Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3138382e302f32342d3332203d3e20323632363439.roa
File:                     3137372e3130352e3138382e302f32342d3332203d3e20323632363439.roa (raw, json)
Hash identifier:          cBDNzMbOUvjJ0B80+q27awBGCyJze/4YP/NOckZez8M=
Subject key identifier:   8D:6A:17:CC:F3:FD:62:20:73:1F:F3:E5:8E:57:2E:53:1C:C0:9E:F6
Certificate issuer:       /CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
Certificate serial:       351D983ED09B3A18986FC7621E147B3C6E8CF50A
Authority key identifier: B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3138382e302f32342d3332203d3e20323632363439.roa
Signing time:             Tue 28 Jul 2026 13:38:14 +0000
ROA not before:           Tue 28 Jul 2026 13:33:14 +0000
ROA not after:            Tue 27 Jul 2027 13:38:14 +0000
asID:                     262649
IP address blocks:        177.105.188.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl
                          rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1d:98:3e:d0:9b:3a:18:98:6f:c7:62:1e:14:7b:3c:6e:8c:f5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
        Validity
            Not Before: Jul 28 13:33:14 2026 GMT
            Not After : Jul 27 13:38:14 2027 GMT
        Subject: CN=8D6A17CCF3FD6220731FF3E58E572E531CC09EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9a:e6:0c:28:75:3a:1b:b1:c8:7e:a8:ea:2d:
                    ac:59:98:c3:d8:7a:6f:80:32:46:e9:cc:c3:13:d0:
                    66:c3:dd:cb:05:0d:1d:91:ff:84:51:bd:3f:e7:53:
                    20:a9:00:c6:f1:14:1b:6f:b3:91:a2:94:89:6f:c9:
                    87:ab:6b:83:71:46:c8:4d:cd:c5:b6:6e:30:1c:36:
                    52:ff:60:08:0b:d4:18:84:3d:db:91:4f:22:a5:a3:
                    ee:df:dd:0b:3c:13:b1:a6:39:8a:e2:db:70:43:76:
                    19:f2:b7:16:f5:44:14:34:3b:ba:53:b0:0c:1b:55:
                    e0:c1:78:8b:ba:cd:e6:98:ce:54:78:c9:85:a1:d7:
                    2d:12:95:91:d9:25:ca:2f:4a:c2:79:f4:d6:95:41:
                    72:ef:3c:f8:23:2c:7a:82:6d:7e:86:d4:b0:91:9e:
                    2b:de:e8:27:4b:75:ba:ce:3c:25:32:09:ad:0f:67:
                    73:ae:43:fd:55:0a:89:59:71:57:08:67:38:b7:ed:
                    6e:56:7c:c1:9c:f9:a3:b8:20:2e:e4:6a:2c:67:96:
                    f2:cd:bf:d4:75:3b:32:34:71:ca:63:cb:71:c6:76:
                    f5:fe:21:a8:48:dd:15:e4:9f:29:8e:eb:8a:64:c6:
                    32:46:31:33:b9:c9:6c:53:a5:b5:b9:82:57:80:95:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6A:17:CC:F3:FD:62:20:73:1F:F3:E5:8E:57:2E:53:1C:C0:9E:F6
            X509v3 Authority Key Identifier:
                keyid:B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3138382e302f32342d3332203d3e20323632363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:e6:3f:56:18:20:03:7b:5c:db:0e:0d:60:79:4f:52:df:1d:
         6a:2a:49:57:14:7f:d5:0d:c0:90:b5:7a:1e:33:c2:91:36:c6:
         75:3b:08:7d:4f:c1:23:41:fd:1d:2c:ad:10:5d:4c:2a:34:9b:
         f1:4f:14:f6:f6:0e:c7:04:78:a1:1d:d3:55:94:3a:6e:83:f8:
         cf:20:ed:52:71:ac:f6:64:98:a0:77:78:aa:20:7a:aa:0e:f1:
         ae:2c:d3:20:fa:88:31:66:de:61:76:14:c9:92:4b:eb:e5:ea:
         f2:06:ff:a9:6b:83:35:39:32:65:d8:5f:9e:57:ae:6b:a8:7c:
         8e:de:11:74:b1:30:de:3f:a3:d9:ce:f8:6d:cc:5d:59:25:45:
         45:26:78:77:a3:f5:a1:72:23:a7:a5:bb:ae:56:43:a2:b3:f1:
         cf:dc:fc:f8:9f:d7:a5:40:e6:65:c4:d6:d8:df:a5:b7:1e:3f:
         10:df:0a:93:82:45:2f:ef:41:0f:53:4b:05:60:4a:d7:f8:6a:
         d9:27:25:0e:13:35:25:23:1a:b8:51:ba:ad:86:49:a6:af:b4:
         54:e2:c0:33:b6:f2:c1:b9:93:83:8f:e7:aa:c8:c2:a3:2b:c3:
         89:91:e1:5a:41:c3:79:35:82:f5:8c:70:b5:81:0f:f2:3c:20:
         7e:d2:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----