Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33372e302f32342d3234203d3e20323632383432.roa
File:                     3137372e31302e33372e302f32342d3234203d3e20323632383432.roa (raw, json)
Hash identifier:          7eBC0vRNshtyrnwYyYPnnxIlKGZOV2Lpbb/dLOe4wNM=
Subject key identifier:   15:FC:FE:AA:3B:25:4B:A0:13:DD:05:0C:67:B1:31:30:19:8D:52:39
Certificate issuer:       /CN=8625EDFECC2AA2B8D072C068E04439ABC40AC5E8
Certificate serial:       1691D8A2FCE9A85656367530A0670905F3E6A24A
Authority key identifier: 86:25:ED:FE:CC:2A:A2:B8:D0:72:C0:68:E0:44:39:AB:C4:0A:C5:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33372e302f32342d3234203d3e20323632383432.roa
Signing time:             Fri 10 Jul 2026 14:23:22 +0000
ROA not before:           Fri 10 Jul 2026 14:18:22 +0000
ROA not after:            Fri 09 Jul 2027 14:23:22 +0000
asID:                     262842
IP address blocks:        177.10.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.crl
                          rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:91:d8:a2:fc:e9:a8:56:56:36:75:30:a0:67:09:05:f3:e6:a2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8625EDFECC2AA2B8D072C068E04439ABC40AC5E8
        Validity
            Not Before: Jul 10 14:18:22 2026 GMT
            Not After : Jul  9 14:23:22 2027 GMT
        Subject: CN=15FCFEAA3B254BA013DD050C67B13130198D5239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c7:8b:cc:2b:0e:aa:e8:18:44:2b:6c:65:22:
                    87:e6:8b:92:62:9c:2b:2d:e5:4f:4a:ef:47:8d:91:
                    0d:31:17:f9:e3:80:5a:83:e2:42:cd:df:e4:0a:cc:
                    e5:f0:09:a6:8f:04:de:38:13:e7:d0:4e:ad:05:71:
                    30:f8:ed:5e:1e:61:59:e1:8b:c2:bf:ca:3e:ab:05:
                    18:a4:7c:d0:f3:b0:c9:7b:72:46:4c:e1:80:2d:b2:
                    24:91:75:b3:86:6f:04:cf:48:bb:df:16:e6:23:67:
                    55:1d:2c:f6:5a:04:09:2e:a3:c0:9a:57:0c:1e:f3:
                    17:c9:06:00:a2:fb:6a:35:d2:78:fa:59:5f:42:07:
                    c4:eb:aa:27:af:1d:f5:cc:90:f4:9d:ae:21:4e:11:
                    85:d8:ad:10:8d:c7:97:30:db:e7:67:9d:d0:2a:3a:
                    a1:53:59:d7:2d:1b:10:bd:47:46:13:cb:58:51:31:
                    12:ab:7e:f1:27:6e:e3:e1:27:82:ef:da:73:06:a1:
                    59:4d:fe:0f:9f:74:a6:b5:2f:ac:25:a5:b7:b9:ad:
                    cb:e7:4a:53:89:81:e9:d2:58:d2:8f:62:cc:51:2b:
                    c4:93:41:e4:4f:62:03:10:d7:d9:8f:40:5c:bc:29:
                    e5:19:44:ef:c6:6c:92:a6:82:2a:f8:05:b8:0e:58:
                    7f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FC:FE:AA:3B:25:4B:A0:13:DD:05:0C:67:B1:31:30:19:8D:52:39
            X509v3 Authority Key Identifier:
                keyid:86:25:ED:FE:CC:2A:A2:B8:D0:72:C0:68:E0:44:39:AB:C4:0A:C5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33372e302f32342d3234203d3e20323632383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:c8:40:37:24:b3:18:ba:15:9c:bf:7d:a3:3a:7c:38:15:72:
         b8:cf:37:b6:ec:aa:70:c8:8c:3e:a8:29:f5:07:f6:2d:08:e4:
         29:06:95:0a:54:ff:7e:4a:ae:b5:23:77:cc:e8:0a:f2:25:76:
         0f:2f:0d:da:c1:99:90:b0:0d:be:4c:66:a9:3a:5e:68:1e:b2:
         70:65:e6:6d:26:c1:c1:cd:22:3e:e8:55:75:db:0b:93:52:b2:
         06:04:5b:57:79:ee:4e:04:e9:8d:0d:bd:da:63:1b:97:dd:f2:
         e2:a9:c1:80:6b:5c:60:03:42:a0:fe:d3:cc:0a:db:8e:49:dd:
         ee:4e:6d:36:0f:99:16:2f:e2:2a:98:bb:55:fd:52:06:ab:e3:
         47:10:4c:fa:73:9a:85:b0:af:21:a9:54:5f:3f:c8:47:37:38:
         03:50:24:8e:98:8a:38:7c:9a:b0:c0:c7:52:73:78:24:58:79:
         a4:a1:39:c8:11:a0:ee:24:ec:5c:53:97:80:8e:2f:dc:3d:bc:
         88:ad:7c:ff:a1:ba:cf:06:cc:d7:75:be:9d:d4:bf:fc:e6:cd:
         01:a6:29:0e:b8:08:1e:bb:56:0e:e3:bd:07:db:84:83:1b:66:
         99:1c:68:b1:e3:be:95:15:d1:4e:9c:93:4f:0a:23:3c:e2:4d:
         95:64:f7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:49:56 2026 by rpki-client