Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32332d3233203d3e20323633363034.roa
File:                     3137372e37312e38382e302f32332d3233203d3e20323633363034.roa (raw, json)
Hash identifier:          y3i+tL32Gt1MzIbujXnfGHhx+RPfsm1jXKbGTm4P450=
Subject key identifier:   D6:00:F3:AB:F4:34:A2:5A:53:6A:68:C8:50:91:0F:AE:28:C2:B3:5E
Certificate issuer:       /CN=18D2B9D6E54ED795E9B7828E042E38E75E901E9F
Certificate serial:       7C0B0A41CEF72FEF0FA21105B0295BF2327439F3
Authority key identifier: 18:D2:B9:D6:E5:4E:D7:95:E9:B7:82:8E:04:2E:38:E7:5E:90:1E:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32332d3233203d3e20323633363034.roa
Signing time:             Wed 24 Sep 2025 18:14:26 +0000
ROA not before:           Wed 24 Sep 2025 18:09:26 +0000
ROA not after:            Wed 23 Sep 2026 18:14:26 +0000
asID:                     263604
IP address blocks:        177.71.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.crl
                          rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0b:0a:41:ce:f7:2f:ef:0f:a2:11:05:b0:29:5b:f2:32:74:39:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18D2B9D6E54ED795E9B7828E042E38E75E901E9F
        Validity
            Not Before: Sep 24 18:09:26 2025 GMT
            Not After : Sep 23 18:14:26 2026 GMT
        Subject: CN=D600F3ABF434A25A536A68C850910FAE28C2B35E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d1:85:a7:5c:fe:18:e4:c1:d5:ef:7f:45:af:
                    b0:67:7a:0c:45:68:8a:98:dd:87:a1:eb:fd:11:5b:
                    ff:77:d4:7c:91:eb:df:99:89:dc:8f:fe:cc:7d:1d:
                    11:c0:35:28:6c:26:b4:06:d0:22:42:ab:26:b5:bf:
                    83:09:a6:5b:8c:1f:7b:35:58:77:d7:0a:8d:1d:5f:
                    dc:bd:68:a2:1f:9c:c6:f5:8d:30:04:88:81:d4:e8:
                    48:25:bb:87:38:67:bd:b0:9f:6c:ee:ed:9e:89:3f:
                    c1:45:3a:2b:4b:2b:d7:13:e4:b8:dd:93:8e:79:82:
                    93:b3:0a:27:d8:53:00:e1:17:6f:b6:36:02:c0:fa:
                    25:c4:46:1f:41:d3:ee:2e:fa:af:d0:7d:e9:d8:bc:
                    af:82:ba:62:7a:87:e3:0b:38:4d:ec:00:c5:39:44:
                    d7:a3:c8:e9:3a:ec:21:60:9e:40:d4:79:73:b3:b1:
                    a1:ed:a1:77:75:91:9e:28:de:6e:88:be:19:b0:25:
                    85:79:09:aa:a8:6d:1c:f0:8b:eb:82:d5:fa:3c:97:
                    b0:56:f5:6e:68:b8:d2:79:df:c1:8f:bf:2f:ac:3e:
                    fb:8d:08:72:54:c6:0b:b7:c2:dc:86:2b:b6:4a:d4:
                    14:fe:0c:0f:a7:c1:3c:60:3e:ca:98:fb:0e:0b:79:
                    2c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:00:F3:AB:F4:34:A2:5A:53:6A:68:C8:50:91:0F:AE:28:C2:B3:5E
            X509v3 Authority Key Identifier:
                keyid:18:D2:B9:D6:E5:4E:D7:95:E9:B7:82:8E:04:2E:38:E7:5E:90:1E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3137372e37312e38382e302f32332d3233203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:cd:10:d9:7b:83:5c:ff:f7:01:4d:e3:88:42:cb:71:53:75:
         2b:3e:30:5e:25:02:92:32:ce:76:37:bc:c0:34:b4:45:13:34:
         63:87:01:50:63:21:7b:58:e9:03:db:89:7a:8b:cc:e0:83:0d:
         67:3d:4e:13:4f:e8:b4:ff:3d:f9:8a:96:fd:4b:de:82:3f:1b:
         91:c6:c8:05:76:ad:b6:b4:25:ac:33:81:dd:d5:d3:1a:9f:de:
         75:3f:c9:f7:b4:3a:2f:86:4c:7e:6a:13:b6:0a:ef:d9:dd:85:
         97:8a:7b:39:00:6f:e4:7f:11:bd:c2:4f:b4:a4:98:cc:c8:fb:
         87:43:e8:7a:03:da:3f:43:f9:28:2f:6d:d2:76:43:47:d1:92:
         87:3a:56:06:8e:e9:6b:e7:34:09:28:40:24:86:74:5e:76:0d:
         35:ef:c0:1d:27:bf:1d:64:d1:d9:34:38:6a:b5:5e:a0:36:eb:
         5f:ee:dd:95:ce:e7:f5:15:cc:66:d9:42:48:c3:03:1a:c2:ca:
         a9:83:3f:06:2c:d9:71:33:e4:fa:fd:4f:a0:0c:e6:50:cf:d3:
         c5:84:fa:0f:ca:eb:1b:c2:df:89:5e:8b:94:35:fe:0f:6f:d1:
         26:f6:2e:86:e0:0e:b7:ba:15:04:68:84:f0:01:f1:93:c6:8b:
         cf:ba:86:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:42:58 2025 by rpki-client