Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3137372e39322e3136322e302f32342d3234203d3e20323638323537.roa
File:                     3137372e39322e3136322e302f32342d3234203d3e20323638323537.roa (raw, json)
Hash identifier:          8CF4ZaeaQN9cxiSnWDX7AQOOXpnECQ/l1x5HIuxexU0=
Subject key identifier:   25:E0:14:FB:CE:D8:1F:BE:1C:E6:AA:BC:B0:E7:19:38:13:10:F3:ED
Certificate issuer:       /CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0
Certificate serial:       5D2B10C03F7FEF304A7B479FBFD27037C36C9091
Authority key identifier: 95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3137372e39322e3136322e302f32342d3234203d3e20323638323537.roa
Signing time:             Wed 15 Oct 2025 22:44:21 +0000
ROA not before:           Wed 15 Oct 2025 22:39:21 +0000
ROA not after:            Wed 14 Oct 2026 22:44:21 +0000
asID:                     268257
IP address blocks:        177.92.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl
                          rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2b:10:c0:3f:7f:ef:30:4a:7b:47:9f:bf:d2:70:37:c3:6c:90:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0
        Validity
            Not Before: Oct 15 22:39:21 2025 GMT
            Not After : Oct 14 22:44:21 2026 GMT
        Subject: CN=25E014FBCED81FBE1CE6AABCB0E719381310F3ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:a7:9c:40:56:49:d4:0a:84:1d:5d:02:10:
                    b8:83:08:c3:3c:e0:87:90:72:79:c4:e1:93:e3:8b:
                    20:c8:19:64:92:8b:fa:a5:84:62:ba:80:c6:54:d2:
                    bf:db:e2:82:7f:e2:01:5e:db:4d:14:19:bb:15:1a:
                    88:2a:db:9a:84:dd:2d:13:4a:af:ea:b5:06:b8:4d:
                    ac:08:2d:83:43:3c:39:7c:b3:e4:c1:88:6a:2c:37:
                    fc:85:82:2a:0b:95:57:aa:36:f7:18:49:4a:c5:65:
                    1a:67:df:45:56:4d:e8:ba:e1:8a:6e:a4:bb:10:f1:
                    bf:a9:13:7a:18:4b:c0:28:b9:c6:04:57:e8:33:78:
                    ad:c6:a1:07:13:9f:51:20:06:66:86:20:f0:a1:41:
                    93:ff:d8:5a:99:b2:af:15:58:04:40:47:20:ec:e0:
                    45:19:ac:7b:83:1f:d1:e6:27:74:ef:03:d4:55:54:
                    70:8e:f1:9b:73:78:3b:b7:af:9f:88:e7:44:8c:97:
                    46:50:17:77:38:db:79:7d:e6:2b:dd:30:6e:6d:08:
                    9e:8d:41:8d:af:19:2c:a3:11:a8:1a:b0:94:6a:e2:
                    d7:3d:61:ef:32:80:f7:dd:51:f1:5c:25:72:f9:92:
                    17:a4:3b:7b:c0:7f:e3:90:ab:8b:75:1f:2a:ec:d6:
                    9a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E0:14:FB:CE:D8:1F:BE:1C:E6:AA:BC:B0:E7:19:38:13:10:F3:ED
            X509v3 Authority Key Identifier:
                keyid:95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/3137372e39322e3136322e302f32342d3234203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:d3:4a:18:71:e1:c0:2a:9f:28:26:51:8d:bd:d3:21:f4:c1:
         92:6c:65:a7:c8:c7:1e:aa:95:de:a7:cc:2f:7a:cb:ab:81:34:
         db:80:77:31:03:40:59:21:80:ec:63:51:53:72:10:d8:7e:25:
         77:ed:57:e9:4f:3f:a7:9e:f1:f3:e1:bb:3b:a5:ad:87:f4:12:
         63:97:2c:e5:07:c8:06:7a:6c:b9:7c:78:fb:de:a8:a5:4f:d1:
         6b:98:4b:2f:13:a5:70:8d:5f:c6:c6:33:e1:4b:a1:0c:07:26:
         48:e6:ff:b7:39:d7:95:2e:94:c5:b7:eb:91:09:b9:9f:a4:c7:
         9e:94:3c:05:7e:e2:37:fc:d0:68:0e:ff:03:dd:2f:eb:05:72:
         4e:0e:17:da:04:7b:c5:c8:47:b9:7c:5d:06:1b:a3:7c:36:7e:
         73:3c:43:d3:0a:39:89:e7:a0:b2:5d:ed:7b:e6:30:8e:68:e9:
         d2:c3:7a:db:e9:2b:6d:92:3e:a6:41:7e:ec:ae:bd:72:33:bc:
         67:fb:0d:3e:5c:f2:e6:4d:bc:f1:7d:30:0b:b8:8b:a2:de:eb:
         4d:f6:66:28:9e:77:62:a3:56:80:fd:f6:38:8d:ea:e7:34:ee:
         0c:6f:0d:99:d0:49:2e:cc:ad:81:5f:34:f5:d5:78:e0:66:60:
         be:9e:60:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:32:43 2025 by rpki-client