Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/3137372e37332e3230382e302f32312d3332203d3e20323632353733.roa
File:                     3137372e37332e3230382e302f32312d3332203d3e20323632353733.roa (raw, json)
Hash identifier:          ketQ3YZ1Z+kK4G/hMSDhsGwN5Re/zOpNmMjJ1CgK93E=
Subject key identifier:   E1:F7:7B:65:CF:90:49:F9:9B:7F:5F:29:04:11:27:4A:C8:19:0E:DE
Certificate issuer:       /CN=EF8E653F55597910A76FC271E222514D7CDB9D90
Certificate serial:       5806C691EA44DE34D5D11B90A1DA7459899E8B67
Authority key identifier: EF:8E:65:3F:55:59:79:10:A7:6F:C2:71:E2:22:51:4D:7C:DB:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF8E653F55597910A76FC271E222514D7CDB9D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/3137372e37332e3230382e302f32312d3332203d3e20323632353733.roa
Signing time:             Mon 18 Aug 2025 12:52:43 +0000
ROA not before:           Mon 18 Aug 2025 12:47:43 +0000
ROA not after:            Mon 17 Aug 2026 12:52:43 +0000
asID:                     262573
IP address blocks:        177.73.208.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/EF8E653F55597910A76FC271E222514D7CDB9D90.crl
                          rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/EF8E653F55597910A76FC271E222514D7CDB9D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF8E653F55597910A76FC271E222514D7CDB9D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 18:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:06:c6:91:ea:44:de:34:d5:d1:1b:90:a1:da:74:59:89:9e:8b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF8E653F55597910A76FC271E222514D7CDB9D90
        Validity
            Not Before: Aug 18 12:47:43 2025 GMT
            Not After : Aug 17 12:52:43 2026 GMT
        Subject: CN=E1F77B65CF9049F99B7F5F290411274AC8190EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:91:e6:1e:9a:d0:2f:e2:ad:24:55:ec:5b:
                    1a:d8:52:b1:69:c1:c4:5b:a2:01:73:65:28:c1:66:
                    fa:c3:8e:da:c0:38:8b:3b:97:d4:47:d0:17:22:f7:
                    60:43:9a:94:16:a5:fe:a5:9e:73:b1:15:85:74:0e:
                    e0:5b:e1:cb:8e:6a:7a:fb:2c:9c:d5:5e:21:62:0d:
                    f0:d6:3a:a6:2e:b6:8d:d2:a3:92:46:53:95:55:85:
                    1c:2b:c1:b9:a5:f2:ad:1c:66:8b:07:92:03:3c:a1:
                    e4:7b:4c:6f:32:a3:75:82:86:31:9a:4b:12:be:d5:
                    e7:f3:cc:e0:dd:10:48:66:1a:f8:0b:ef:4a:4e:f1:
                    70:f7:e5:84:52:61:36:9b:f7:e2:9b:12:9e:67:99:
                    e9:0e:3a:9c:1e:6b:2c:60:47:1e:ec:cc:49:a4:f9:
                    4e:e9:85:00:83:49:c4:6c:b4:ae:7e:20:14:bc:7a:
                    84:bd:eb:41:c2:f3:aa:77:5f:59:1a:92:db:e0:8b:
                    af:cd:62:cf:0f:aa:5e:8c:95:b9:f7:be:6e:fb:85:
                    df:78:34:9c:c7:3a:43:eb:f0:92:de:45:ba:9a:44:
                    f1:26:5b:fa:f8:9c:ee:28:fb:a3:b5:95:fd:81:73:
                    fb:cb:1e:31:82:bb:4f:ba:87:57:fb:cf:91:69:00:
                    b8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F7:7B:65:CF:90:49:F9:9B:7F:5F:29:04:11:27:4A:C8:19:0E:DE
            X509v3 Authority Key Identifier:
                keyid:EF:8E:65:3F:55:59:79:10:A7:6F:C2:71:E2:22:51:4D:7C:DB:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/EF8E653F55597910A76FC271E222514D7CDB9D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF8E653F55597910A76FC271E222514D7CDB9D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/3137372e37332e3230382e302f32312d3332203d3e20323632353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:08:53:3b:eb:c6:82:cc:f4:ce:26:90:f4:a2:e9:98:62:e8:
         95:b2:8a:53:c5:c6:60:d1:41:64:92:63:26:f8:68:85:ce:1e:
         d2:e8:c7:cb:42:66:de:32:79:ac:8f:bf:9f:c2:ae:20:97:86:
         3f:ac:fa:40:0d:b8:64:1c:dd:74:3b:cf:cc:85:18:70:c7:e9:
         b1:72:50:1c:16:7c:d8:03:5a:3d:92:65:77:d6:37:12:84:12:
         7e:d9:71:11:b0:f3:c5:6e:6a:f4:76:1a:25:4e:1e:68:3a:ec:
         54:ca:c0:bc:00:b3:16:05:35:21:23:35:48:42:51:ce:a2:0c:
         4c:18:10:ed:9d:7d:1b:db:10:a2:cf:6e:92:e9:4b:f2:09:59:
         9c:4a:7e:1b:fc:8e:9d:ac:13:cf:64:1f:a8:78:f5:54:38:cb:
         f2:29:16:f7:3f:f9:a8:fd:a0:61:0e:9c:db:1f:1b:00:5c:21:
         5d:9d:0f:92:42:85:d2:7c:0a:42:b1:98:a9:9f:36:62:99:1e:
         a8:0a:bd:87:92:e9:17:ac:a8:fa:b3:12:ed:cb:b6:62:02:04:
         b0:ac:82:34:a6:f1:58:0c:a3:b6:7b:d2:a0:7b:66:30:48:b9:
         2b:97:41:f7:dd:d2:76:74:c8:17:f2:ca:e1:01:e6:95:bf:16:
         7a:15:93:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:46:56 2025 by rpki-client