Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36362e302f32332d3233203d3e20323633323839.roa
File:                     3137372e3139302e36362e302f32332d3233203d3e20323633323839.roa (raw, json)
Hash identifier:          lwAdELDSa5DmYec++zmQ28genjYlNj1Nc+cBsBSprAk=
Subject key identifier:   5A:30:D8:1C:CB:FA:79:5E:A0:30:F3:A2:D0:58:85:19:A7:30:63:4C
Certificate issuer:       /CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
Certificate serial:       1931D4826F53506D4D1B3583F54C73C93E3022CC
Authority key identifier: 15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36362e302f32332d3233203d3e20323633323839.roa
Signing time:             Tue 07 Oct 2025 23:28:45 +0000
ROA not before:           Tue 07 Oct 2025 23:23:45 +0000
ROA not after:            Tue 06 Oct 2026 23:28:45 +0000
asID:                     263289
IP address blocks:        177.190.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl
                          rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:31:d4:82:6f:53:50:6d:4d:1b:35:83:f5:4c:73:c9:3e:30:22:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Validity
            Not Before: Oct  7 23:23:45 2025 GMT
            Not After : Oct  6 23:28:45 2026 GMT
        Subject: CN=5A30D81CCBFA795EA030F3A2D0588519A730634C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:8a:c8:22:c0:4d:12:36:4f:cf:51:56:a0:
                    ee:f5:69:89:cc:2a:3c:83:ce:d8:ad:d5:e6:62:94:
                    09:75:1e:74:76:64:d3:b6:f8:8a:67:43:1b:98:55:
                    6b:8d:59:7a:d8:8a:43:f3:be:5d:4a:b8:99:1b:9b:
                    7d:87:7c:af:b3:4a:22:32:fd:25:e8:ee:3d:a4:38:
                    3a:1a:4f:96:8b:96:23:ba:50:2c:89:fb:f1:c0:39:
                    c6:31:bc:74:b7:4c:a4:92:cd:ac:18:a8:f4:4a:6b:
                    07:8b:55:ee:26:43:d3:3b:93:1b:30:4b:ec:48:06:
                    da:3d:49:58:eb:54:7e:76:5f:20:79:97:7c:0c:2a:
                    b8:cb:4d:a4:b8:4c:60:dd:9b:71:29:9b:15:5d:26:
                    67:5f:71:da:97:6c:0c:95:23:f1:37:f0:65:42:6a:
                    a0:96:cd:1e:93:78:37:6c:9a:7b:4b:03:ec:af:cb:
                    56:72:b0:a5:f0:08:fd:b6:0e:fb:bd:65:3b:05:6b:
                    37:57:b8:8f:43:ef:9e:67:13:c1:bd:f7:bd:7b:e7:
                    5c:36:04:7e:db:13:77:e9:bc:52:13:3e:e7:3a:e1:
                    f1:18:d9:f0:1e:ac:53:45:3c:90:72:b5:3d:3f:44:
                    60:ff:76:0c:33:63:82:57:1e:d4:98:40:b6:98:c2:
                    96:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:30:D8:1C:CB:FA:79:5E:A0:30:F3:A2:D0:58:85:19:A7:30:63:4C
            X509v3 Authority Key Identifier:
                keyid:15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36362e302f32332d3233203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:b2:33:72:c9:fc:0b:d0:92:37:ec:d0:c0:45:ab:52:a7:8a:
         df:76:34:ab:24:4a:3c:74:44:f0:ab:3f:72:95:be:0b:ff:5f:
         f7:ed:58:ed:16:26:a8:80:7f:0e:0b:0a:68:2a:db:3e:e6:d6:
         11:72:66:8f:53:9a:bc:e9:2d:eb:5b:f2:fd:d5:1a:e9:18:b2:
         1c:9f:5c:0a:8a:d4:1b:be:20:b0:cb:af:91:a4:4c:cb:df:d1:
         67:1e:df:1f:26:27:24:58:d0:9e:07:19:fb:72:93:00:e4:61:
         e9:8b:df:62:1f:3d:d5:bb:fd:56:4c:77:d2:c7:58:7e:6c:88:
         f4:26:fa:9e:89:42:8d:3d:2d:d6:9a:7b:7b:d3:9e:97:d0:3f:
         c5:ec:ea:30:ae:1e:3a:7d:ce:1c:72:30:0d:c4:74:99:90:c3:
         0e:39:4d:6d:48:2e:3c:7f:f7:9c:27:b4:ad:b7:b3:11:12:16:
         16:03:9d:82:ca:9b:79:ba:e4:f8:d8:6c:59:61:2d:80:81:cd:
         2a:e5:e7:78:bc:69:52:db:dc:f1:bc:d0:df:1c:a1:ac:ab:bb:
         7c:60:a6:91:07:3d:c4:05:d5:a9:35:4e:df:7f:cf:6f:d2:79:
         9c:c8:0e:8d:27:3b:9f:0b:8b:55:54:76:41:50:40:86:dc:a1:
         f1:85:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:44:00 2025 by rpki-client