Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38312e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38312e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          DsBNCPyFPyMYOrfD/hneka0dq4rs/iY3N+/USmHha3o=
Subject key identifier:   6F:76:AD:15:93:21:54:34:70:72:6B:E0:13:BC:2C:D1:97:37:44:62
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       3F4B89CDDC23B597A62FD4389FFAC7C908837CAE
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38312e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 29 Sep 2025 13:06:09 +0000
ROA not before:           Mon 29 Sep 2025 13:01:09 +0000
ROA not after:            Mon 28 Sep 2026 13:06:09 +0000
asID:                     262352
IP address blocks:        177.126.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4b:89:cd:dc:23:b5:97:a6:2f:d4:38:9f:fa:c7:c9:08:83:7c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Sep 29 13:01:09 2025 GMT
            Not After : Sep 28 13:06:09 2026 GMT
        Subject: CN=6F76AD159321543470726BE013BC2CD197374462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:87:df:0c:94:ae:c8:69:fb:44:70:74:c4:
                    ea:cb:75:7c:16:c4:4d:3a:f6:d6:a6:21:8a:64:5c:
                    ed:7d:b2:05:c9:98:e4:4a:5a:4a:b7:ea:ab:43:c0:
                    0a:3b:39:f5:c2:ae:07:8a:ff:d6:d9:41:8e:03:25:
                    85:59:68:c3:a5:62:d3:19:f2:68:9c:2b:53:a2:e8:
                    f5:6a:89:41:9b:28:5f:ef:9d:86:b3:dd:56:92:a4:
                    d6:b5:cd:99:78:2f:fe:7d:44:bf:35:d2:9a:c6:e4:
                    4e:ee:81:af:73:a8:a4:38:3c:a9:d3:04:0f:a1:e9:
                    e8:07:1e:8b:3a:ce:ed:6c:d4:1d:ff:c0:e0:4c:4e:
                    d5:9a:6e:48:50:db:a5:25:e6:86:f1:32:3d:b0:83:
                    2c:1d:4e:a8:f5:94:1d:fa:c7:0f:e3:72:16:29:1e:
                    b1:17:5c:cf:55:c2:83:31:88:f4:8b:36:a4:07:b3:
                    ca:c8:f1:2f:8a:de:83:f2:90:4e:da:cf:7a:5b:44:
                    a0:c7:cc:e6:8f:de:f9:40:85:ea:9e:78:b1:20:0b:
                    44:80:15:ff:df:bb:1f:92:2f:03:d4:a4:da:30:e9:
                    b2:f3:05:06:3f:f0:49:ef:40:1f:26:89:c6:b4:df:
                    34:c1:f4:a3:a8:22:5c:b2:85:20:e0:05:82:0a:a0:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:76:AD:15:93:21:54:34:70:72:6B:E0:13:BC:2C:D1:97:37:44:62
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38312e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:84:8a:1d:45:73:36:30:da:af:6b:a0:88:85:25:0a:c0:ac:
         a4:91:60:44:15:4d:0b:33:06:f4:d6:c4:4c:50:e0:40:20:06:
         5d:3e:b4:29:50:37:d3:ce:05:39:29:50:91:5e:35:a9:23:97:
         9e:3f:07:f5:02:0e:5a:68:cd:04:3f:d3:a5:62:93:45:b7:3e:
         57:e2:ac:d7:87:3c:59:ac:1a:ee:76:13:2e:ec:8f:b0:89:93:
         c2:12:e3:a5:1f:4d:e6:4e:12:68:dd:f4:cd:08:3c:66:93:4f:
         db:80:d2:d4:53:53:03:af:a6:08:c2:d5:19:d9:fe:2d:98:4e:
         09:bc:30:12:77:17:08:df:30:16:c5:27:68:4d:70:80:53:12:
         db:89:b9:a4:50:d8:a9:81:a6:eb:10:10:71:3a:0e:1c:44:62:
         60:fc:9b:32:1d:a5:14:20:6d:99:55:0f:28:5b:d6:f6:fb:49:
         27:93:84:19:9d:f8:e7:d3:5d:71:6d:f4:c8:44:f8:09:a5:da:
         e1:cc:c1:33:1b:64:47:09:b5:7a:20:13:89:75:dc:00:c6:5e:
         91:66:8d:46:4f:fd:c7:49:bd:5a:a1:41:cf:0f:a3:b8:32:82:
         16:17:e0:58:fe:8f:2f:88:8c:cd:96:1a:20:36:05:26:55:9c:
         b7:e1:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:50:21 2025 by rpki-client