Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/3137372e3133362e3230302e302f32312d3332203d3e20323632343135.roa
File:                     3137372e3133362e3230302e302f32312d3332203d3e20323632343135.roa (raw, json)
Hash identifier:          HnLrJJVMiwJxNR0itOegUUdty9uljbsH9mYN/rVNUYI=
Subject key identifier:   F7:63:CA:6A:08:CF:01:E8:5F:4B:FB:26:4E:C7:F1:71:FF:02:2F:A3
Certificate issuer:       /CN=EA616CE7F20E4B43377EB103CA139E5C8A6299DF
Certificate serial:       242D6BDDCBFEEBBEDB1C4EDAD10B707A601C7059
Authority key identifier: EA:61:6C:E7:F2:0E:4B:43:37:7E:B1:03:CA:13:9E:5C:8A:62:99:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/3137372e3133362e3230302e302f32312d3332203d3e20323632343135.roa
Signing time:             Tue 23 Sep 2025 19:51:02 +0000
ROA not before:           Tue 23 Sep 2025 19:46:02 +0000
ROA not after:            Tue 22 Sep 2026 19:51:02 +0000
asID:                     262415
IP address blocks:        177.136.200.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.crl
                          rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Oct 2025 00:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2d:6b:dd:cb:fe:eb:be:db:1c:4e:da:d1:0b:70:7a:60:1c:70:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA616CE7F20E4B43377EB103CA139E5C8A6299DF
        Validity
            Not Before: Sep 23 19:46:02 2025 GMT
            Not After : Sep 22 19:51:02 2026 GMT
        Subject: CN=F763CA6A08CF01E85F4BFB264EC7F171FF022FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ab:d2:c9:b2:15:b9:13:d1:cc:59:ca:80:ab:
                    d5:7a:78:50:5b:85:b5:b8:bd:c4:8e:bd:fe:b8:0d:
                    0c:ea:04:1a:a7:a5:a0:d4:46:f1:db:41:20:77:5a:
                    18:2e:a1:0b:78:f6:f7:ee:52:78:1a:af:81:65:ff:
                    e6:38:3a:40:da:31:54:82:01:8c:95:a3:39:cf:b6:
                    3b:8f:d0:5e:b4:26:82:b2:9c:23:e4:98:ea:91:3a:
                    92:9c:c6:d2:dc:b4:38:60:67:45:75:84:90:57:22:
                    75:d2:62:56:36:59:45:42:9f:1e:7d:7b:75:99:5a:
                    d6:39:6f:35:11:84:fc:58:36:c8:b7:d4:53:22:fc:
                    6d:99:b0:28:49:37:b0:40:f2:16:fa:0e:78:b5:5b:
                    45:17:73:c1:6e:f6:48:19:84:5b:cb:0f:58:82:dc:
                    53:cc:ec:03:6d:b2:08:83:cb:7d:b3:26:36:5a:b8:
                    e3:37:0e:fc:5b:54:bb:5d:db:33:a6:5b:6f:7f:45:
                    f6:4d:ea:1b:fe:64:a8:0c:ab:59:a7:01:86:e8:40:
                    1f:14:a3:af:64:18:d1:a9:87:fb:06:38:a7:03:4e:
                    1b:c5:f0:23:c0:93:3f:52:99:bf:eb:62:c6:27:87:
                    46:5b:3c:22:26:5c:96:4c:39:00:5c:5e:7a:c6:2f:
                    5f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:63:CA:6A:08:CF:01:E8:5F:4B:FB:26:4E:C7:F1:71:FF:02:2F:A3
            X509v3 Authority Key Identifier:
                keyid:EA:61:6C:E7:F2:0E:4B:43:37:7E:B1:03:CA:13:9E:5C:8A:62:99:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/3137372e3133362e3230302e302f32312d3332203d3e20323632343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:9e:05:74:95:ee:3c:95:9e:b8:81:a5:7f:2d:b7:28:f9:1f:
         5c:79:a8:c4:4f:f6:dd:74:f9:5a:db:32:f0:98:d3:a7:52:90:
         8a:aa:3f:f1:8d:f0:6c:54:a6:1d:39:fe:03:27:93:d3:1f:89:
         2d:1b:94:81:fe:10:42:b8:a4:87:a1:96:86:0e:c4:38:72:b5:
         a9:c7:0a:70:26:ea:83:ef:f1:d5:89:fa:eb:55:2f:09:8b:a7:
         a4:d0:c3:8b:37:34:62:4f:c8:f8:95:3e:29:7c:5c:40:52:b9:
         48:55:0d:ac:c9:6c:6a:33:9a:71:c3:a9:e2:d6:1d:2e:8f:ad:
         ce:9a:ff:7e:27:b4:12:bf:4e:b8:92:8b:33:bf:7c:75:ee:68:
         17:a1:ac:4a:88:05:4a:98:4c:e3:14:33:ef:b9:f7:b6:66:76:
         9e:26:05:85:62:01:18:e4:1c:1c:c2:a4:f1:d8:ad:5e:a5:27:
         2a:31:97:cc:4d:d8:e2:e9:87:a8:12:cb:44:72:f4:a0:d4:e3:
         b7:6d:78:cc:ca:74:9a:d4:67:7b:bf:40:d3:76:f4:3b:c0:2b:
         db:4e:7d:bf:1d:89:f7:bc:d3:7a:3d:cf:ea:04:a2:89:83:ca:
         b9:0e:7a:f5:05:13:37:40:5d:50:95:3b:d6:3a:87:6c:34:24:
         90:72:5a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 14:10:01 2025 by rpki-client