Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137322e302f32342d3234203d3e20323633343539.roa
File:                     3137372e3139302e3137322e302f32342d3234203d3e20323633343539.roa (raw, json)
Hash identifier:          GDRiguXaqSQH6rza4wkArTFlkPunVnws55wrj9PyD00=
Subject key identifier:   98:74:6B:52:3B:EF:C4:30:28:33:CF:15:49:AB:00:76:E0:C1:E9:52
Certificate issuer:       /CN=45F27CD9C3E3270541BD1546980E4392BDC5E69C
Certificate serial:       7B8605FC457A59A393F5EA6EBA14BA1280374B05
Authority key identifier: 45:F2:7C:D9:C3:E3:27:05:41:BD:15:46:98:0E:43:92:BD:C5:E6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45F27CD9C3E3270541BD1546980E4392BDC5E69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137322e302f32342d3234203d3e20323633343539.roa
Signing time:             Fri 12 Sep 2025 18:01:32 +0000
ROA not before:           Fri 12 Sep 2025 17:56:32 +0000
ROA not after:            Fri 11 Sep 2026 18:01:32 +0000
asID:                     263459
IP address blocks:        177.190.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/45F27CD9C3E3270541BD1546980E4392BDC5E69C.crl
                          rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/45F27CD9C3E3270541BD1546980E4392BDC5E69C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45F27CD9C3E3270541BD1546980E4392BDC5E69C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:86:05:fc:45:7a:59:a3:93:f5:ea:6e:ba:14:ba:12:80:37:4b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45F27CD9C3E3270541BD1546980E4392BDC5E69C
        Validity
            Not Before: Sep 12 17:56:32 2025 GMT
            Not After : Sep 11 18:01:32 2026 GMT
        Subject: CN=98746B523BEFC4302833CF1549AB0076E0C1E952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:35:78:fd:56:72:83:40:75:6c:7d:d4:e7:
                    ed:4e:56:be:cf:14:df:2e:8f:2e:76:dd:8a:8f:73:
                    d7:ee:2e:63:4f:92:5b:dd:55:bb:a4:fd:f7:cf:a0:
                    99:37:06:60:9d:be:ea:62:0e:5a:6e:3e:7a:19:94:
                    29:94:35:a5:6f:c8:1b:4f:ef:a4:f0:61:ee:f0:fc:
                    7b:82:94:07:5b:69:ae:cf:e7:80:f2:42:a5:69:b8:
                    28:91:74:e6:49:25:d7:74:17:0c:ce:0f:32:a1:e7:
                    5c:68:f3:96:03:9f:be:d6:4e:5d:9a:fa:bf:5e:6a:
                    31:12:c3:34:34:97:8b:d5:42:ef:41:3c:12:0f:ae:
                    81:79:79:83:df:19:80:c8:da:3a:26:51:26:a3:27:
                    a6:bd:bb:73:1c:e1:14:95:1c:02:5e:de:5d:92:09:
                    0b:4c:69:92:2a:15:72:cd:a3:8c:17:2b:7f:e1:f7:
                    e6:e4:d1:5b:63:5c:7a:c0:66:03:ca:0a:36:6b:7e:
                    71:d6:07:c8:7f:de:15:7f:28:d3:45:44:78:a5:bb:
                    cf:ba:c4:45:25:4f:30:bd:8f:8c:02:27:01:c6:73:
                    11:4b:34:65:3f:07:fb:dd:5e:b0:87:dd:b2:16:81:
                    de:55:9e:4c:00:35:bb:cb:ae:7b:77:38:6f:e7:e5:
                    e6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:74:6B:52:3B:EF:C4:30:28:33:CF:15:49:AB:00:76:E0:C1:E9:52
            X509v3 Authority Key Identifier:
                keyid:45:F2:7C:D9:C3:E3:27:05:41:BD:15:46:98:0E:43:92:BD:C5:E6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/45F27CD9C3E3270541BD1546980E4392BDC5E69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45F27CD9C3E3270541BD1546980E4392BDC5E69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137322e302f32342d3234203d3e20323633343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:02:7e:ad:08:e5:36:d7:6e:b0:1c:af:47:20:3f:19:e5:c4:
         9f:8c:df:d8:da:d7:38:5e:f8:f9:9a:7a:df:e1:35:9b:9a:53:
         73:6f:62:4e:80:c3:05:5b:2b:e9:59:43:e1:ba:a8:8d:74:18:
         57:2d:f3:77:b3:19:33:ec:e4:9e:c5:4c:c9:d6:38:88:e9:63:
         71:ae:bb:d8:3a:89:b3:0d:66:a9:06:e6:49:05:4b:c7:94:66:
         ab:7e:36:62:af:61:ab:e8:10:89:46:e6:58:83:54:7d:b5:42:
         ac:98:fc:65:9a:a1:3a:39:52:33:89:f8:46:48:b1:60:e3:c6:
         fa:cf:7c:0f:fa:c3:db:1e:0b:27:c1:e8:d8:d9:7e:7b:08:9e:
         da:fe:e2:41:84:52:a3:21:d7:26:f3:3c:80:c7:31:71:88:e8:
         76:4f:01:8d:e7:1d:04:83:62:1b:30:85:ed:d3:80:18:d7:08:
         d4:c1:f1:b1:74:45:12:bb:73:79:8c:fd:07:16:bb:39:13:2b:
         bf:83:a1:81:ab:ca:ba:8e:11:6c:43:fb:5c:9d:c4:63:c3:eb:
         9c:be:9a:ec:63:ff:20:fc:db:2f:ae:05:ae:dd:22:78:b6:4c:
         43:31:7e:24:29:94:16:26:46:a4:46:95:e8:32:f0:0b:a1:0c:
         74:f1:49:16
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUe4YF/EV6WaOT9epuuhS6EoA3SwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVGMjdDRDlDM0UzMjcwNTQxQkQxNTQ2OTgwRTQzOTJC
REM1RTY5QzAeFw0yNTA5MTIxNzU2MzJaFw0yNjA5MTExODAxMzJaMDMxMTAvBgNV
BAMTKDk4NzQ2QjUyM0JFRkM0MzAyODMzQ0YxNTQ5QUIwMDc2RTBDMUU5NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiejV4/VZyg0B1bH3U5+1OVr7P
FN8ujy523YqPc9fuLmNPklvdVbuk/ffPoJk3BmCdvupiDlpuPnoZlCmUNaVvyBtP
76TwYe7w/HuClAdbaa7P54DyQqVpuCiRdOZJJdd0FwzODzKh51xo85YDn77WTl2a
+r9eajESwzQ0l4vVQu9BPBIProF5eYPfGYDI2jomUSajJ6a9u3Mc4RSVHAJe3l2S
CQtMaZIqFXLNo4wXK3/h9+bk0VtjXHrAZgPKCjZrfnHWB8h/3hV/KNNFRHilu8+6
xEUlTzC9j4wCJwHGcxFLNGU/B/vdXrCH3bIWgd5VnkwANbvLrnt3OG/n5eZNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUmHRrUjvvxDAoM88VSasAduDB6VIwHwYDVR0j
BBgwFoAURfJ82cPjJwVBvRVGmA5Dkr3F5pwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURybUNpaW9Kb0xzdVozTFE3dno3VDF0bTdCOEJ0VVpCTUtTU3JnaGt3
S1QvMC80NUYyN0NEOUMzRTMyNzA1NDFCRDE1NDY5ODBFNDM5MkJEQzVFNjlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RjI3Q0Q5QzNFMzI3MDU0
MUJEMTU0Njk4MEU0MzkyQkRDNUU2OUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VEcm1DaWlvSm9Mc3VaM0xRN3Z6N1QxdG03QjhCdFVaQk1LU1NyZ2hrd0tULzAv
MzEzNzM3MmUzMTM5MzAyZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALG+rDANBgkqhkiG9w0BAQsFAAOCAQEAPwJ+
rQjlNtdusByvRyA/GeXEn4zf2NrXOF74+Zp63+E1m5pTc29iToDDBVsr6VlD4bqo
jXQYVy3zd7MZM+zknsVMydY4iOljca672DqJsw1mqQbmSQVLx5Rmq342Yq9hq+gQ
iUbmWINUfbVCrJj8ZZqhOjlSM4n4RkixYOPG+s98D/rD2x4LJ8Ho2Nl+ewie2v7i
QYRSoyHXJvM8gMcxcYjodk8BjecdBINiGzCF7dOAGNcI1MHxsXRFErtzeYz9Bxa7
ORMrv4OhgavKuo4RbEP7XJ3EY8PrnL6a7GP/IPzbL64Frt0ieLZMQzF+JCmUFiZG
pEaV6DLwC6EMdPFJFg==
-----END CERTIFICATE-----
Generated at Fri Sep 19 00:25:36 2025 by rpki-client