Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e34382e302f32312d3332203d3e20323634323136.roa
File:                     3137372e38362e34382e302f32312d3332203d3e20323634323136.roa (raw, json)
Hash identifier:          NvGUNNUTL+Xg6PVrRvuS3md8aJgENDZjmZ80pXSBIOQ=
Subject key identifier:   B8:A6:73:62:1D:62:AF:7E:CD:D4:A8:E6:89:9C:6B:27:87:8B:CC:52
Certificate issuer:       /CN=E3255E24DF417D9D2CF5A8A392C325F09432EA5E
Certificate serial:       0F3DC61DF866C0B9F3C0C0B9E58B339FFB18961C
Authority key identifier: E3:25:5E:24:DF:41:7D:9D:2C:F5:A8:A3:92:C3:25:F0:94:32:EA:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e34382e302f32312d3332203d3e20323634323136.roa
Signing time:             Thu 14 Aug 2025 16:04:20 +0000
ROA not before:           Thu 14 Aug 2025 15:59:20 +0000
ROA not after:            Thu 13 Aug 2026 16:04:20 +0000
asID:                     264216
IP address blocks:        177.86.48.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.crl
                          rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 14:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3d:c6:1d:f8:66:c0:b9:f3:c0:c0:b9:e5:8b:33:9f:fb:18:96:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3255E24DF417D9D2CF5A8A392C325F09432EA5E
        Validity
            Not Before: Aug 14 15:59:20 2025 GMT
            Not After : Aug 13 16:04:20 2026 GMT
        Subject: CN=B8A673621D62AF7ECDD4A8E6899C6B27878BCC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:eb:ec:e4:50:f9:68:f0:d2:34:0d:b5:2e:
                    b0:32:4c:af:83:a8:6d:04:78:e7:30:86:20:c9:fe:
                    08:58:bc:91:db:32:9f:78:62:d0:8d:88:b0:4a:90:
                    10:8f:e2:a1:0d:d0:ee:ea:81:30:52:a0:b1:db:f9:
                    29:13:a5:82:1d:f3:c1:00:bc:7c:fd:db:4f:06:05:
                    08:f9:98:5d:91:13:9b:00:ec:d2:cf:2e:65:b8:a5:
                    5c:2f:fd:61:39:0d:9a:b9:37:0d:34:c9:96:df:54:
                    5c:51:59:3e:9b:d8:bf:56:27:f6:79:04:ad:3e:9a:
                    72:a6:34:93:c8:2f:2a:36:e8:98:9c:8a:40:bd:ad:
                    12:2e:dc:71:ee:4a:70:8a:61:e4:d0:e5:01:8b:c1:
                    32:68:7e:97:80:74:72:c4:96:f2:22:17:3d:2f:85:
                    8b:5d:6b:ad:93:02:4d:36:33:7c:7a:78:94:38:15:
                    3f:39:c3:62:12:7e:61:0d:2f:4a:1d:bd:e2:d1:a8:
                    c3:b2:7c:b1:e4:95:5e:6b:c2:be:70:cb:87:00:87:
                    01:50:ca:a0:c6:22:fe:f4:a5:8e:41:3f:9f:48:eb:
                    89:dc:9a:51:74:43:03:c8:0f:8d:ca:c4:48:54:86:
                    1c:4a:30:37:48:bd:7b:40:b4:40:2a:9d:ec:57:04:
                    c3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A6:73:62:1D:62:AF:7E:CD:D4:A8:E6:89:9C:6B:27:87:8B:CC:52
            X509v3 Authority Key Identifier:
                keyid:E3:25:5E:24:DF:41:7D:9D:2C:F5:A8:A3:92:C3:25:F0:94:32:EA:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e34382e302f32312d3332203d3e20323634323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:b3:63:f1:2a:29:a6:ee:47:4a:55:90:f5:7c:b8:72:31:1a:
         6e:0b:d1:9d:06:7c:98:77:d7:02:50:51:56:7a:31:c7:fa:50:
         c3:ae:93:60:1d:a1:80:5f:54:81:59:8b:19:aa:ae:a8:ee:3d:
         0e:b3:23:bd:f4:5f:3c:11:4c:b3:3a:2b:f6:01:cf:f8:b9:fb:
         7b:45:ee:ee:91:ab:38:68:16:45:7b:f6:cb:70:f0:44:52:fb:
         69:8b:2a:66:33:64:ca:ee:a2:12:25:8a:35:81:01:a5:3b:ee:
         1c:1c:a4:6e:a7:b5:45:5a:8b:55:00:da:37:b4:7d:38:78:af:
         07:21:a5:82:a3:a6:0a:01:e5:94:e8:f4:ad:40:3b:5c:06:89:
         44:82:b1:d0:e1:ed:0f:67:86:b8:c0:3a:7f:fd:7a:35:fd:6c:
         82:13:4b:e0:b6:d6:07:18:83:ec:4a:1c:3c:d1:32:41:71:b6:
         86:7b:0d:00:30:85:a4:5d:3a:6b:52:26:70:d6:5b:44:5f:73:
         11:f5:20:d9:f5:d9:7e:fb:5e:95:9f:57:ce:21:be:6a:00:e9:
         04:b8:4a:5c:06:e7:8d:16:2e:71:19:4f:25:91:6c:ac:e3:76:
         f2:7c:72:01:71:9e:8b:10:01:bc:92:d0:84:fa:d2:e5:6f:0f:
         2a:7e:b2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 02:28:33 2025 by rpki-client