Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139362e302f32332d3233203d3e20323632383238.roa
File:                     3137372e3135352e3139362e302f32332d3233203d3e20323632383238.roa (raw, json)
Hash identifier:          4Xp9Px3+JZibTESBK/ixO7Cvj4h5qgqdJFVL2DtKIPY=
Subject key identifier:   22:00:C4:5D:FA:AE:B4:5A:E2:B7:B7:2A:C7:9E:DD:F5:99:60:DA:B0
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       79919280CDE73CDC86BE07EF585B4A939F8F4213
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139362e302f32332d3233203d3e20323632383238.roa
Signing time:             Thu 28 Aug 2025 12:13:40 +0000
ROA not before:           Thu 28 Aug 2025 12:08:40 +0000
ROA not after:            Thu 27 Aug 2026 12:13:40 +0000
asID:                     262828
IP address blocks:        177.155.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Sep 2025 05:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:91:92:80:cd:e7:3c:dc:86:be:07:ef:58:5b:4a:93:9f:8f:42:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Aug 28 12:08:40 2025 GMT
            Not After : Aug 27 12:13:40 2026 GMT
        Subject: CN=2200C45DFAAEB45AE2B7B72AC79EDDF59960DAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5d:2b:30:de:db:e9:3d:be:75:61:73:d2:0c:
                    48:e2:b4:0e:17:93:51:6b:25:18:d5:4b:22:41:41:
                    38:56:c5:cf:92:28:e1:a1:9d:3e:29:be:02:e7:1d:
                    0e:69:61:83:d8:e6:4a:66:6a:99:4e:c0:39:61:42:
                    27:db:93:0f:ba:35:c4:50:6d:bb:56:25:52:ac:61:
                    1c:9c:73:cb:f6:eb:15:63:6a:da:a2:01:0c:b2:eb:
                    0b:ff:c2:ef:fa:b3:de:0d:a0:36:8e:51:be:60:c9:
                    d6:16:2c:36:5a:5c:9c:5b:4a:4c:36:82:54:2a:bf:
                    85:32:fc:a1:f7:92:46:1d:ee:c7:b1:25:ae:87:a9:
                    b5:9b:94:d7:66:90:0a:2f:b6:b5:a6:ec:06:d7:35:
                    29:49:77:ae:df:61:57:8f:6f:f8:b8:70:7b:b3:13:
                    28:3b:df:76:a0:f3:ff:d1:4f:b7:7d:c4:bd:3d:3f:
                    7f:80:9e:34:35:f8:52:b0:3c:15:7c:ea:34:6f:62:
                    13:75:6c:2b:c1:3e:fe:34:fd:45:7a:f5:cf:81:41:
                    0f:70:71:95:15:69:08:d9:63:dc:de:9b:da:db:5d:
                    39:0b:55:5d:86:28:32:4d:a2:50:15:83:9d:0c:bb:
                    a9:ae:c8:58:38:55:09:fe:72:b4:62:e1:9f:6a:5a:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:00:C4:5D:FA:AE:B4:5A:E2:B7:B7:2A:C7:9E:DD:F5:99:60:DA:B0
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139362e302f32332d3233203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:32:95:10:ee:85:7c:a6:8d:a3:c4:28:59:66:a9:15:44:f3:
         82:be:74:5c:37:85:e7:9b:0b:c3:96:7a:73:c5:f8:d4:d4:ad:
         4f:ea:7c:be:43:fa:2f:ac:15:57:d2:0f:47:d3:9f:31:5b:39:
         54:0c:1c:47:5e:1c:2c:2e:3e:4f:c9:de:49:d9:7e:c6:82:2e:
         26:3f:ef:a1:ef:a8:40:df:de:d4:8f:de:a3:12:66:9f:91:95:
         f1:0b:87:d3:4f:8a:29:6a:b8:38:c1:c7:31:34:26:fc:7f:69:
         d9:21:9a:a5:76:b3:10:67:c7:e3:8b:b4:35:dc:79:ed:66:f1:
         24:9e:d7:09:1f:60:19:e5:92:53:42:15:55:16:29:7b:dd:36:
         df:e2:ef:59:f7:e2:24:0b:0c:4b:16:05:6e:5f:43:1f:3c:c3:
         9f:4b:b1:7f:d1:78:df:01:0a:b3:cb:80:45:98:28:05:ba:04:
         43:de:aa:d7:be:54:a8:dd:d1:9d:60:e5:85:5c:0a:95:5e:7d:
         ee:86:db:38:4b:e1:5c:dd:71:55:8c:92:ef:bd:b1:d4:a7:76:
         94:60:4c:cd:97:65:13:71:fd:18:12:76:b1:6b:88:16:20:5a:
         36:11:0c:3c:23:4a:ff:04:4a:ad:bd:e3:ed:1e:ce:48:95:eb:
         77:6e:20:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 06:19:05 2025 by rpki-client