Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32312d3234203d3e20323632343836.roa
File:                     3137372e36362e382e302f32312d3234203d3e20323632343836.roa (raw, json)
Hash identifier:          MbpPa2Hg4PvVdlQrrK1MetI58rM3ioz/scT1ezL+mLo=
Subject key identifier:   AE:E3:6F:69:91:98:EB:09:F1:4A:82:87:40:BA:E9:8C:40:AF:89:D0
Certificate issuer:       /CN=04E2212E8119A88F829030DBA9530D79080ABB93
Certificate serial:       4FB10A352796DD771D3F8309CC5239B190F547E9
Authority key identifier: 04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32312d3234203d3e20323632343836.roa
Signing time:             Wed 23 Jul 2025 22:36:50 +0000
ROA not before:           Wed 23 Jul 2025 22:31:50 +0000
ROA not after:            Wed 22 Jul 2026 22:36:50 +0000
asID:                     262486
IP address blocks:        177.66.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.crl
                          rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 23:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b1:0a:35:27:96:dd:77:1d:3f:83:09:cc:52:39:b1:90:f5:47:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E2212E8119A88F829030DBA9530D79080ABB93
        Validity
            Not Before: Jul 23 22:31:50 2025 GMT
            Not After : Jul 22 22:36:50 2026 GMT
        Subject: CN=AEE36F699198EB09F14A828740BAE98C40AF89D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:a8:27:ad:48:8f:9f:8e:68:4d:6f:e8:3b:
                    59:4b:97:39:1e:55:0f:d6:17:7e:4a:2b:2a:00:68:
                    32:77:1f:6e:bd:dd:f0:a6:81:ce:04:60:8c:46:fc:
                    61:1c:72:c2:61:69:19:ff:fb:c4:da:ec:61:7c:41:
                    09:65:0d:de:17:1e:57:4e:fd:6c:ed:a3:1a:64:f9:
                    bf:c4:8b:7e:ea:02:14:8f:f2:bb:81:06:5f:db:66:
                    62:d0:f0:08:34:ec:9c:35:20:d1:3b:07:f5:b4:20:
                    5c:2d:df:7b:1f:16:b9:aa:1e:8e:1e:ed:42:e1:a3:
                    f6:ed:fa:ad:41:7f:49:80:6c:2c:ef:09:10:75:69:
                    ae:ed:9c:31:2f:45:a4:89:2e:98:99:f0:37:fc:58:
                    84:b7:de:2e:b1:eb:e1:4d:74:b3:86:df:27:42:0d:
                    6c:59:c4:de:e5:21:a2:66:69:97:1c:f0:5f:1d:a2:
                    ca:c1:c4:46:5e:73:a1:2f:bf:b9:db:d6:99:e7:4b:
                    3c:a4:fe:43:e0:94:0c:15:fd:e8:1a:69:7c:72:0f:
                    5f:e3:24:17:cb:d9:67:03:19:f7:92:ad:b8:37:11:
                    75:38:09:1e:a3:7b:90:44:a4:c6:4b:2b:5d:e9:6a:
                    51:59:dd:5a:ad:04:cd:c6:f4:63:3f:16:cc:52:db:
                    89:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E3:6F:69:91:98:EB:09:F1:4A:82:87:40:BA:E9:8C:40:AF:89:D0
            X509v3 Authority Key Identifier:
                keyid:04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32312d3234203d3e20323632343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:79:ce:0c:d5:d0:ba:05:be:af:1a:a0:8a:a3:da:9c:57:8c:
         9c:1e:db:fd:2a:df:da:24:ff:d4:29:ad:e4:72:3b:6e:2c:0e:
         11:9e:da:15:67:26:9c:b6:46:67:ce:43:ff:7a:7d:72:ba:0a:
         0e:d8:d2:23:7b:18:73:3a:ac:be:46:ce:89:0f:a9:e7:76:29:
         05:e5:82:6c:f0:1d:8c:dc:b5:75:29:2e:f8:ee:97:b3:25:69:
         7a:c6:a2:49:b6:5b:1e:3f:17:3f:1d:c9:56:78:2f:05:97:62:
         be:7b:8c:e8:ca:07:82:85:eb:a7:bf:a6:fa:09:c0:e1:51:6e:
         42:f8:ab:18:2e:0b:4a:06:25:80:9c:be:57:d6:27:e1:4e:fa:
         e5:7f:0a:4e:d8:81:7d:53:80:3a:63:d8:4d:d5:a4:13:c7:f0:
         80:3c:b4:76:56:25:cc:97:a8:c4:b6:44:47:f6:f4:2c:71:dc:
         92:bc:33:01:6d:17:d5:96:51:0e:10:ac:c4:b1:f1:db:ac:36:
         03:c0:30:bc:00:66:f2:2b:2d:c9:8c:bc:5c:5a:2f:59:06:e4:
         60:44:26:ff:53:2d:cf:8b:49:d7:9d:60:1a:be:38:0a:49:3e:
         64:09:de:c0:80:05:3a:70:a9:7c:50:09:91:2f:3a:8b:0c:2c:
         d7:90:82:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:10:44 2025 by rpki-client