Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137332e302f32342d3234203d3e20323633343539.roa
File:                     3137372e3139302e3137332e302f32342d3234203d3e20323633343539.roa (raw, json)
Hash identifier:          /CRE30e7/DdEzzPOYZNiJL6pKrO9JgKbNPIqbKe8eaw=
Subject key identifier:   0D:9A:0C:35:96:AE:8C:1F:CD:D7:F4:D6:3F:6B:73:8A:82:12:41:9F
Certificate issuer:       /CN=45F27CD9C3E3270541BD1546980E4392BDC5E69C
Certificate serial:       33E9B602DDF10311CDBD9444065AEBECC033706D
Authority key identifier: 45:F2:7C:D9:C3:E3:27:05:41:BD:15:46:98:0E:43:92:BD:C5:E6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45F27CD9C3E3270541BD1546980E4392BDC5E69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137332e302f32342d3234203d3e20323633343539.roa
Signing time:             Fri 12 Sep 2025 18:01:31 +0000
ROA not before:           Fri 12 Sep 2025 17:56:31 +0000
ROA not after:            Fri 11 Sep 2026 18:01:31 +0000
asID:                     263459
IP address blocks:        177.190.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/45F27CD9C3E3270541BD1546980E4392BDC5E69C.crl
                          rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/45F27CD9C3E3270541BD1546980E4392BDC5E69C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45F27CD9C3E3270541BD1546980E4392BDC5E69C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e9:b6:02:dd:f1:03:11:cd:bd:94:44:06:5a:eb:ec:c0:33:70:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45F27CD9C3E3270541BD1546980E4392BDC5E69C
        Validity
            Not Before: Sep 12 17:56:31 2025 GMT
            Not After : Sep 11 18:01:31 2026 GMT
        Subject: CN=0D9A0C3596AE8C1FCDD7F4D63F6B738A8212419F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:58:5f:72:b1:30:cb:d7:7f:bf:5b:13:3e:
                    e3:45:e6:bc:4a:5f:20:02:00:f1:66:53:b9:08:d0:
                    e5:17:3c:01:8d:40:76:f0:d7:35:a0:9a:31:d6:04:
                    d3:81:55:19:82:d7:be:89:f2:2c:5d:7b:20:b1:69:
                    23:73:58:bd:0b:68:12:e3:9f:7f:85:c1:40:86:b5:
                    28:c7:08:ef:bf:07:e5:00:a1:6c:96:1c:e1:f6:ce:
                    83:4f:79:ff:77:80:5e:46:3f:6c:54:67:36:60:07:
                    fb:30:63:f9:03:0b:56:34:b3:67:69:bc:f1:b6:2c:
                    5f:50:97:73:9b:ca:91:be:c8:1e:02:fc:a2:3f:7a:
                    03:e3:7a:d3:cd:72:84:16:ba:5a:78:d2:05:7d:bd:
                    b1:cb:d4:1d:6f:50:29:a7:11:b2:5c:96:fb:39:cf:
                    73:77:50:7f:c4:91:62:7a:20:37:ec:4c:20:b0:89:
                    ae:7e:b4:82:3c:32:cc:83:1a:9b:ba:3f:8e:17:e3:
                    89:8c:81:61:91:6f:b9:9f:71:4e:e9:9d:5b:60:ad:
                    c5:65:34:ed:55:a8:90:0c:a0:c5:22:42:8f:7a:81:
                    1d:81:ab:4f:17:63:67:8e:3c:e2:e4:4e:70:03:dd:
                    c8:c1:02:5a:dd:9f:56:fa:bf:36:2b:d6:79:d4:ce:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9A:0C:35:96:AE:8C:1F:CD:D7:F4:D6:3F:6B:73:8A:82:12:41:9F
            X509v3 Authority Key Identifier:
                keyid:45:F2:7C:D9:C3:E3:27:05:41:BD:15:46:98:0E:43:92:BD:C5:E6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/45F27CD9C3E3270541BD1546980E4392BDC5E69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45F27CD9C3E3270541BD1546980E4392BDC5E69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137332e302f32342d3234203d3e20323633343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a7:32:b0:c1:dc:0a:83:f5:cf:9e:62:ad:9d:14:98:c3:18:
         91:ab:a9:e3:91:56:a9:b0:8c:e0:f4:f2:88:5b:27:63:f0:4c:
         4d:62:de:99:0b:b7:17:8f:da:f7:09:be:aa:30:c8:35:df:36:
         99:38:8d:9b:0a:f4:07:24:b6:f3:75:6b:a2:71:1f:bd:81:6c:
         e8:8a:c7:06:e6:7e:e9:83:7d:26:e2:bd:01:d2:6b:31:38:a1:
         37:4c:05:66:fc:b3:4f:2e:36:38:12:98:ea:06:b8:10:6a:43:
         86:b5:39:77:77:78:1d:31:9e:1c:d1:83:58:a9:ed:ef:f3:72:
         1b:48:e0:43:87:22:c9:1b:6e:c1:09:63:10:88:48:0f:43:7a:
         ef:21:70:12:10:b2:f1:d9:34:e5:d5:a4:c2:87:6c:99:67:21:
         f1:52:b8:bc:fd:6a:aa:12:24:2f:40:6f:45:86:b5:de:b6:0b:
         8b:04:6f:5c:0c:51:cb:02:ac:6e:ac:2d:8e:af:04:87:dd:77:
         b7:29:b1:5c:47:81:cd:91:ea:4e:07:d3:14:2e:ae:e9:32:bd:
         61:7d:c9:a0:ea:dc:d7:81:29:f5:84:c1:21:a5:78:80:f6:e1:
         08:3a:7c:89:71:5f:0d:07:a1:31:30:68:2d:f2:a9:86:d5:b6:
         c5:ea:b9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:47:07 2025 by rpki-client