Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/3137372e31302e36342e302f32312d3234203d3e203533323334.roa
File:                     3137372e31302e36342e302f32312d3234203d3e203533323334.roa (raw, json)
Hash identifier:          z8qCRpxN4CXSNIFsTe2IdbvVUfEwHgX1A2ZvgCek+qQ=
Subject key identifier:   41:09:9E:B7:CA:C5:E0:9A:B8:51:EE:46:A7:5A:A4:E0:91:79:65:EE
Certificate issuer:       /CN=9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985
Certificate serial:       29E430B54455212864695473293938A50F3459FC
Authority key identifier: 9E:6A:13:08:7D:3A:BE:7F:80:F3:2B:82:AB:7B:ED:B9:DE:C9:E9:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/3137372e31302e36342e302f32312d3234203d3e203533323334.roa
Signing time:             Tue 16 Sep 2025 15:53:18 +0000
ROA not before:           Tue 16 Sep 2025 15:48:18 +0000
ROA not after:            Tue 15 Sep 2026 15:53:18 +0000
asID:                     53234
IP address blocks:        177.10.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.crl
                          rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 20:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e4:30:b5:44:55:21:28:64:69:54:73:29:39:38:a5:0f:34:59:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985
        Validity
            Not Before: Sep 16 15:48:18 2025 GMT
            Not After : Sep 15 15:53:18 2026 GMT
        Subject: CN=41099EB7CAC5E09AB851EE46A75AA4E0917965EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:71:70:2c:c6:35:56:ed:aa:b8:27:0b:d4:68:
                    55:9a:03:a6:29:29:a7:78:72:1d:63:39:63:93:9f:
                    3a:9d:84:f4:2e:4f:9a:93:e0:02:47:a5:94:d3:c4:
                    15:54:aa:dc:d2:4c:b9:28:b5:fb:a2:11:70:6c:99:
                    42:ea:41:7a:4c:e6:88:c5:05:07:16:08:77:0d:88:
                    aa:55:eb:ec:4f:00:bb:e1:58:64:68:a7:20:8e:da:
                    fc:5b:ac:94:6f:f7:97:82:94:73:a9:95:79:62:a9:
                    65:47:17:92:c7:bc:db:d4:eb:ce:ea:be:60:ad:ef:
                    c3:6b:c3:7c:14:36:e6:05:ff:4d:77:7b:47:07:57:
                    d0:de:25:80:be:96:2b:fb:46:5c:59:63:42:27:3b:
                    ac:27:4b:c8:45:4b:61:88:09:60:6f:37:d2:c5:22:
                    4d:4c:40:7f:72:d9:59:e6:21:d3:15:c8:49:92:28:
                    bb:63:2e:c3:70:69:b5:02:ad:4d:45:90:93:8f:78:
                    49:2e:7a:e9:a5:07:0f:ba:08:91:4f:fe:91:28:b1:
                    ff:21:2f:95:a5:60:89:f5:98:05:1c:35:67:f0:22:
                    e6:64:6c:4a:bb:43:17:ad:d8:bf:66:5a:c7:81:4e:
                    ba:30:06:96:bd:1d:17:22:76:8a:7a:ea:e8:cd:29:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:09:9E:B7:CA:C5:E0:9A:B8:51:EE:46:A7:5A:A4:E0:91:79:65:EE
            X509v3 Authority Key Identifier:
                keyid:9E:6A:13:08:7D:3A:BE:7F:80:F3:2B:82:AB:7B:ED:B9:DE:C9:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/3137372e31302e36342e302f32312d3234203d3e203533323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:76:37:33:5d:7c:3e:ac:91:72:39:a4:37:b3:f6:8f:46:d8:
         95:2b:14:92:11:22:45:f6:7a:77:1c:cb:47:05:92:58:03:8d:
         bd:75:b0:f3:99:70:4f:76:54:14:d5:f3:23:1e:df:fc:9f:d1:
         5a:39:cc:2b:5b:b6:0e:90:d6:00:59:5f:51:54:75:5d:e1:e3:
         53:06:30:04:f9:c9:61:3f:aa:d0:f0:33:2c:2f:9e:18:41:82:
         cd:52:ea:91:c4:c2:69:c2:ee:6b:3c:49:73:b5:3a:2a:ec:1c:
         26:5c:2f:46:6e:62:7f:ae:38:5f:ea:af:d6:7c:80:cd:33:3c:
         c9:55:f8:8b:cb:27:7f:de:e3:19:79:5f:21:a1:2b:67:7e:7f:
         77:3f:c6:e0:e7:8e:db:df:fe:74:4e:f3:eb:d1:a0:c5:dd:64:
         e8:bb:2d:49:a4:da:be:cf:62:f4:45:bc:8a:10:34:88:92:62:
         0b:9a:10:9e:d7:bd:1a:4a:0a:cf:f0:ad:46:08:72:8e:43:b7:
         2d:fb:86:46:67:63:9f:57:31:ad:ac:87:4e:f0:b5:fa:d0:41:
         7f:5e:cb:23:62:d4:3a:9d:6a:ab:f7:2d:a2:af:c5:47:ac:c6:
         3a:a7:88:96:0e:cf:2b:0d:98:11:00:43:5b:1c:6f:6e:fc:8f:
         8e:61:ba:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:18:07 2025 by rpki-client