Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38332e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38332e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          cYNIGGfOAQmG7F11DUeo+cnxrcUN4tS36rUuLF+hkKk=
Subject key identifier:   FE:29:47:B1:04:5B:37:8D:DC:F5:03:F7:57:F4:12:04:03:37:BA:96
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       7CB9B2A3CD79F477C8B5658F45936E7B4A6F4B22
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38332e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 29 Sep 2025 13:06:09 +0000
ROA not before:           Mon 29 Sep 2025 13:01:09 +0000
ROA not after:            Mon 28 Sep 2026 13:06:09 +0000
asID:                     262352
IP address blocks:        177.126.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b9:b2:a3:cd:79:f4:77:c8:b5:65:8f:45:93:6e:7b:4a:6f:4b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Sep 29 13:01:09 2025 GMT
            Not After : Sep 28 13:06:09 2026 GMT
        Subject: CN=FE2947B1045B378DDCF503F757F412040337BA96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:ca:38:03:58:92:07:c5:42:94:b1:f1:b4:
                    cd:4f:4d:86:3d:ee:49:21:2d:a0:f8:93:10:3d:8c:
                    58:4e:d7:6d:ee:93:83:7c:0c:ff:ae:a6:d3:63:bf:
                    39:bd:63:b3:f7:e9:a2:e6:93:3b:a7:55:f4:65:03:
                    45:e9:38:8d:74:20:aa:88:77:15:ce:af:ca:a9:22:
                    c7:00:53:ca:de:a3:3e:6b:9f:52:71:6c:8a:c2:e8:
                    05:1f:be:bd:6a:4c:00:61:db:bf:7e:c9:3b:5a:d8:
                    46:4c:a4:0e:e0:7b:1a:d9:13:e5:26:23:51:1f:2a:
                    bf:c3:a4:4f:98:c2:16:7b:1d:f3:ac:1f:4d:4b:95:
                    25:16:c3:4c:22:ff:d3:bb:88:db:50:16:63:04:31:
                    dc:6f:ab:f2:5a:d6:56:5a:b5:cc:ef:9f:48:bc:8a:
                    e4:ca:47:50:eb:72:fc:b0:5a:20:f4:fb:b7:d0:80:
                    80:f0:07:cd:a4:79:b2:64:8c:a7:9c:1e:b7:62:1a:
                    03:e0:86:3c:59:03:55:3c:4a:ca:1f:ec:c4:a4:97:
                    1a:e7:6a:f3:bb:d9:9c:39:06:fe:64:58:6e:fa:da:
                    4b:70:ca:95:86:17:1c:80:d5:bb:2b:bd:b3:82:ce:
                    1e:8f:7e:2a:a3:13:0f:e3:01:5b:af:de:aa:7e:d8:
                    18:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:29:47:B1:04:5B:37:8D:DC:F5:03:F7:57:F4:12:04:03:37:BA:96
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38332e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:64:24:51:b1:7e:e1:a2:ed:82:50:16:be:ea:09:b7:b3:54:
         4c:1d:24:ba:4b:55:5e:f0:11:b3:42:e5:be:5d:70:a2:61:9b:
         7e:73:15:ea:c8:62:a4:bd:12:ef:b5:14:d0:06:7e:81:ac:8c:
         fc:95:41:5d:92:9b:45:3d:47:95:2f:f9:14:fc:77:f1:d0:ca:
         db:46:bf:78:bc:ea:9c:19:19:1c:94:cb:9d:af:af:21:5e:02:
         b8:91:e0:0b:e2:0f:7f:f3:02:4c:f8:9f:f0:a4:48:55:4e:c3:
         05:e7:b5:96:4a:b5:ce:a5:55:ca:63:08:13:96:61:4c:e2:c2:
         3e:cd:4b:01:56:57:dc:93:66:e9:eb:05:65:a5:69:44:4f:1e:
         9e:e0:73:9c:b6:2e:f1:23:9f:2d:92:91:be:6a:97:50:5c:0b:
         34:06:02:a4:63:2e:ca:0b:f7:8c:a0:08:1a:0b:e1:b1:96:c8:
         19:90:42:2f:fe:78:26:64:c7:e1:1a:8f:cd:77:88:32:0d:67:
         2b:3f:f8:48:0a:b1:29:b4:b6:3d:61:44:6a:54:23:e8:a0:69:
         b1:ad:fa:68:59:76:33:d4:3f:9c:97:75:51:24:12:d3:dc:96:
         7c:d2:18:bf:1c:31:b3:5b:f5:43:30:4c:1d:fd:e1:7f:83:68:
         f6:e4:4c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:24:05 2025 by rpki-client