Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38372e37322e302f32312d3234203d3e20323632343434.roa
File:                     3137372e38372e37322e302f32312d3234203d3e20323632343434.roa (raw, json)
Hash identifier:          sADB+uEWZpTHenC6oh2VDogoH0oq5bd2KJ/CXHcsoq8=
Subject key identifier:   13:3E:63:A2:07:E6:22:60:EA:2F:C4:A7:B3:C9:EA:F1:00:BA:A2:26
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       13C62404F79B694012CE1D3E2301C3B13A3FBB8F
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38372e37322e302f32312d3234203d3e20323632343434.roa
Signing time:             Mon 14 Jul 2025 16:08:53 +0000
ROA not before:           Mon 14 Jul 2025 16:03:53 +0000
ROA not after:            Mon 13 Jul 2026 16:08:53 +0000
asID:                     262444
IP address blocks:        177.87.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c6:24:04:f7:9b:69:40:12:ce:1d:3e:23:01:c3:b1:3a:3f:bb:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul 14 16:03:53 2025 GMT
            Not After : Jul 13 16:08:53 2026 GMT
        Subject: CN=133E63A207E62260EA2FC4A7B3C9EAF100BAA226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:d1:41:22:63:cb:47:72:7e:d4:72:13:40:
                    e0:74:7c:cb:0e:0a:e6:28:72:53:bc:49:d2:3b:87:
                    80:46:d0:2f:0b:65:51:f9:8f:d3:3c:04:28:ea:cc:
                    df:5a:7d:41:ac:99:f1:b0:76:4e:bc:22:95:86:e4:
                    bf:6c:a5:94:9e:12:e4:67:d1:c3:fa:d4:7b:0f:21:
                    ae:d1:1e:99:13:c5:74:fc:63:08:1f:92:02:4e:21:
                    b7:19:8b:e8:6e:b2:6d:52:45:33:cb:d2:04:e6:05:
                    cd:28:2e:0c:7d:f8:f0:2d:8a:f7:93:05:97:eb:79:
                    2b:c6:f8:ca:68:df:59:95:88:07:d5:fd:79:78:c6:
                    ea:5d:61:b8:8a:06:7b:97:f8:ec:0b:9b:ff:c4:23:
                    53:b0:11:9d:a0:de:db:91:06:9b:59:ac:fc:2f:2f:
                    cd:16:fc:cf:95:9a:1c:bb:ce:f3:cb:0a:b2:fd:4b:
                    7b:a6:c9:ae:b4:11:d8:95:88:e9:23:c4:86:75:ae:
                    7a:fb:23:aa:db:9e:53:49:f0:f6:93:8b:ad:87:6d:
                    77:6c:00:a6:4e:c5:28:6e:03:21:ae:d4:fd:ee:98:
                    6e:79:23:88:ac:6d:40:c2:86:80:b4:4f:5e:c2:35:
                    a1:f4:9d:87:5d:bb:42:fe:81:1a:1e:7e:4d:f6:9f:
                    c3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3E:63:A2:07:E6:22:60:EA:2F:C4:A7:B3:C9:EA:F1:00:BA:A2:26
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38372e37322e302f32312d3234203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bb:14:36:55:da:28:c2:cb:f7:06:ff:90:91:b8:87:d5:ef:68:
         4f:8c:9c:17:61:5b:1f:35:16:9a:34:13:a0:fe:1a:fd:23:39:
         78:fa:c9:e1:23:84:3c:3b:88:35:b0:20:f2:3f:8a:ee:45:30:
         a7:0a:a0:e0:91:bb:2b:39:7c:8a:36:bd:b1:11:af:8f:98:90:
         e3:39:4e:81:16:07:26:e1:4d:eb:40:98:fc:1d:1d:26:79:4f:
         46:b4:6c:ef:e7:f4:80:6a:b1:68:b0:08:5f:41:ea:da:e2:2e:
         c4:d9:e0:6e:3a:3e:45:d1:42:aa:5f:f3:14:c1:8a:d2:8a:51:
         b3:0e:09:54:33:f5:d8:4b:36:71:f7:25:46:7b:13:32:5d:7c:
         00:13:fe:02:d2:5a:99:5c:6f:d3:95:3f:c1:54:11:78:8b:6a:
         3c:9e:9b:ba:ad:3a:a8:32:99:6c:2b:a1:fb:2f:e3:92:0d:d6:
         e0:d0:ba:cb:45:e8:2d:f3:8d:bc:39:13:0c:be:26:93:fb:b8:
         32:90:39:30:d3:fd:47:2f:3b:1c:a7:9d:54:46:5f:6e:05:f7:
         f6:5a:df:5a:99:57:74:9c:cb:52:34:6a:c0:82:c0:20:86:ba:
         1d:98:d1:bc:7c:b0:dc:00:ab:b9:94:2b:22:88:c6:df:3a:b3:
         55:7b:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:03:49 2025 by rpki-client