Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5QPCjcTeqDPbVfemuSyKb268eoWUWPyA2Mk9KSoWsr55/0/3137372e38352e36342e302f32312d3332203d3e20323632363030.roa
File:                     3137372e38352e36342e302f32312d3332203d3e20323632363030.roa (raw, json)
Hash identifier:          88QUaRwt47rBHzVFS8BArg5cV9eEUXxrxWM3Ug9O6ls=
Subject key identifier:   3D:A4:27:49:96:32:7F:E7:4F:EB:93:9A:95:79:2F:D2:A6:87:62:DA
Certificate issuer:       /CN=2C026C533949466083DC24DD87078E6D8F21B1EA
Certificate serial:       686C8DB74702C239250188EDA598BCD66B80955E
Authority key identifier: 2C:02:6C:53:39:49:46:60:83:DC:24:DD:87:07:8E:6D:8F:21:B1:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C026C533949466083DC24DD87078E6D8F21B1EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5QPCjcTeqDPbVfemuSyKb268eoWUWPyA2Mk9KSoWsr55/0/3137372e38352e36342e302f32312d3332203d3e20323632363030.roa
Signing time:             Thu 02 Oct 2025 11:46:20 +0000
ROA not before:           Thu 02 Oct 2025 11:41:20 +0000
ROA not after:            Thu 01 Oct 2026 11:46:20 +0000
asID:                     262600
IP address blocks:        177.85.64.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5QPCjcTeqDPbVfemuSyKb268eoWUWPyA2Mk9KSoWsr55/0/2C026C533949466083DC24DD87078E6D8F21B1EA.crl
                          rsync://rpki-repo.registro.br/repo/5QPCjcTeqDPbVfemuSyKb268eoWUWPyA2Mk9KSoWsr55/0/2C026C533949466083DC24DD87078E6D8F21B1EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C026C533949466083DC24DD87078E6D8F21B1EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6c:8d:b7:47:02:c2:39:25:01:88:ed:a5:98:bc:d6:6b:80:95:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C026C533949466083DC24DD87078E6D8F21B1EA
        Validity
            Not Before: Oct  2 11:41:20 2025 GMT
            Not After : Oct  1 11:46:20 2026 GMT
        Subject: CN=3DA4274996327FE74FEB939A95792FD2A68762DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:86:d8:21:d4:53:34:90:26:e4:9d:de:e1:01:
                    dd:52:60:0f:b5:aa:03:85:81:7e:a6:c4:2a:d3:01:
                    c9:67:f0:ee:b8:f0:ec:4f:f4:0e:f5:74:85:5c:54:
                    8d:63:7c:49:91:63:dd:64:b3:c3:b4:e4:b7:f7:03:
                    70:a8:f1:d5:a7:a4:f6:c8:5a:9b:a1:82:d2:07:ac:
                    b1:4d:cb:e7:ef:4a:39:4c:d1:eb:72:09:c9:71:45:
                    86:3d:29:82:14:b3:91:92:1e:a9:c8:c2:60:9b:c9:
                    f6:b1:2e:26:3c:fd:e4:d3:3d:09:b2:1f:36:ff:11:
                    ca:db:36:68:d0:39:e9:44:0e:cf:21:7a:dc:b6:d0:
                    87:6c:9e:87:49:91:d8:03:8d:27:e1:0a:c7:55:fb:
                    2e:3d:ef:ce:51:50:c6:66:39:4d:3c:cf:24:69:98:
                    03:5b:b3:80:af:78:4c:53:16:fa:2a:bb:34:58:8e:
                    14:2e:f9:d7:59:f3:b5:b5:89:46:34:01:83:04:30:
                    b8:cc:91:c8:83:88:92:f3:38:60:9b:89:fd:21:de:
                    19:e1:3d:63:0f:a4:78:42:51:5f:a8:e9:fa:48:8d:
                    89:b3:e2:40:a5:a6:c1:1e:11:50:3f:16:bb:44:66:
                    c3:24:b1:aa:0f:2d:24:57:3f:0d:81:69:39:bf:aa:
                    e4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A4:27:49:96:32:7F:E7:4F:EB:93:9A:95:79:2F:D2:A6:87:62:DA
            X509v3 Authority Key Identifier:
                keyid:2C:02:6C:53:39:49:46:60:83:DC:24:DD:87:07:8E:6D:8F:21:B1:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5QPCjcTeqDPbVfemuSyKb268eoWUWPyA2Mk9KSoWsr55/0/2C026C533949466083DC24DD87078E6D8F21B1EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C026C533949466083DC24DD87078E6D8F21B1EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5QPCjcTeqDPbVfemuSyKb268eoWUWPyA2Mk9KSoWsr55/0/3137372e38352e36342e302f32312d3332203d3e20323632363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:c3:d3:28:4a:24:3a:14:37:a2:53:67:86:6b:90:c1:89:df:
         e7:30:95:10:cb:4a:cf:78:92:d5:85:78:de:27:7d:87:92:42:
         03:6b:6c:7a:f4:26:0d:b5:ae:05:ec:02:aa:7f:4c:50:0e:49:
         fa:09:cb:24:d5:2e:e8:5f:41:79:fa:75:db:53:00:95:e3:5f:
         45:94:54:3d:9c:fd:93:ad:25:56:9f:5d:75:d9:1e:5d:df:2b:
         6f:a4:7a:6a:8f:7a:98:52:1a:47:33:c5:68:8d:7f:5b:e2:8f:
         c8:a4:f3:e3:ee:17:51:35:bb:ef:c0:ed:30:3c:e1:24:e7:d5:
         e9:84:48:57:09:bd:27:c2:72:a2:76:0d:97:e6:75:63:1a:19:
         b7:de:da:00:e9:86:5b:1d:01:eb:5f:2e:d2:5c:96:55:10:a5:
         5e:88:a8:ac:59:9f:a8:03:eb:b3:ac:79:29:d5:d7:d6:24:0b:
         73:11:a5:5b:c4:98:2f:81:ad:af:d2:ba:7d:74:f4:b8:e9:f2:
         5b:ea:96:7e:8f:d7:bd:a8:51:38:88:93:3d:e7:64:57:e5:d6:
         6c:9c:8a:8d:d9:4b:90:6e:34:86:ac:73:a5:e8:bb:b5:f0:4a:
         ec:c9:20:ab:a7:b1:cb:72:de:0c:7b:c2:24:4a:bc:56:66:98:
         48:01:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:25:00 2025 by rpki-client