Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3137372e36372e3135322e302f32332d3233203d3e20323634393431.roa
File:                     3137372e36372e3135322e302f32332d3233203d3e20323634393431.roa (raw, json)
Hash identifier:          MAaTtFXpMe1CertV8yr1bRw2PpuzCdWdR90ib030tPs=
Subject key identifier:   D2:13:4C:D6:4F:01:57:FE:DE:8C:D4:7D:6E:3D:E1:3B:9C:34:05:51
Certificate issuer:       /CN=E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D
Certificate serial:       368BC6D865BD9C8325E09221C25EA5A2FC229AAE
Authority key identifier: E5:79:D9:FF:63:D9:A4:8D:BD:6C:7C:9A:21:1C:5A:62:53:89:1E:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3137372e36372e3135322e302f32332d3233203d3e20323634393431.roa
Signing time:             Tue 02 Sep 2025 01:14:02 +0000
ROA not before:           Tue 02 Sep 2025 01:09:02 +0000
ROA not after:            Tue 01 Sep 2026 01:14:02 +0000
asID:                     264941
IP address blocks:        177.67.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.crl
                          rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 06:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8b:c6:d8:65:bd:9c:83:25:e0:92:21:c2:5e:a5:a2:fc:22:9a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D
        Validity
            Not Before: Sep  2 01:09:02 2025 GMT
            Not After : Sep  1 01:14:02 2026 GMT
        Subject: CN=D2134CD64F0157FEDE8CD47D6E3DE13B9C340551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:db:f6:47:5a:b2:20:83:81:d3:ad:f4:45:67:
                    a0:fa:c7:95:c3:7a:3f:2c:e6:35:fa:2b:af:66:08:
                    ed:f6:6e:8c:fe:a4:95:27:9c:15:1b:cf:25:3c:a9:
                    0e:2b:f3:e7:4f:c7:85:7c:10:8e:c9:f7:3e:0c:ab:
                    13:4a:21:8d:b2:a2:c2:67:4d:c0:36:39:02:1d:e7:
                    59:47:d1:cd:f9:4a:18:36:b4:00:0f:de:b5:b0:d8:
                    ed:ee:78:8a:ba:5f:6d:68:fa:18:3c:5b:f2:2e:53:
                    dd:94:d2:77:bf:9d:ea:33:95:7a:89:15:3f:aa:d2:
                    46:b1:c7:57:f9:13:00:b6:f9:e5:28:bd:26:23:50:
                    7e:58:e1:58:32:a6:fa:27:2a:50:c4:a4:e5:8a:bd:
                    f1:41:7b:de:e3:fc:d7:64:17:89:3e:67:11:09:03:
                    7e:c8:c3:8c:c4:14:34:bb:48:05:18:68:13:2f:38:
                    6c:28:19:e7:09:17:ed:38:58:9f:fc:e1:e4:ad:f4:
                    9d:96:86:35:ed:22:a3:69:c8:c4:69:08:22:13:21:
                    84:df:fe:3b:c9:7d:a7:1a:61:5a:bb:fd:a2:79:0f:
                    13:c9:7b:ff:64:9e:bc:ab:5d:5d:b4:9e:38:19:fc:
                    4c:3a:40:e6:49:48:bb:40:2d:76:ca:dd:da:b2:6c:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:13:4C:D6:4F:01:57:FE:DE:8C:D4:7D:6E:3D:E1:3B:9C:34:05:51
            X509v3 Authority Key Identifier:
                keyid:E5:79:D9:FF:63:D9:A4:8D:BD:6C:7C:9A:21:1C:5A:62:53:89:1E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E579D9FF63D9A48DBD6C7C9A211C5A6253891E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FV4pvfTVAPGSwUF16bhz7uxoAhr4DJ1xSFSPQaHQiywU/0/3137372e36372e3135322e302f32332d3233203d3e20323634393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:ae:7d:cb:7e:66:fd:4d:34:c0:8e:99:71:a3:3f:4b:a9:27:
         9b:c2:7c:b9:39:86:8b:07:1d:a0:78:5a:5e:a4:be:96:76:e3:
         9f:6c:2a:22:f4:5c:f5:12:98:5e:0e:1b:9c:eb:f2:d5:4a:06:
         b1:bc:34:bc:5a:35:5a:9d:b6:e7:0d:9d:c4:f6:ea:98:6c:9e:
         84:0a:e6:a8:14:0b:83:02:1f:6e:66:1d:a9:27:61:41:cc:c8:
         b6:80:ae:8d:1f:df:e6:43:b9:03:2b:6a:07:55:52:94:b8:e9:
         f0:78:7e:63:18:1e:5e:d9:73:22:fb:7d:82:85:de:74:44:4e:
         60:82:fb:33:bb:2e:57:b4:c9:c7:00:9f:85:f3:ce:57:5c:f1:
         d0:05:87:a9:26:3d:d9:3a:5c:0f:41:35:fb:05:cf:bb:74:a0:
         36:21:33:3d:0a:eb:b1:7e:8f:49:46:7f:09:eb:52:0f:74:92:
         44:4d:42:57:6b:fd:a3:c7:9b:a4:34:4e:a8:9c:04:89:a0:f0:
         54:a4:03:98:34:d2:fa:58:89:24:07:41:3f:c2:6a:d5:23:bd:
         4c:96:b5:f9:71:c9:cf:e2:d2:86:9f:cf:73:c6:da:e2:a1:bc:
         a4:a5:17:48:0b:f3:00:8f:6a:f7:fe:fb:0e:b1:38:b3:95:0f:
         8e:43:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:26:11 2025 by rpki-client