Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/3137372e32332e35362e302f32312d3332203d3e20313938393439.roa
File:                     3137372e32332e35362e302f32312d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          mv3/jFMH/WFk97h2YglLXFAx04FlpcG2tngzh8QwfNw=
Subject key identifier:   38:29:2D:0A:E9:64:EE:DA:70:51:71:3F:44:79:E5:C0:B2:9C:A8:04
Certificate issuer:       /CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1
Certificate serial:       44A15B6F1E4E3C84F8E2DC04885DA3C4DD735680
Authority key identifier: C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/3137372e32332e35362e302f32312d3332203d3e20313938393439.roa
Signing time:             Fri 15 Aug 2025 20:28:20 +0000
ROA not before:           Fri 15 Aug 2025 20:23:20 +0000
ROA not after:            Fri 14 Aug 2026 20:28:20 +0000
asID:                     198949
IP address blocks:        177.23.56.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl
                          rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a1:5b:6f:1e:4e:3c:84:f8:e2:dc:04:88:5d:a3:c4:dd:73:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1
        Validity
            Not Before: Aug 15 20:23:20 2025 GMT
            Not After : Aug 14 20:28:20 2026 GMT
        Subject: CN=38292D0AE964EEDA7051713F4479E5C0B29CA804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:fa:b1:74:ef:0b:f2:a7:36:c8:6b:fd:c8:
                    09:55:41:df:bc:6f:e3:37:b5:b8:55:c4:bb:e6:0d:
                    38:6e:27:79:bc:35:62:5c:40:10:d5:6e:f8:83:2b:
                    9b:f2:5c:c8:28:d8:2d:b5:bb:e8:f0:76:80:86:6d:
                    0d:e4:44:d2:05:8a:f4:47:4b:4d:78:0b:4c:97:94:
                    3a:76:72:7f:d2:1e:6b:54:ad:01:f8:c1:76:59:8d:
                    9a:c8:fe:b9:39:14:7a:b5:0e:38:1c:f3:16:17:38:
                    bf:82:5f:57:45:2a:55:13:43:5e:d0:df:b8:8c:aa:
                    0a:7d:33:39:7f:2d:35:22:76:33:f5:79:ef:91:b1:
                    42:9d:41:a9:3d:16:65:34:64:66:55:d8:8b:54:ac:
                    90:4d:7a:bd:6a:c3:86:d8:01:77:66:17:4e:b7:27:
                    8d:f3:37:39:ff:ae:7b:5e:45:b8:8c:e5:73:75:08:
                    73:a7:1b:d4:44:a3:03:48:db:6b:44:cd:3d:8d:d0:
                    1b:4f:52:d3:a6:d6:89:5e:c6:d2:ff:1e:3b:44:33:
                    bd:26:13:15:a1:24:5a:f3:8b:9d:0c:2e:2e:bb:10:
                    d6:76:69:26:cf:44:17:52:10:04:67:c2:15:f7:c1:
                    4f:f2:23:30:cf:aa:33:90:01:83:98:d3:9b:13:04:
                    fc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:29:2D:0A:E9:64:EE:DA:70:51:71:3F:44:79:E5:C0:B2:9C:A8:04
            X509v3 Authority Key Identifier:
                keyid:C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/3137372e32332e35362e302f32312d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:1e:d7:07:cc:0d:d0:c9:34:1b:91:36:68:74:63:3f:d1:6e:
         b4:9d:56:74:c0:7c:24:ce:48:d1:06:b4:26:eb:c6:9f:b0:00:
         d4:2d:34:05:a3:0c:ab:b0:33:4e:6e:0c:38:b5:8b:90:df:1a:
         f2:e0:10:97:91:73:ab:56:72:dd:c4:0a:40:4a:d5:ca:fd:c6:
         e8:31:fb:9d:5a:12:26:99:ed:68:44:cd:c9:6e:9f:bc:4e:7f:
         3b:65:70:c6:4e:1b:db:9d:c4:0a:fc:63:60:86:37:10:2d:93:
         e8:c8:10:9a:13:02:dc:95:8c:ff:d0:a0:24:8f:30:00:96:a1:
         ac:db:b3:bf:01:47:b5:8c:4d:31:ae:b8:c0:42:3c:d2:67:3f:
         6c:a3:c0:15:ad:d8:fb:0e:24:a5:13:46:8e:d9:9b:12:55:10:
         ff:0e:40:58:26:60:74:a1:13:99:f6:23:85:f5:0b:d6:ae:c4:
         59:29:68:e6:53:73:39:1f:56:56:ea:4c:c6:c3:e1:ce:f9:c5:
         92:6f:18:82:39:4b:7a:0e:ed:58:20:07:3a:a8:2e:ad:2f:76:
         3b:f5:78:6c:16:9e:e8:03:f7:f8:a6:47:3a:48:dd:e2:0e:29:
         e0:9c:ff:63:4f:87:55:01:73:fa:48:80:99:71:7c:0c:d3:cf:
         69:c9:95:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:43:56 2025 by rpki-client