Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          qbQYewIw+xdw59UYzOP9seYK/y8XPmWwtIDpQ+1J8/8=
Subject key identifier:   F7:ED:F1:DD:E1:D5:E9:89:37:B8:EC:C7:B9:FD:7E:26:FC:B9:2B:1E
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       224274626997C115A409C6D6A6B432FF771D2FDF
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 29 Sep 2025 13:06:09 +0000
ROA not before:           Mon 29 Sep 2025 13:01:09 +0000
ROA not after:            Mon 28 Sep 2026 13:06:09 +0000
asID:                     262352
IP address blocks:        177.126.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:42:74:62:69:97:c1:15:a4:09:c6:d6:a6:b4:32:ff:77:1d:2f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Sep 29 13:01:09 2025 GMT
            Not After : Sep 28 13:06:09 2026 GMT
        Subject: CN=F7EDF1DDE1D5E98937B8ECC7B9FD7E26FCB92B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:59:40:5f:91:d5:fc:05:82:6e:bc:0d:86:
                    61:5f:9a:fd:20:bf:c9:de:42:11:8e:51:2d:ae:7f:
                    19:aa:d1:3d:85:d5:2a:79:88:92:63:19:cf:f8:c6:
                    29:b2:f7:2e:a0:b0:d7:dd:fe:21:52:b8:8d:76:c7:
                    b6:1d:b2:f5:68:e6:d6:78:57:b0:e7:5a:83:fe:67:
                    8e:18:f7:07:8d:89:6a:00:1c:87:c4:79:26:31:b1:
                    41:0a:e0:ec:27:88:60:8a:51:56:1f:a1:8b:54:70:
                    bb:df:04:5d:a9:5f:67:7d:1f:5d:06:fe:ec:37:88:
                    1d:8f:38:ff:0c:d4:99:e3:33:d7:4d:e8:11:cb:6f:
                    41:63:93:c2:2f:19:57:72:95:10:f7:77:7f:e1:ec:
                    7d:91:9f:60:a9:5e:93:38:21:63:24:2c:53:17:c5:
                    7f:bb:6d:dd:f2:02:6c:49:53:c4:92:56:f8:5d:63:
                    76:14:bf:b3:c7:46:06:de:45:5f:97:1e:e6:88:52:
                    0b:a2:23:3c:86:2b:a8:6a:83:01:94:cc:7f:a8:25:
                    37:09:b2:82:8f:44:e4:04:1f:72:e0:3a:0a:a0:74:
                    49:a6:86:3a:aa:21:a3:ac:59:ce:f4:3a:a1:00:5e:
                    96:c5:6c:85:89:04:a7:a0:3f:57:bb:da:1e:16:cd:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:ED:F1:DD:E1:D5:E9:89:37:B8:EC:C7:B9:FD:7E:26:FC:B9:2B:1E
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:b4:a1:b9:6f:53:40:0c:4e:d0:10:e0:76:85:b2:13:ce:1c:
         cc:38:99:19:68:22:43:14:f8:f1:8c:04:3e:20:a6:ed:38:e9:
         5c:f5:be:e9:cc:cf:eb:d2:cd:f0:4c:92:fc:b2:ac:26:80:d4:
         f6:b3:a2:6d:7a:99:2b:89:2d:d9:03:a3:53:e9:18:9d:25:2f:
         0b:44:82:b7:9f:5c:4a:8a:55:a2:6c:3b:7d:f4:aa:41:f1:6e:
         4c:fc:31:8f:46:50:74:68:02:91:73:93:07:d0:21:b0:dd:b9:
         60:d8:c9:b5:0c:04:f9:58:ea:5e:7b:61:3f:14:09:11:a5:44:
         38:fd:e4:3e:c7:82:f1:1f:09:81:e5:04:66:47:53:57:81:ba:
         6c:77:be:58:3a:83:bd:85:ce:58:46:d4:d9:0e:73:57:6f:9c:
         a5:38:ce:3e:6b:a0:6f:5a:e6:d7:00:04:77:b0:50:2a:57:b0:
         16:86:0a:0c:e0:d0:b3:83:f2:4c:19:b2:2d:8c:8c:98:b3:8a:
         e0:43:1b:37:cb:58:27:9d:46:b4:58:e6:b8:d1:60:dc:81:7d:
         90:a8:28:7f:37:70:d9:b2:13:15:6d:db:58:7d:35:65:c8:77:
         f2:28:09:97:9e:92:49:0c:35:e6:8a:30:24:0a:2d:ab:b2:d4:
         e0:bc:db:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:50:58 2025 by rpki-client