Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234302e302f32332d3233203d3e20323730363032.roa
File:                     3137372e38352e3234302e302f32332d3233203d3e20323730363032.roa (raw, json)
Hash identifier:          MkII3t/GK+DzMY8AT6i8ewWpzDyR+WBbPvFaCbF4heo=
Subject key identifier:   34:CF:7A:6A:69:F6:32:B5:73:30:9E:17:3E:4E:15:BE:72:FB:D5:F1
Certificate issuer:       /CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
Certificate serial:       162EB49565567C23BAED5D45077EB504BE5F9C6D
Authority key identifier: EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234302e302f32332d3233203d3e20323730363032.roa
Signing time:             Wed 25 Jun 2025 12:43:03 +0000
ROA not before:           Wed 25 Jun 2025 12:38:03 +0000
ROA not after:            Wed 24 Jun 2026 12:43:03 +0000
asID:                     270602
IP address blocks:        177.85.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl
                          rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 02:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2e:b4:95:65:56:7c:23:ba:ed:5d:45:07:7e:b5:04:be:5f:9c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
        Validity
            Not Before: Jun 25 12:38:03 2025 GMT
            Not After : Jun 24 12:43:03 2026 GMT
        Subject: CN=34CF7A6A69F632B573309E173E4E15BE72FBD5F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:0b:06:6d:76:4a:84:63:8a:95:cc:e8:8b:
                    4e:56:4c:73:5b:1a:36:82:7e:9b:bd:9f:c9:59:50:
                    2b:9e:d7:e2:01:8f:78:8d:9f:9d:e0:bf:f2:f3:f0:
                    3f:32:27:03:2d:29:32:67:b3:09:b1:56:72:c5:39:
                    fa:90:1c:98:2d:1a:db:b3:34:21:4d:82:c0:75:6a:
                    28:bb:4f:5b:37:c2:2c:96:d8:1a:3e:b8:b2:e6:23:
                    25:de:1a:83:95:73:47:d8:5e:d7:77:2e:96:73:43:
                    c3:4c:9c:28:62:76:cf:1f:9a:d9:2e:33:18:52:a7:
                    9c:07:35:e3:59:62:ef:5d:35:03:de:f1:53:b1:cc:
                    f1:66:f9:78:79:9c:1f:fd:c5:90:6c:10:e6:fe:8b:
                    3d:30:01:f0:e4:91:a3:1e:29:d5:31:75:be:ba:33:
                    2a:a4:7f:67:5a:90:91:14:85:5f:7a:2c:22:79:01:
                    64:1b:42:f1:f0:a8:2d:6d:80:92:c2:37:22:fc:bf:
                    76:15:4e:54:d4:12:52:a5:45:38:c2:29:29:2f:cd:
                    4a:2a:50:3c:f8:45:18:ae:06:44:a3:af:2d:bb:93:
                    dd:e5:63:5e:fe:28:6a:cc:8f:6d:ba:d3:64:4e:94:
                    b3:32:06:9a:db:23:ea:3f:83:ce:bf:86:b9:26:8a:
                    b2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CF:7A:6A:69:F6:32:B5:73:30:9E:17:3E:4E:15:BE:72:FB:D5:F1
            X509v3 Authority Key Identifier:
                keyid:EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234302e302f32332d3233203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:71:ec:9c:7e:97:c9:76:de:1a:74:78:20:79:69:51:27:17:
         5f:c3:20:d9:b8:2c:76:62:f8:00:d7:09:8d:43:95:a9:37:52:
         e4:58:24:89:b3:1b:10:ed:ec:93:fd:d5:d6:e9:2f:f0:05:5e:
         f7:53:62:3a:cb:2f:46:51:aa:c6:12:e1:42:de:10:ff:cc:0a:
         11:51:3c:fe:c7:67:eb:1c:41:1b:5c:f8:55:c1:a2:a9:07:7b:
         dd:1d:8f:7e:7d:e7:9f:bc:8b:15:98:db:ed:d5:83:d4:d0:a4:
         07:4d:f9:6b:20:0d:d7:bc:25:84:96:42:79:fb:74:23:17:8d:
         31:e8:46:e9:1d:8f:bf:51:8a:83:e0:52:c8:ad:4d:4d:27:0b:
         02:15:9e:77:8b:ba:b4:7c:1d:72:d0:7b:57:25:53:9b:54:ca:
         4f:2e:ba:29:f0:5c:3c:86:62:cf:47:e9:c9:20:eb:5c:08:4d:
         76:d4:ed:73:41:73:fc:db:37:84:60:21:c8:59:bf:97:fb:55:
         55:95:cd:94:52:42:f7:3b:4b:0a:c4:bc:d7:d3:7c:27:5f:28:
         d5:fe:3c:12:16:ac:72:b8:8a:43:7c:b6:45:18:0f:87:25:31:
         22:88:89:4b:7b:4b:40:30:11:8d:d2:c5:b5:30:ef:e3:c3:d0:
         c0:20:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:43:09 2025 by rpki-client