Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa
File:                     3137372e33382e39362e302f32312d3234203d3e20323632343033.roa (raw, json)
Hash identifier:          m5CoR7Fq0M+qjSqPMr7/zS3iw9JAykuD5v+oIlFdbX0=
Subject key identifier:   3B:0C:79:BF:2A:BA:E2:40:99:85:A8:3B:7B:31:92:23:93:6A:5C:89
Certificate issuer:       /CN=D02C5635F1D83800E7A8ED97154EC2A18CA501BC
Certificate serial:       5F51BF40A99B78A6C55A5A8524CE154C565DBD40
Authority key identifier: D0:2C:56:35:F1:D8:38:00:E7:A8:ED:97:15:4E:C2:A1:8C:A5:01:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa
Signing time:             Thu 11 Sep 2025 20:18:28 +0000
ROA not before:           Thu 11 Sep 2025 20:13:28 +0000
ROA not after:            Thu 10 Sep 2026 20:18:28 +0000
asID:                     262403
IP address blocks:        177.38.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl
                          rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 23:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:51:bf:40:a9:9b:78:a6:c5:5a:5a:85:24:ce:15:4c:56:5d:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D02C5635F1D83800E7A8ED97154EC2A18CA501BC
        Validity
            Not Before: Sep 11 20:13:28 2025 GMT
            Not After : Sep 10 20:18:28 2026 GMT
        Subject: CN=3B0C79BF2ABAE2409985A83B7B319223936A5C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:89:be:ca:6f:86:ef:fd:df:5d:30:aa:c0:76:
                    75:79:12:e0:7a:79:ac:16:48:a9:d7:7e:32:92:4b:
                    4a:d3:65:47:0a:04:35:65:7e:e6:9a:99:6f:8f:14:
                    11:39:64:77:c7:00:c2:9b:1a:ba:f2:1a:ea:da:64:
                    65:b6:c0:62:72:9a:d1:24:97:fd:94:29:3e:4b:02:
                    43:e0:2c:15:ef:c3:7f:73:a8:ec:fd:ce:55:cb:c9:
                    f3:b3:ad:ed:30:2f:fa:2e:ae:16:83:50:97:36:66:
                    64:ad:9c:f4:f1:64:45:a8:29:62:b7:8d:f0:f7:27:
                    a7:97:1e:dd:ec:42:a2:9e:81:3f:22:d9:64:d2:e1:
                    67:dd:f9:bd:84:b2:25:a4:a2:7f:16:02:46:f9:02:
                    ac:35:d0:d8:c9:17:b9:e4:c9:f2:cf:05:cb:f1:2c:
                    6d:7b:91:53:a9:4a:a7:f1:d2:92:39:b6:57:32:53:
                    c0:7d:7e:3d:8f:a9:4f:e7:4b:0b:5f:f6:26:67:59:
                    95:d6:ca:bd:20:2a:46:5d:46:0b:b0:7c:7c:46:94:
                    f6:8d:d1:4d:18:e2:1e:41:6a:11:c6:19:19:86:54:
                    c2:9a:32:d8:22:e6:38:27:30:d8:01:a9:48:90:7d:
                    ca:e5:13:4b:c5:93:8e:e4:30:3f:97:d5:16:a5:23:
                    06:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0C:79:BF:2A:BA:E2:40:99:85:A8:3B:7B:31:92:23:93:6A:5C:89
            X509v3 Authority Key Identifier:
                keyid:D0:2C:56:35:F1:D8:38:00:E7:A8:ED:97:15:4E:C2:A1:8C:A5:01:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:c8:98:b5:ed:d0:dd:ef:cf:82:f3:5f:e5:0a:f6:ac:85:6a:
         41:b2:c2:79:3e:d3:fc:f6:ec:a7:87:40:f9:81:0c:41:5a:4e:
         1a:8b:6b:64:45:f1:7f:9e:26:69:cd:58:58:6b:00:70:db:4c:
         76:9e:10:7e:cd:a9:45:23:fa:0f:e6:13:79:f7:28:bd:34:8e:
         3d:ab:7b:61:d5:10:6a:fe:13:40:30:28:0c:60:80:c5:b7:09:
         aa:19:1b:ff:bb:9d:0b:9a:89:ac:41:eb:c0:38:d1:47:ff:bb:
         bd:a0:d8:33:cb:ac:c2:4c:1e:92:67:e5:4f:01:14:b4:39:12:
         20:d5:8b:10:33:d0:7d:8e:90:f6:f5:43:25:15:1a:40:c4:8a:
         5a:a2:56:ca:70:b9:b2:81:2c:db:ea:98:ac:a2:85:59:2c:53:
         a5:e9:a4:d8:01:7c:99:8a:78:5e:0e:a8:06:2b:97:ef:22:4e:
         10:3f:dd:d9:ec:0d:12:f2:c2:c4:80:bc:34:52:19:b7:4f:87:
         3b:04:8e:49:54:d4:9f:ca:72:5f:73:c5:8a:56:fe:27:d2:ae:
         93:13:e5:54:73:e8:9b:c2:c9:41:48:21:06:3a:37:87:b2:25:
         94:7e:94:ef:ea:fa:5a:8b:5a:28:07:5c:1b:d0:63:d3:d6:c0:
         06:a0:0e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:33:03 2025 by rpki-client