Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137362e302f32312d3234203d3e20323633303335.roa
File:                     3137372e32302e3137362e302f32312d3234203d3e20323633303335.roa (raw, json)
Hash identifier:          kv57pYHfuuxATuGz46cr8jnN8WqxJ5N5/Ki41RtuMAw=
Subject key identifier:   3A:87:24:46:90:F2:13:C6:FE:54:22:A9:01:37:3F:D5:23:C9:B4:4F
Certificate issuer:       /CN=F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2
Certificate serial:       2502D87B35CB4757F439A137E83A1AA77D06C664
Authority key identifier: F7:A2:A2:F4:D3:ED:A6:2F:73:C3:39:EB:AB:3C:E8:E9:CC:F1:47:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137362e302f32312d3234203d3e20323633303335.roa
Signing time:             Wed 17 Sep 2025 14:03:03 +0000
ROA not before:           Wed 17 Sep 2025 13:58:03 +0000
ROA not after:            Wed 16 Sep 2026 14:03:03 +0000
asID:                     263035
IP address blocks:        177.20.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2.crl
                          rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:02:d8:7b:35:cb:47:57:f4:39:a1:37:e8:3a:1a:a7:7d:06:c6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2
        Validity
            Not Before: Sep 17 13:58:03 2025 GMT
            Not After : Sep 16 14:03:03 2026 GMT
        Subject: CN=3A87244690F213C6FE5422A901373FD523C9B44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:07:56:3d:45:b8:f9:41:4c:87:83:99:43:f7:
                    da:34:e9:6b:a1:14:b7:9b:9e:0c:d2:36:da:07:f6:
                    8b:c4:38:73:7f:f7:d3:1a:ba:13:87:3b:bf:ef:2f:
                    0a:fe:fa:a2:3b:35:5a:fa:f5:37:8a:43:0c:0f:f3:
                    99:0f:67:d2:d9:f5:d0:94:f3:1b:4c:dd:d3:25:0d:
                    e7:ef:4a:dc:4b:b4:6f:e6:e9:52:c8:ba:ad:0e:9a:
                    9a:9d:9e:26:f1:b3:37:90:4a:3c:ca:b9:f9:b4:8c:
                    5c:6d:cd:82:e4:8d:77:6c:69:4b:7b:61:3b:98:e1:
                    2c:52:c9:ce:b8:f3:bc:c3:61:f5:66:96:10:10:dd:
                    29:d2:70:a2:83:db:6a:fe:02:e4:42:73:36:30:f3:
                    a6:57:00:34:69:68:ce:2e:a5:a2:3c:60:cc:63:5e:
                    f9:e2:c3:a2:9f:57:4c:9b:95:5d:f5:a9:5f:7a:f8:
                    51:78:9c:e8:ea:3e:a5:a1:4d:0c:8c:5b:f1:99:39:
                    3a:3e:b1:c8:0f:90:f3:a1:17:e8:af:4c:3d:29:ab:
                    bb:4f:26:54:a5:02:0f:1c:11:25:e0:7a:61:49:e5:
                    5d:d6:8a:5d:53:8b:9b:c6:18:fb:6e:71:3f:b9:88:
                    5f:77:21:6b:de:74:46:6d:e2:46:70:eb:37:ac:4e:
                    04:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:87:24:46:90:F2:13:C6:FE:54:22:A9:01:37:3F:D5:23:C9:B4:4F
            X509v3 Authority Key Identifier:
                keyid:F7:A2:A2:F4:D3:ED:A6:2F:73:C3:39:EB:AB:3C:E8:E9:CC:F1:47:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3137372e32302e3137362e302f32312d3234203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:ac:bc:d8:e6:34:7a:a3:28:94:c8:bc:47:ca:ef:8d:4f:3f:
         e3:37:73:88:b4:5b:a9:37:12:41:87:65:43:aa:7f:7d:94:38:
         ef:e1:a5:ad:c4:04:23:14:25:68:9b:4d:3e:9a:8b:02:98:3d:
         c0:7e:bf:19:26:d4:38:96:00:43:23:bb:ce:33:4b:39:ba:b2:
         6f:a0:4f:6e:e9:cb:77:27:e3:8c:00:e8:ad:41:c2:e9:7d:0e:
         75:9b:29:35:e8:bb:06:dd:cc:46:75:8c:d6:fe:c0:57:d5:58:
         00:0b:72:f0:80:ac:33:f6:85:98:8b:17:1e:03:80:2a:6f:c6:
         a6:93:99:df:53:3f:2c:0f:56:fa:0c:f1:53:4e:82:47:58:a1:
         a6:07:91:fb:c5:32:4a:6e:6a:e9:80:9c:c4:4d:d8:03:7e:f6:
         26:96:0e:d7:7b:91:a6:28:8c:89:88:5f:e2:b4:6d:ce:f7:dd:
         ee:5a:74:34:a1:8c:7f:18:f2:2b:1e:77:19:6a:c4:c2:45:65:
         0f:6b:e7:df:ce:8e:94:28:1d:67:6f:e0:c6:04:91:a0:ce:e8:
         6c:8e:3f:8f:bb:e7:bd:73:a5:64:b3:b5:7a:d8:f8:78:79:35:
         cd:b7:f2:da:5a:69:97:8a:15:8b:64:b2:cf:6a:49:b7:d9:a7:
         f1:d1:d6:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJQLYezXLR1f0OaE36Doap30GxmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdBMkEyRjREM0VEQTYyRjczQzMzOUVCQUIzQ0U4RTlD
Q0YxNDdFMjAeFw0yNTA5MTcxMzU4MDNaFw0yNjA5MTYxNDAzMDNaMDMxMTAvBgNV
BAMTKDNBODcyNDQ2OTBGMjEzQzZGRTU0MjJBOTAxMzczRkQ1MjNDOUI0NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPB1Y9Rbj5QUyHg5lD99o06Wuh
FLebngzSNtoH9ovEOHN/99MauhOHO7/vLwr++qI7NVr69TeKQwwP85kPZ9LZ9dCU
8xtM3dMlDefvStxLtG/m6VLIuq0OmpqdnibxszeQSjzKufm0jFxtzYLkjXdsaUt7
YTuY4SxSyc6487zDYfVmlhAQ3SnScKKD22r+AuRCczYw86ZXADRpaM4upaI8YMxj
Xvniw6KfV0yblV31qV96+FF4nOjqPqWhTQyMW/GZOTo+scgPkPOhF+ivTD0pq7tP
JlSlAg8cESXgemFJ5V3Wil1Ti5vGGPtucT+5iF93IWvedEZt4kZw6zesTgSfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOockRpDyE8b+VCKpATc/1SPJtE8wHwYDVR0j
BBgwFoAU96Ki9NPtpi9zwznrqzzo6czxR+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpNcmRVZ2p6cnlHeXlxd2FpMTRlZXo5elZqWnRieTZ6R3IxcUJ0QW9K
RDIvMC9GN0EyQTJGNEQzRURBNjJGNzNDMzM5RUJBQjNDRThFOUNDRjE0N0UyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3QTJBMkY0RDNFREE2MkY3
M0MzMzlFQkFCM0NFOEU5Q0NGMTQ3RTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKTXJkVWdqenJ5R3l5cXdhaTE0ZWV6OXpWalp0Ynk2ekdyMXFCdEFvSkQyLzAv
MzEzNzM3MmUzMjMwMmUzMTM3MzYyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxFLAwDQYJKoZIhvcNAQELBQADggEBAIGsvNjm
NHqjKJTIvEfK741PP+M3c4i0W6k3EkGHZUOqf32UOO/hpa3EBCMUJWibTT6aiwKY
PcB+vxkm1DiWAEMju84zSzm6sm+gT27py3cn44wA6K1Bwul9DnWbKTXouwbdzEZ1
jNb+wFfVWAALcvCArDP2hZiLFx4DgCpvxqaTmd9TPywPVvoM8VNOgkdYoaYHkfvF
MkpuaumAnMRN2AN+9iaWDtd7kaYojImIX+K0bc733e5adDShjH8Y8isedxlqxMJF
ZQ9r59/OjpQoHWdv4MYEkaDO6GyOP4+7571zpWSztXrY+Hh5Nc238tpaaZeKFYtk
ss9qSbfZp/HR1kg=
-----END CERTIFICATE-----
Generated at Thu Sep 18 11:57:50 2025 by rpki-client