Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3137372e3132382e3137342e302f32342d3332203d3e20323731343239.roa
File:                     3137372e3132382e3137342e302f32342d3332203d3e20323731343239.roa (raw, json)
Hash identifier:          6bTd39+MlCv88E/q43cihibMKU4cgb8loMidKNIC4Vw=
Subject key identifier:   0F:A8:B2:4E:8A:7D:D8:F7:BD:B8:51:36:A8:78:0C:E2:97:CA:F3:92
Certificate issuer:       /CN=1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7
Certificate serial:       0E87E8E3E6AF68CADA9CC04A14458A400D9F5A62
Authority key identifier: 1B:B5:40:69:7C:6A:86:FD:B0:EE:C3:1F:1C:4D:55:D4:99:F3:EC:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3137372e3132382e3137342e302f32342d3332203d3e20323731343239.roa
Signing time:             Mon 13 Oct 2025 16:48:01 +0000
ROA not before:           Mon 13 Oct 2025 16:43:01 +0000
ROA not after:            Mon 12 Oct 2026 16:48:01 +0000
asID:                     271429
IP address blocks:        177.128.174.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.crl
                          rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:87:e8:e3:e6:af:68:ca:da:9c:c0:4a:14:45:8a:40:0d:9f:5a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7
        Validity
            Not Before: Oct 13 16:43:01 2025 GMT
            Not After : Oct 12 16:48:01 2026 GMT
        Subject: CN=0FA8B24E8A7DD8F7BDB85136A8780CE297CAF392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f6:7b:c1:28:c4:f6:49:83:aa:f9:8f:f7:1d:
                    3d:ab:2d:c9:b9:dc:55:fb:2c:b8:b1:85:ea:73:8b:
                    73:06:ca:bf:2f:e8:2b:fa:3b:7b:db:cf:6c:af:e6:
                    d1:9e:f5:d6:7a:b0:fe:e1:13:e8:ab:fb:8a:9c:43:
                    5c:fc:29:b4:dc:57:46:93:ec:c4:07:fc:11:d3:c9:
                    e2:49:72:a8:e7:b3:0f:31:9b:33:79:3d:bc:08:45:
                    cf:a8:0d:eb:23:99:2c:6c:99:62:d5:98:71:8c:ab:
                    47:96:3f:45:6e:41:5d:83:c2:04:4c:25:e3:95:fd:
                    c4:25:3c:af:60:02:d3:8f:ec:5e:64:d5:30:7b:71:
                    c0:75:00:7f:43:04:81:ca:01:c1:58:02:ab:22:be:
                    56:e1:33:22:82:2d:b2:83:a6:91:d2:62:7d:48:80:
                    1f:87:df:20:83:9d:e1:f0:9f:6d:30:6d:9f:86:14:
                    01:4f:12:92:9e:02:b8:fe:34:37:9d:f0:0d:4a:00:
                    92:50:d8:f5:07:27:55:6b:99:d3:f1:c8:4b:2a:a5:
                    b8:58:5f:5c:15:5c:80:71:3d:cd:88:81:3f:c4:0e:
                    9b:5e:74:5c:7a:f9:ce:82:a6:1e:27:7f:0a:08:67:
                    db:5c:7f:38:9c:51:84:c8:91:9b:ab:64:aa:fd:93:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A8:B2:4E:8A:7D:D8:F7:BD:B8:51:36:A8:78:0C:E2:97:CA:F3:92
            X509v3 Authority Key Identifier:
                keyid:1B:B5:40:69:7C:6A:86:FD:B0:EE:C3:1F:1C:4D:55:D4:99:F3:EC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3137372e3132382e3137342e302f32342d3332203d3e20323731343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:41:0a:11:1a:28:f1:54:cd:5b:1e:30:69:15:a4:06:51:a3:
         01:4c:10:4e:62:95:ff:21:3a:8c:71:ac:e7:5e:3b:9b:36:cd:
         74:4a:ec:10:e8:cd:dd:47:d6:7a:0c:2d:22:e4:95:63:07:59:
         68:d2:c1:82:f0:61:b8:a3:f5:a1:61:bd:be:4f:f6:39:70:9b:
         31:f4:52:65:b3:be:7a:22:eb:4a:5b:a0:13:60:21:16:c0:05:
         0a:21:ca:02:14:f0:0e:b9:32:37:cf:d0:60:ae:b2:73:1a:03:
         db:75:21:f5:f0:a5:ba:8a:29:ba:3b:6f:aa:04:5d:09:d7:04:
         b7:b5:a9:fe:35:73:88:e0:85:9a:f7:93:42:fa:08:2b:b8:ea:
         7a:e2:89:9e:8d:24:dc:89:31:ac:65:f1:9b:78:e4:27:bb:c0:
         e8:53:1c:7b:ed:3f:63:e8:b2:38:8b:e1:d5:89:2c:bb:8b:28:
         15:61:22:7b:33:cb:0a:31:ea:12:6d:eb:86:1d:48:36:ac:42:
         76:f0:43:41:7b:f2:07:be:a0:d2:5c:88:8b:c0:bc:c4:b1:51:
         f7:6c:ce:18:8d:df:be:0f:8f:ea:8c:a0:6c:e6:72:a4:65:07:
         7e:03:70:6a:c8:22:a3:48:5a:76:7c:c4:8d:fa:67:9b:05:70:
         2e:b8:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:49:35 2025 by rpki-client