Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e39332e3130342e302f32312d3234203d3e203533313037.roa
File:                     3137372e39332e3130342e302f32312d3234203d3e203533313037.roa (raw, json)
Hash identifier:          rmVfP0S3+sQinwdk+inGSSd5NflLhMHa6NBYJvBmY+o=
Subject key identifier:   91:8E:C9:F3:2C:9D:93:F8:27:F8:8E:07:A1:AD:F4:9E:93:15:C0:61
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       59C76EF6F0D38EF87934D3457D360D7FF91E348D
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e39332e3130342e302f32312d3234203d3e203533313037.roa
Signing time:             Tue 08 Jul 2025 01:04:45 +0000
ROA not before:           Tue 08 Jul 2025 00:59:45 +0000
ROA not after:            Tue 07 Jul 2026 01:04:45 +0000
asID:                     53107
IP address blocks:        177.93.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 13:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c7:6e:f6:f0:d3:8e:f8:79:34:d3:45:7d:36:0d:7f:f9:1e:34:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Jul  8 00:59:45 2025 GMT
            Not After : Jul  7 01:04:45 2026 GMT
        Subject: CN=918EC9F32C9D93F827F88E07A1ADF49E9315C061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:6f:ca:73:c1:0c:ea:be:8a:8e:b1:fb:6a:
                    58:17:fe:16:7f:2c:70:4a:17:d4:07:aa:e0:fe:3b:
                    b4:02:4d:29:57:bb:b9:7a:1a:6a:eb:17:37:65:41:
                    9e:fb:d4:9c:e9:90:8e:85:50:91:f9:19:ee:f7:33:
                    dc:81:27:fe:08:75:5c:3e:21:61:7e:80:17:d3:b9:
                    56:05:67:6c:e0:d8:ab:22:d8:2a:f9:f8:74:ed:5a:
                    3e:3f:ff:80:6e:d4:4c:96:b7:a9:72:ba:c9:53:06:
                    9d:b9:17:7f:85:82:28:53:b3:4f:69:2c:ee:94:7a:
                    4e:18:b5:85:78:83:ab:8f:da:87:b4:20:e6:dd:34:
                    8b:2a:69:02:8e:7a:15:a1:d9:51:19:54:78:74:5b:
                    ca:d6:62:c7:4f:85:d4:76:ff:9f:92:ee:36:2c:2c:
                    82:6a:3e:01:22:61:db:40:64:06:e6:a4:98:4e:61:
                    2f:84:96:73:db:ac:b5:38:58:59:82:d7:09:9a:10:
                    4b:59:d8:1d:66:7f:f2:b3:c8:54:f1:13:30:c0:2f:
                    13:8e:64:a7:8b:db:c7:b0:e0:79:56:9d:0a:cb:22:
                    47:31:ce:8e:7b:9a:e2:13:52:d3:d8:10:e3:7f:31:
                    75:98:5f:78:61:10:4a:31:2c:66:35:7d:b2:c9:98:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8E:C9:F3:2C:9D:93:F8:27:F8:8E:07:A1:AD:F4:9E:93:15:C0:61
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e39332e3130342e302f32312d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:e0:d9:0d:ea:25:7c:69:7b:3e:82:80:76:ec:cf:01:b1:e1:
         2a:ee:c5:0f:ac:f5:43:c5:c7:f5:65:57:f9:9d:b4:ab:f4:45:
         9e:dd:34:21:eb:1b:ef:47:95:39:0e:0a:5c:39:80:3a:a9:33:
         a9:fb:32:a2:7e:28:24:04:0e:6c:69:67:6a:42:92:ba:52:a3:
         11:0c:04:ce:99:87:5a:80:d0:c8:6f:e8:30:30:6e:80:62:53:
         ed:8f:c7:cf:d6:f6:61:f2:b3:21:45:a2:4e:04:76:ee:77:b0:
         0e:8e:7c:71:1d:55:60:2c:67:f4:da:89:b8:da:d6:3c:40:65:
         5f:9b:e5:d1:23:6a:0a:e4:c0:40:0f:6a:f8:e3:83:4d:17:e2:
         c7:d8:44:1f:cf:9d:26:89:75:df:15:65:06:b4:0a:9b:d6:e9:
         0c:89:65:a9:cb:3e:6a:b1:a8:49:ad:01:6f:f2:3a:5f:65:3a:
         30:12:a7:56:15:8b:38:d1:39:95:0e:22:ab:5a:9a:28:2b:0a:
         dd:f2:60:cf:c1:4e:28:86:cc:ed:0d:53:82:9c:d7:09:9b:5e:
         f2:d3:e6:22:8c:40:86:2b:f8:84:e5:28:d3:a5:9a:f0:09:3f:
         75:7f:68:c7:8e:25:3f:fa:72:cd:77:e9:89:b9:5c:27:66:df:
         4f:da:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:14:51 2025 by rpki-client