Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32302e302f32322d3232203d3e203532363132.roa
File:                     3137372e3132342e32302e302f32322d3232203d3e203532363132.roa (raw, json)
Hash identifier:          mxAPDXG7E3L1sfighc5nxh8cEDPiZVvJ39J9C/rgViM=
Subject key identifier:   C6:66:FA:FA:3F:EB:C4:7D:E8:EE:79:AA:06:42:C2:62:21:94:82:E6
Certificate issuer:       /CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
Certificate serial:       1F25374DEF6D9DD16B5C621646F16F0A1934FA34
Authority key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32302e302f32322d3232203d3e203532363132.roa
Signing time:             Tue 08 Sep 2026 00:39:26 +0000
ROA not before:           Tue 08 Sep 2026 00:34:26 +0000
ROA not after:            Tue 07 Sep 2027 00:39:26 +0000
asID:                     52612
IP address blocks:        177.124.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl
                          rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 11:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:25:37:4d:ef:6d:9d:d1:6b:5c:62:16:46:f1:6f:0a:19:34:fa:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
        Validity
            Not Before: Sep  8 00:34:26 2026 GMT
            Not After : Sep  7 00:39:26 2027 GMT
        Subject: CN=C666FAFA3FEBC47DE8EE79AA0642C262219482E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:1d:96:e7:a5:d2:ec:18:1e:6c:c2:4c:96:
                    51:9e:33:5b:c5:b7:c0:90:32:38:1c:af:03:98:9c:
                    34:88:62:11:38:5c:43:2c:f7:d4:14:52:f5:52:1c:
                    50:d1:42:b4:e5:90:de:6c:96:2d:f1:16:d1:2f:e1:
                    86:91:d9:07:50:ab:49:ec:f9:03:6b:6b:4a:f3:a8:
                    33:84:81:74:d7:a2:06:2a:9d:9b:c6:ad:e6:5d:e3:
                    80:8a:fd:92:6c:f4:03:02:a0:73:29:b3:6d:57:29:
                    53:35:af:e4:b6:e9:90:05:46:10:98:7b:1d:69:ed:
                    78:0e:f6:d1:ad:f7:32:8f:3b:fe:02:2d:ce:5b:2b:
                    e6:23:21:0c:fc:5c:9a:c0:4f:5f:32:9f:71:b8:27:
                    c7:a4:ac:c3:14:27:8d:a5:3c:3c:29:b5:c2:75:07:
                    71:b8:ef:e8:10:58:af:e8:5e:54:20:32:ae:31:18:
                    d4:fc:eb:db:da:5b:31:aa:4d:f8:d8:a7:2c:24:8b:
                    a4:2a:c9:33:fd:ef:1a:51:3d:6a:52:59:c9:c4:4b:
                    44:8d:2f:57:81:1d:21:b0:e0:86:3d:b6:1b:ac:4a:
                    68:d2:e8:77:71:30:f4:98:7f:ce:27:12:61:6f:2b:
                    b4:d2:c4:ae:94:f1:f9:4c:12:60:32:36:43:9d:28:
                    2c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:66:FA:FA:3F:EB:C4:7D:E8:EE:79:AA:06:42:C2:62:21:94:82:E6
            X509v3 Authority Key Identifier:
                keyid:D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32302e302f32322d3232203d3e203532363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:a5:13:e7:4f:b0:23:fe:0d:7b:a3:0f:62:14:de:36:25:b2:
         72:c5:2b:cd:8e:77:06:29:df:34:c9:51:6a:25:45:1f:4b:6b:
         07:77:3c:63:06:2c:5a:c9:75:5b:e1:d7:2a:a9:48:c5:28:a5:
         d4:5c:f6:38:8b:d8:a1:14:c7:7c:8d:42:05:de:aa:42:46:b5:
         1b:13:96:93:a9:6b:fb:e9:b0:1a:fc:1a:0c:89:94:96:39:5e:
         61:65:8b:5e:bd:f8:38:97:bc:48:57:cb:8a:78:0f:9e:1e:3f:
         65:d3:0f:9c:61:6d:b2:9b:8d:75:54:56:fb:70:41:5f:ee:33:
         2a:53:c1:e9:dd:9a:fc:0a:27:4a:0a:f4:7c:3d:d3:03:3e:83:
         cd:45:68:bc:cd:30:3b:2b:53:30:c5:21:02:60:99:b5:e4:61:
         73:94:a6:0b:da:d0:b8:bc:a6:24:1e:f2:ad:00:ed:92:9b:f6:
         d1:40:a4:f5:40:71:0e:9a:ec:5c:a6:a8:e1:4d:93:06:ba:ed:
         21:90:12:dd:a7:18:97:e2:b1:07:f0:0c:07:7a:71:a2:ef:43:
         0e:77:f9:8f:ca:81:90:28:a5:3a:35:57:c3:4c:eb:21:7e:2b:
         b2:3e:a0:95:00:f0:a0:fa:85:ee:5b:ec:8b:ec:b9:29:32:3e:
         28:fd:bb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----