Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/3137372e37332e34342e302f32322d3234203d3e203532363936.roa
File:                     3137372e37332e34342e302f32322d3234203d3e203532363936.roa (raw, json)
Hash identifier:          bJ5zU2pTWJWAky38TFYGcq03Tj1/Du4n5b1oUjEoe2M=
Subject key identifier:   5B:FC:62:03:D4:12:DC:FB:77:B0:71:D5:C1:F1:D5:14:81:9C:80:42
Certificate issuer:       /CN=7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F
Certificate serial:       4C46475558179B139DFA91B47323EC0CA9E62BFF
Authority key identifier: 7C:0F:26:EF:96:D1:08:82:B2:2A:2D:2B:35:D9:68:4D:72:CC:0F:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/3137372e37332e34342e302f32322d3234203d3e203532363936.roa
Signing time:             Sun 31 Aug 2025 02:43:20 +0000
ROA not before:           Sun 31 Aug 2025 02:38:20 +0000
ROA not after:            Sun 30 Aug 2026 02:43:20 +0000
asID:                     52696
IP address blocks:        177.73.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F.crl
                          rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:46:47:55:58:17:9b:13:9d:fa:91:b4:73:23:ec:0c:a9:e6:2b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F
        Validity
            Not Before: Aug 31 02:38:20 2025 GMT
            Not After : Aug 30 02:43:20 2026 GMT
        Subject: CN=5BFC6203D412DCFB77B071D5C1F1D514819C8042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:e9:68:1c:6a:9f:d0:04:39:1e:01:b7:d4:
                    d4:0a:3b:32:f6:ae:61:5f:68:64:10:6c:af:fc:0f:
                    89:a9:7c:fb:6f:95:2f:cc:13:4b:76:45:2c:77:6c:
                    67:9c:a4:7b:cb:c8:26:6e:b4:0b:0c:8f:16:9a:60:
                    07:11:39:99:3d:01:78:09:04:03:40:76:4d:ae:91:
                    f1:f3:aa:21:5f:a7:80:ea:73:ed:00:3b:37:fa:bf:
                    78:0c:94:bd:d5:a0:6a:f7:d6:35:7a:46:9c:0c:8d:
                    75:d7:d7:50:c4:d1:fc:c9:5f:46:3c:a8:39:e9:c6:
                    ea:15:b6:0a:7a:ab:22:ab:f0:41:1b:d8:40:c3:9a:
                    1b:65:5a:da:ca:7b:e4:f1:88:db:f3:0a:20:ff:31:
                    f7:fa:6e:65:94:66:33:3e:d3:22:96:9a:d8:8f:97:
                    38:4b:8b:71:f0:56:3d:7d:17:91:15:29:ec:c6:d4:
                    82:5b:f6:85:1c:e2:3e:71:e4:46:cb:60:5b:6b:43:
                    1f:12:81:1f:3f:58:88:63:2b:00:3b:53:9b:29:86:
                    4b:aa:86:63:3a:fe:8f:af:98:fc:40:a1:fc:5e:68:
                    62:ed:73:d9:18:9e:3a:a1:72:b9:3e:3b:d5:0a:58:
                    dc:2e:6c:77:0f:a6:5f:68:ff:2e:7c:de:19:d8:06:
                    2f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FC:62:03:D4:12:DC:FB:77:B0:71:D5:C1:F1:D5:14:81:9C:80:42
            X509v3 Authority Key Identifier:
                keyid:7C:0F:26:EF:96:D1:08:82:B2:2A:2D:2B:35:D9:68:4D:72:CC:0F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0F26EF96D10882B22A2D2B35D9684D72CC0F4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fpxw2eWUwiQM8j8SLsUcKKVZ4FCTi9fXsD2K4tohJegi/0/3137372e37332e34342e302f32322d3234203d3e203532363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:0a:98:ba:4d:b6:94:16:75:2d:13:90:f6:47:40:4a:78:ce:
         e6:ec:f7:e8:19:7d:99:16:dd:ca:5a:57:c9:25:fb:5d:74:63:
         23:ae:b5:98:47:1c:94:23:8f:6d:99:04:19:b3:78:29:dd:34:
         d5:17:12:86:1f:a9:80:86:64:3d:a8:58:a2:f5:e0:98:3b:e4:
         ee:54:b6:74:a1:ce:3e:6b:8e:8c:59:1c:2f:0b:23:66:65:26:
         15:5f:cc:f6:e0:df:78:78:35:0b:6c:ec:69:1e:e2:1c:fe:cc:
         7b:1e:90:1f:17:8c:bb:8d:49:f0:03:cf:ff:b4:8a:d8:4b:df:
         7e:d1:bb:93:b7:be:ab:bf:07:af:b9:85:c8:12:0d:b6:47:ed:
         2e:f8:9a:95:1b:82:16:e8:5d:4a:29:b5:77:75:88:fc:3f:7d:
         c5:83:ae:59:79:f9:cd:e1:82:34:94:ec:0d:ea:bc:7a:b7:07:
         2b:56:90:8b:3e:3c:50:e9:4b:fe:46:1c:a6:70:ce:17:1b:7a:
         36:80:ec:d9:9b:93:f9:4d:2d:6a:c2:a2:d6:9e:a6:66:92:b7:
         72:67:75:7c:37:8a:33:d0:c3:0b:9d:63:14:3f:b2:b6:bf:03:
         99:72:d3:ca:9c:10:ab:b5:74:02:b0:01:93:a7:c3:65:46:59:
         82:d1:c5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:09:09 2025 by rpki-client