca:5a:7a:28:7a:88:
         4e:5a:d9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:54:23 2025 by rpki-client