Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39332e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e39332e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          xCrY60YFu9pn5TgAi+c+Qe1Dd+FoA21tnfPKSj8u6o8=
Subject key identifier:   02:25:08:A8:FC:58:42:DC:ED:BB:84:C3:79:F1:C9:66:4B:51:0C:BA
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       7BF52A4CA258BA47BB066F65DF23992C34206604
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39332e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 29 Sep 2025 14:06:10 +0000
ROA not before:           Mon 29 Sep 2025 14:01:10 +0000
ROA not after:            Mon 28 Sep 2026 14:06:10 +0000
asID:                     262352
IP address blocks:        177.126.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f5:2a:4c:a2:58:ba:47:bb:06:6f:65:df:23:99:2c:34:20:66:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Sep 29 14:01:10 2025 GMT
            Not After : Sep 28 14:06:10 2026 GMT
        Subject: CN=022508A8FC5842DCEDBB84C379F1C9664B510CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:bb:f9:9c:91:e3:16:73:9c:3e:be:92:3a:
                    15:c0:a9:cd:e6:02:50:bd:75:47:c8:ba:cf:33:b8:
                    4b:5c:52:d2:de:a1:e8:e6:43:a7:af:2c:62:c2:89:
                    d0:9c:f2:bd:e9:34:a2:16:3b:b9:d6:65:77:1e:7a:
                    db:4d:2d:f2:16:19:42:73:ca:a8:d3:87:ef:ea:bb:
                    bd:d8:4e:a1:89:c4:a2:e1:b0:a4:68:00:80:2f:18:
                    e2:44:cc:ca:00:31:cf:73:36:e3:9a:31:70:ef:ce:
                    e6:ed:ec:e6:f8:dc:1c:d6:6e:e9:75:08:7e:49:13:
                    3c:96:a6:19:47:7c:28:29:96:33:36:0a:93:b8:38:
                    86:a2:61:4d:80:87:1f:63:21:22:83:7c:30:10:3a:
                    f2:27:bd:a9:1d:d7:31:ff:be:af:45:bf:74:fb:68:
                    33:89:ae:ff:1e:65:31:85:23:03:ab:33:c0:31:21:
                    44:07:fb:24:8c:ff:fe:65:ab:2e:de:57:cb:88:11:
                    c0:22:b4:a2:5b:f9:7c:fb:12:30:55:31:b8:45:38:
                    75:b5:6d:b5:7f:79:d6:39:06:b5:fb:9e:13:9b:1b:
                    9b:cf:4a:25:65:83:f7:ee:50:b7:a4:63:31:90:b2:
                    2c:34:14:b6:41:73:f2:e3:14:d5:f8:f7:34:9c:82:
                    fa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:25:08:A8:FC:58:42:DC:ED:BB:84:C3:79:F1:C9:66:4B:51:0C:BA
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39332e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:dc:02:60:0a:6d:9f:4b:e1:45:a2:ae:a7:9b:4b:50:3b:92:
         b4:84:19:c3:52:f7:70:21:79:4b:83:21:c3:2b:b1:3e:9e:0f:
         9f:60:81:6f:32:d5:97:66:a5:14:5a:08:e7:96:30:07:4c:98:
         3e:e4:3f:1c:2b:ed:db:17:c6:ec:f2:a7:9c:d6:44:88:d2:7e:
         ba:d4:92:1e:fe:f6:20:be:27:fc:e6:0f:7e:35:dc:82:ab:f8:
         29:26:41:2d:56:64:5b:3d:c1:04:1c:52:73:9e:02:b8:99:04:
         40:da:9c:05:57:aa:19:a7:f7:22:04:c6:d9:19:19:ad:6e:d3:
         39:f7:64:39:44:e2:d1:56:78:50:91:1e:f7:96:73:30:3f:cf:
         f8:32:8d:35:97:9e:51:7c:26:06:a2:95:7c:78:98:7f:c7:34:
         a3:1f:fe:d6:25:1c:5b:42:59:bb:5a:b4:4f:d3:eb:a3:0d:0c:
         38:61:c6:93:57:6f:03:e0:31:ef:36:39:ab:cf:5a:53:05:9d:
         a3:11:0f:cf:e6:1e:b1:be:91:7d:ed:9f:87:88:73:4c:30:b5:
         2f:28:84:92:2e:d4:29:a9:92:84:3b:a5:2a:dd:60:48:9e:a3:
         b7:97:7c:73:30:7a:4f:94:27:0b:02:79:c5:c1:e7:45:dd:40:
         0f:65:67:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:50:49 2025 by rpki-client