Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39332e302f32342d3234203d3e20323633363237.roa
File:                     3137372e31322e39332e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          B6PtFLF1EJov48dbc2E2bf2hukMKHtPSlQn0Fk0K9EY=
Subject key identifier:   E6:0A:74:E1:9E:C8:C9:07:B1:DF:DB:B3:51:90:5E:D5:A6:51:51:2B
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       19282D526A53C0389724A863D9C0825D8AEB5B86
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39332e302f32342d3234203d3e20323633363237.roa
Signing time:             Thu 18 Sep 2025 20:20:25 +0000
ROA not before:           Thu 18 Sep 2025 20:15:25 +0000
ROA not after:            Thu 17 Sep 2026 20:20:25 +0000
asID:                     263627
IP address blocks:        177.12.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:28:2d:52:6a:53:c0:38:97:24:a8:63:d9:c0:82:5d:8a:eb:5b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Sep 18 20:15:25 2025 GMT
            Not After : Sep 17 20:20:25 2026 GMT
        Subject: CN=E60A74E19EC8C907B1DFDBB351905ED5A651512B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a6:29:f9:5e:59:05:2b:b2:0c:f4:82:f3:3c:
                    ec:c8:29:4a:89:c3:2d:40:6c:60:80:5c:79:8e:b4:
                    51:cc:73:63:32:ab:55:34:69:1c:d9:48:4e:48:04:
                    d8:5c:a8:9e:06:d3:5a:37:96:f8:94:7d:af:d1:e9:
                    d4:e5:b8:af:80:12:bc:5a:70:68:c2:ea:34:3b:3f:
                    d4:bd:30:9c:95:d8:e0:13:6c:99:79:02:b3:a7:05:
                    3d:3a:41:df:70:59:0c:1b:d0:73:28:d6:35:32:38:
                    c4:d0:72:77:74:63:3d:56:41:f4:7c:0a:cb:c3:a1:
                    7f:ab:58:0e:2a:0e:28:7e:6a:f8:d7:ed:9e:80:6b:
                    bf:76:b2:60:a8:e6:99:25:ff:9b:47:8f:13:80:76:
                    d1:67:86:ef:69:73:a6:f9:f2:1f:90:b1:e3:cf:ce:
                    ea:bd:3a:48:f1:bd:94:42:2f:ad:95:5d:26:03:65:
                    96:bb:d0:12:52:4b:7c:31:67:a1:c7:2b:17:d0:a0:
                    f4:c0:26:76:cd:db:2e:ee:b4:ce:bd:02:dd:2d:47:
                    6b:48:5a:fb:8f:68:bf:28:00:32:61:03:62:ec:73:
                    35:db:55:4e:aa:8f:7b:6a:b2:63:9f:4e:3e:67:72:
                    79:07:24:ad:bd:93:c9:b5:18:07:bc:e5:52:8f:2e:
                    1d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0A:74:E1:9E:C8:C9:07:B1:DF:DB:B3:51:90:5E:D5:A6:51:51:2B
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39332e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:b2:ba:1d:c4:24:ac:00:a7:2d:50:e4:6d:f9:37:dd:7e:d9:
         d4:57:e6:54:e6:25:b4:80:1c:b9:ed:6b:f8:34:86:b6:66:fc:
         8f:2d:da:1e:b7:19:01:52:4a:29:32:e0:56:b7:96:ea:a1:9b:
         8e:c9:21:78:28:e0:c6:87:5f:bc:e7:ef:59:06:f5:fc:c4:26:
         6d:bb:fa:d0:1b:7b:fe:71:2a:f0:3d:a1:0d:2d:e4:44:7e:19:
         3c:7f:4b:e2:d7:c2:21:f1:dc:3a:c7:b6:cb:d3:ee:aa:13:1a:
         43:71:64:23:77:04:f5:d0:5b:bc:db:d9:b2:f5:a3:13:92:c2:
         eb:49:14:8a:21:a8:c6:44:f8:18:60:24:8b:a3:87:68:16:ea:
         78:ed:2a:6d:28:66:8d:6f:6f:b7:68:93:26:ff:6b:f0:cc:51:
         ec:44:59:56:2a:ce:eb:54:1a:fe:02:77:0d:22:bf:d7:9b:6a:
         9d:4c:68:7e:1f:79:39:a5:58:ee:cf:fc:ad:cc:72:2d:d9:1d:
         13:7c:58:15:38:7a:fd:9d:4c:27:74:2f:0e:cc:cf:e0:09:fe:
         ff:65:cb:b1:81:24:0c:2e:f0:f4:e2:9c:4a:4b:93:4f:0e:00:
         35:79:9b:8f:e1:29:b3:b7:08:27:9d:be:94:0d:e3:63:c4:f4:
         4f:1f:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:25:30 2025 by rpki-client