Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/3137302e37392e3133362e302f32332d3233203d3e20323636333031.roa
File:                     3137302e37392e3133362e302f32332d3233203d3e20323636333031.roa (raw, json)
Hash identifier:          HPNzN86ppkNky7k257aP6Q5tQmOUBTUtoAqb7C45mGM=
Subject key identifier:   7B:A1:86:AD:55:F7:CF:14:E7:75:A9:3D:82:F4:AA:8F:FD:27:DB:42
Certificate issuer:       /CN=774CB762631C4ECCE6178AC72CD05509DDA606A3
Certificate serial:       05F213F46464FAC0E3729139939CF2BB795E11A1
Authority key identifier: 77:4C:B7:62:63:1C:4E:CC:E6:17:8A:C7:2C:D0:55:09:DD:A6:06:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/3137302e37392e3133362e302f32332d3233203d3e20323636333031.roa
Signing time:             Wed 08 Oct 2025 19:30:17 +0000
ROA not before:           Wed 08 Oct 2025 19:25:17 +0000
ROA not after:            Wed 07 Oct 2026 19:30:17 +0000
asID:                     266301
IP address blocks:        170.79.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.crl
                          rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f2:13:f4:64:64:fa:c0:e3:72:91:39:93:9c:f2:bb:79:5e:11:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=774CB762631C4ECCE6178AC72CD05509DDA606A3
        Validity
            Not Before: Oct  8 19:25:17 2025 GMT
            Not After : Oct  7 19:30:17 2026 GMT
        Subject: CN=7BA186AD55F7CF14E775A93D82F4AA8FFD27DB42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e9:3f:12:b4:9f:fb:ac:cd:58:5b:6f:79:84:
                    3e:a5:f8:29:43:a9:35:4c:04:32:6c:2e:2b:6a:66:
                    b1:89:ea:d7:8a:26:d3:e5:9c:05:36:6b:0f:50:61:
                    eb:44:1a:da:e5:e0:28:e6:e0:ee:a9:dd:29:f9:28:
                    ab:8e:bd:06:76:ee:7b:c8:c8:88:a2:69:11:4c:cf:
                    cc:21:2f:0b:3f:e9:97:88:ef:33:ab:18:c1:fc:50:
                    f7:39:da:93:08:7d:49:98:fc:62:09:6e:a0:32:a0:
                    39:03:89:1a:bb:c1:8f:bb:ed:05:bf:20:3a:7a:5e:
                    65:8a:fd:56:25:25:2f:69:ff:bf:19:80:c9:b2:4d:
                    91:78:34:62:1f:db:35:c1:ee:76:b4:ad:53:b2:6b:
                    fd:53:42:b3:66:3a:4d:fa:fa:b3:9f:2c:4f:02:39:
                    06:7c:4c:a2:73:6a:8f:4b:4e:cd:8d:cf:55:9c:de:
                    e3:53:ff:1e:96:9e:c4:5b:39:61:0f:99:76:3f:9f:
                    aa:f5:91:64:cd:2b:a1:85:6f:5b:e9:ef:ef:a0:9f:
                    6d:a2:2a:69:a9:ea:dd:bb:ce:21:30:e6:14:8b:35:
                    2b:5d:d1:87:48:bc:9a:51:0d:a6:0b:98:85:57:70:
                    5f:56:5c:89:e8:37:96:3d:2a:79:ce:62:6c:c0:9d:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A1:86:AD:55:F7:CF:14:E7:75:A9:3D:82:F4:AA:8F:FD:27:DB:42
            X509v3 Authority Key Identifier:
                keyid:77:4C:B7:62:63:1C:4E:CC:E6:17:8A:C7:2C:D0:55:09:DD:A6:06:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/3137302e37392e3133362e302f32332d3233203d3e20323636333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:39:da:76:3c:80:9c:3e:4f:46:30:10:93:c8:ab:1e:23:36:
         4a:6b:24:db:a2:30:57:8f:dc:37:94:5f:3d:38:7a:87:46:cb:
         85:06:46:d8:dc:0d:80:62:5a:ba:c1:cb:e9:20:60:42:16:ef:
         2e:be:b6:c4:75:7e:df:4c:7e:10:d1:19:fc:0d:1e:b8:b8:be:
         c5:be:03:17:df:2e:42:88:ca:01:2a:37:96:95:78:e9:8d:de:
         0a:e3:f8:30:19:09:67:4d:45:cc:f0:ef:0b:ab:2d:1f:81:69:
         1c:ac:0e:0c:31:68:70:a7:13:2d:6b:b5:52:b7:42:db:27:2e:
         11:be:87:bd:db:f0:d1:e2:31:cc:30:2c:d4:5f:fa:16:b2:e0:
         dc:78:6d:98:03:19:ac:7e:ed:6f:ba:0b:e3:57:32:b8:0a:43:
         ab:9f:0a:a3:a0:a8:a1:47:88:16:a3:bb:b2:04:79:08:32:7d:
         41:8f:c0:df:1d:b1:e1:f6:a3:33:a4:34:c2:7f:91:8f:62:02:
         0e:0b:50:3c:08:1e:b7:48:aa:52:81:16:a7:ee:db:9c:24:cc:
         71:8c:19:ce:d3:0e:b6:15:20:bf:c8:3a:5a:48:c1:05:88:f7:
         13:77:35:bd:de:42:e1:1c:21:c8:6a:30:97:5f:5a:7b:a7:2a:
         87:d2:93:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:55:59 2025 by rpki-client