Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/3137372e33392e31362e302f32312d3332203d3e20323632343135.roa
File:                     3137372e33392e31362e302f32312d3332203d3e20323632343135.roa (raw, json)
Hash identifier:          +yRF21A8fL5OonBwwbntKaO5bwHir6E5UjxlwnolWPE=
Subject key identifier:   FE:C4:03:53:EE:33:8C:2E:B5:89:5A:85:14:F9:04:1E:F0:43:1A:0B
Certificate issuer:       /CN=EA616CE7F20E4B43377EB103CA139E5C8A6299DF
Certificate serial:       59B9305AEC11A6A094AE4632BA2F8442647DF4AD
Authority key identifier: EA:61:6C:E7:F2:0E:4B:43:37:7E:B1:03:CA:13:9E:5C:8A:62:99:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/3137372e33392e31362e302f32312d3332203d3e20323632343135.roa
Signing time:             Tue 23 Sep 2025 19:51:45 +0000
ROA not before:           Tue 23 Sep 2025 19:46:45 +0000
ROA not after:            Tue 22 Sep 2026 19:51:45 +0000
asID:                     262415
IP address blocks:        177.39.16.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.crl
                          rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Oct 2025 00:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b9:30:5a:ec:11:a6:a0:94:ae:46:32:ba:2f:84:42:64:7d:f4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA616CE7F20E4B43377EB103CA139E5C8A6299DF
        Validity
            Not Before: Sep 23 19:46:45 2025 GMT
            Not After : Sep 22 19:51:45 2026 GMT
        Subject: CN=FEC40353EE338C2EB5895A8514F9041EF0431A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7a:58:5e:74:7d:9f:d3:d4:0b:56:55:5d:3e:
                    78:93:55:36:b2:4b:5f:7d:d6:22:f4:da:0e:86:3f:
                    42:ec:eb:bd:03:db:cf:f5:5a:17:89:01:e3:35:07:
                    6f:4f:09:33:a8:ca:a9:08:49:a2:0f:8b:1d:5a:8c:
                    bd:0f:c0:33:2c:a9:70:90:e3:d6:38:25:06:20:1b:
                    a0:a8:b5:55:c8:b2:15:c6:4f:83:e1:95:8e:65:8c:
                    81:b0:44:92:9b:5b:cf:ff:fc:3f:55:65:61:bf:e2:
                    87:6e:94:50:b8:20:3d:00:61:33:6e:58:2f:44:52:
                    04:0c:1f:80:32:41:42:81:bc:4a:52:72:eb:3b:9b:
                    bb:08:0b:38:49:ff:29:54:67:bd:44:f1:17:3c:5c:
                    32:b1:86:c0:ec:73:69:b4:fd:88:44:46:84:b8:b7:
                    a0:d4:5c:fa:05:23:d8:b7:e6:97:88:fa:34:9d:c6:
                    08:8c:ff:7d:97:d3:47:f3:f3:63:57:2d:70:3a:0b:
                    35:94:f2:24:45:d0:d7:db:c1:b4:02:b4:e6:79:0d:
                    f8:7e:fa:08:a6:57:c8:02:56:7d:75:66:43:6d:d6:
                    18:2e:dd:31:e0:87:cb:c3:a5:72:0b:8b:a2:4e:d2:
                    8d:3b:24:5b:87:e5:4d:f2:3f:18:6f:29:fd:b1:e5:
                    b8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C4:03:53:EE:33:8C:2E:B5:89:5A:85:14:F9:04:1E:F0:43:1A:0B
            X509v3 Authority Key Identifier:
                keyid:EA:61:6C:E7:F2:0E:4B:43:37:7E:B1:03:CA:13:9E:5C:8A:62:99:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/3137372e33392e31362e302f32312d3332203d3e20323632343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:4f:5d:58:3d:3b:aa:4e:f4:e8:e3:8a:d5:9b:27:95:71:93:
         b4:66:56:f5:83:c1:c0:b3:56:39:d2:0d:ad:61:56:70:27:bf:
         fe:80:7c:74:48:a9:e2:6e:79:d1:7f:5d:90:ef:67:44:76:be:
         96:17:96:1b:bd:e4:b0:6f:1c:ea:74:0b:af:fc:c1:a5:32:9c:
         ef:30:5f:53:e4:21:61:ee:48:d6:b7:42:2b:f3:c4:1f:3d:86:
         86:bc:a5:ed:87:90:e9:5a:9c:76:08:6f:10:65:ca:60:77:8c:
         da:2c:29:04:dd:23:6f:37:21:07:d7:5e:5c:43:2e:56:ae:cd:
         57:0b:7a:3f:f5:84:e0:0f:9b:1d:6f:a7:db:4b:04:30:c0:47:
         7b:f9:4b:2a:2b:ae:aa:f6:b2:43:2c:3e:1a:9c:2b:ec:33:4c:
         f5:e4:22:26:41:4d:32:8a:e1:a7:f9:78:80:15:77:60:92:64:
         a1:8c:bf:01:d0:72:55:2d:36:a4:73:31:f4:33:83:fd:38:50:
         f0:25:f4:09:f6:fe:18:97:74:01:f0:db:f9:93:a3:72:4a:ca:
         d5:b8:1c:7d:98:b2:8c:f6:8f:81:30:f0:c4:e4:9d:53:2c:ff:
         ee:f8:e5:77:2b:10:65:2b:4d:c9:04:0f:2d:1b:18:a4:5d:a9:
         8c:27:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 14:10:03 2025 by rpki-client