Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3138352e302f32342d3332203d3e20323632363439.roa
File:                     3137372e3130352e3138352e302f32342d3332203d3e20323632363439.roa (raw, json)
Hash identifier:          ADX3ncTKsyU2+UdMehJZhayqXIHrzlTylhbb2xi8qQA=
Subject key identifier:   7D:8C:8E:FD:49:F4:59:47:8E:E9:AF:F0:2C:DB:79:30:8C:B4:43:0C
Certificate issuer:       /CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
Certificate serial:       58CC7F4A3D04CE956FE2D40F7F117E6A2C95E852
Authority key identifier: B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3138352e302f32342d3332203d3e20323632363439.roa
Signing time:             Tue 28 Jul 2026 13:38:11 +0000
ROA not before:           Tue 28 Jul 2026 13:33:11 +0000
ROA not after:            Tue 27 Jul 2027 13:38:11 +0000
asID:                     262649
IP address blocks:        177.105.185.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl
                          rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cc:7f:4a:3d:04:ce:95:6f:e2:d4:0f:7f:11:7e:6a:2c:95:e8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
        Validity
            Not Before: Jul 28 13:33:11 2026 GMT
            Not After : Jul 27 13:38:11 2027 GMT
        Subject: CN=7D8C8EFD49F459478EE9AFF02CDB79308CB4430C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:1c:09:a8:a5:b6:c7:8a:8f:b7:05:30:68:53:
                    10:fe:ca:73:2d:fd:7e:79:8c:e5:f8:fa:c2:fe:ad:
                    ff:93:9f:b5:c6:92:3d:c2:cb:16:08:44:47:28:99:
                    53:55:09:8c:29:ba:22:d7:8b:99:93:bd:02:9f:94:
                    0d:51:c5:22:6d:dc:73:be:b5:4c:cc:7b:63:fb:98:
                    3d:40:6e:85:b1:bf:a4:44:55:e3:54:72:de:5c:02:
                    ec:6a:68:fa:fd:13:41:c8:89:58:52:fa:c0:8b:10:
                    e3:d5:49:f2:7a:f9:c9:13:7e:2c:45:78:94:c5:bd:
                    b7:f8:59:0f:fa:2a:4d:8c:b7:eb:5e:1c:13:41:32:
                    92:7d:ed:df:0e:b0:26:97:b1:21:50:71:05:a7:93:
                    d6:95:d3:07:45:aa:1f:6d:34:7a:52:d9:8f:45:6f:
                    e8:2c:dd:db:ae:8f:d5:57:fd:05:57:46:c9:69:f2:
                    5a:60:a4:74:2a:dc:e2:1d:c2:98:85:68:68:c0:f3:
                    d0:41:25:f2:e5:50:ea:98:a7:5c:36:fc:c7:d2:57:
                    2e:9e:97:8b:29:3d:2d:4d:c7:48:c6:8a:4b:c4:9d:
                    fc:5e:ec:e1:72:3e:17:22:c3:96:a7:f5:88:bb:74:
                    c8:e0:d3:e1:41:a2:6d:1b:9e:1a:1e:bd:d9:5f:c5:
                    90:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8C:8E:FD:49:F4:59:47:8E:E9:AF:F0:2C:DB:79:30:8C:B4:43:0C
            X509v3 Authority Key Identifier:
                keyid:B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3138352e302f32342d3332203d3e20323632363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:87:13:97:ed:52:44:3a:fe:a0:2a:a1:da:fd:ab:b1:a6:95:
         19:9b:ab:85:cb:b5:98:46:cb:7e:6f:b7:fa:50:59:48:16:f3:
         73:30:3a:4a:78:a6:f5:98:03:a1:30:30:3b:c9:e0:74:89:6d:
         1a:59:e4:8d:fc:c0:d4:da:7c:d2:c1:66:ce:8b:21:50:04:e5:
         b6:fd:b8:2c:82:ad:bc:ca:7a:33:81:27:e4:0a:53:f0:da:cb:
         67:7a:84:53:75:d5:3f:4c:e3:8a:eb:7b:dd:d5:67:8b:70:54:
         df:3a:91:df:88:e7:5b:0f:54:3c:d6:3c:62:36:78:b5:63:51:
         d0:65:26:0f:93:82:1b:48:01:13:bc:b3:30:45:75:d3:75:64:
         d8:d9:ae:9d:e4:6d:5d:dd:3f:ac:a9:5d:da:49:ab:11:6b:c8:
         30:ca:b4:dd:9a:0e:56:26:87:65:2a:e3:b7:5c:86:49:d9:c0:
         0a:41:a6:0d:b3:5c:70:83:0f:1d:b2:89:f2:26:7a:4a:bc:12:
         ce:1d:0b:f5:df:da:30:29:df:48:c7:9b:90:44:0a:7f:2e:ee:
         fc:e3:88:f1:e9:c9:42:4d:cc:0c:88:67:44:f5:97:de:87:80:
         d2:b9:51:58:19:10:81:5f:43:af:10:7f:14:dc:9b:ec:91:26:
         2b:66:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----