Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/3137372e3132392e3135322e302f32322d3234203d3e20323633303431.roa
File:                     3137372e3132392e3135322e302f32322d3234203d3e20323633303431.roa (raw, json)
Hash identifier:          fpWMFviM0uVt3k4Ge+Ast4cwwAwkJgLtKPZR64Nsfgw=
Subject key identifier:   D1:B6:08:5F:FD:C4:A1:02:E9:5D:3D:D8:21:E7:8B:54:54:F2:23:3D
Certificate issuer:       /CN=D63B953B67D71EF541CD1AFD8737C8FC5457D8B7
Certificate serial:       69CD73DDE74EEF25BE5B8F8988BC150506B5668D
Authority key identifier: D6:3B:95:3B:67:D7:1E:F5:41:CD:1A:FD:87:37:C8:FC:54:57:D8:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/3137372e3132392e3135322e302f32322d3234203d3e20323633303431.roa
Signing time:             Mon 15 Sep 2025 20:32:00 +0000
ROA not before:           Mon 15 Sep 2025 20:27:00 +0000
ROA not after:            Mon 14 Sep 2026 20:32:00 +0000
asID:                     263041
IP address blocks:        177.129.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.crl
                          rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cd:73:dd:e7:4e:ef:25:be:5b:8f:89:88:bc:15:05:06:b5:66:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63B953B67D71EF541CD1AFD8737C8FC5457D8B7
        Validity
            Not Before: Sep 15 20:27:00 2025 GMT
            Not After : Sep 14 20:32:00 2026 GMT
        Subject: CN=D1B6085FFDC4A102E95D3DD821E78B5454F2233D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:94:88:8f:72:a9:38:30:2d:f5:34:f2:5c:
                    a8:d0:25:8f:9b:14:20:7d:ee:d6:07:a3:0a:e4:a3:
                    49:c8:68:ac:50:89:8e:39:58:0c:a4:5e:d4:89:c6:
                    85:20:fe:68:b9:86:3f:0b:ad:f7:b9:14:5f:9a:2a:
                    58:dd:37:5f:df:8c:fc:91:7b:b3:e5:08:48:d9:f8:
                    07:b2:96:37:26:91:f3:f9:f2:82:3f:32:8d:b3:65:
                    3e:45:82:68:2d:ee:02:c2:f8:cf:d2:2b:c4:8b:81:
                    71:18:f6:78:32:43:c0:9f:42:70:5f:41:2b:1f:03:
                    53:6b:65:f4:2c:d1:9b:a7:c2:ee:ba:77:27:d3:59:
                    4d:1b:ed:54:7a:07:2c:3b:a0:2a:06:eb:5c:ae:ba:
                    c8:ad:c5:e6:54:f3:3d:8f:9d:f1:73:9f:5e:39:08:
                    2f:4c:36:19:17:db:e1:b6:9d:d5:9a:0d:fc:8d:e5:
                    0c:e7:b2:a5:2a:d6:a2:5b:ea:ee:1d:2f:dc:41:65:
                    ef:4e:11:9e:1c:32:11:2f:42:aa:8b:87:30:d4:fb:
                    5a:b4:a1:3d:2b:c3:bd:fd:7c:3a:6f:31:65:ae:1d:
                    d9:9e:59:3c:41:d9:02:fe:66:ad:96:2f:bc:ef:9c:
                    0c:23:f2:b2:d7:98:83:11:96:87:f8:88:4f:8d:3c:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B6:08:5F:FD:C4:A1:02:E9:5D:3D:D8:21:E7:8B:54:54:F2:23:3D
            X509v3 Authority Key Identifier:
                keyid:D6:3B:95:3B:67:D7:1E:F5:41:CD:1A:FD:87:37:C8:FC:54:57:D8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63B953B67D71EF541CD1AFD8737C8FC5457D8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZh1PTqvDvYQGbM7ng8LpPN3My1Tridfp74uLXLd5DDX/0/3137372e3132392e3135322e302f32322d3234203d3e20323633303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:86:21:5e:45:a5:f1:2e:5b:e8:1d:2b:01:1c:09:89:51:02:
         d5:07:2e:70:4f:33:1b:25:a1:d7:85:73:9f:21:68:dd:09:7a:
         be:bc:35:86:9f:83:0e:07:1c:5d:fc:b7:59:b2:d3:e3:0d:ab:
         0c:da:17:53:a3:9d:fb:d5:c8:06:5c:3f:ca:3d:37:c4:f1:36:
         f1:69:39:ca:85:69:58:c3:80:75:dd:62:06:c4:3d:d9:dc:72:
         da:4c:a6:d1:ff:fb:c7:e6:b6:32:ee:0f:d0:41:60:f3:05:79:
         94:0d:13:ce:e1:86:89:cb:88:44:d4:bc:6f:ca:b7:ed:04:0a:
         c8:e0:91:1f:34:12:0c:bd:23:09:15:32:a7:49:7d:86:64:2c:
         17:4e:eb:42:a3:ef:7a:e3:d6:5d:29:4a:43:6e:34:4a:25:9d:
         97:f8:68:36:cb:38:fe:d4:3c:2b:c5:49:8c:77:d7:e3:9a:6b:
         78:a6:78:43:0e:fd:44:ef:b2:c6:be:05:97:14:d7:53:1b:49:
         d7:b6:21:8b:67:d9:29:86:b5:3a:8a:1d:5a:b7:0f:c9:5c:51:
         c5:ae:bf:4c:cf:fa:34:c4:69:11:06:38:71:39:8e:ef:4f:b1:
         b9:0e:c1:d8:24:4f:0c:89:84:eb:20:ef:12:32:7f:f8:3c:71:
         56:a7:5f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:33:06 2025 by rpki-client