Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa
File:                     3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa (raw, json)
Hash identifier:          gRapFtyrBGWy7M/L1Jphf/yBiWzbzrLehigkCy2Dgfs=
Subject key identifier:   56:D4:54:3B:E5:EC:9D:DF:A9:BE:B8:11:BD:89:A0:AC:C6:55:27:CC
Certificate issuer:       /CN=768C468840EAB0C1EAF4BADFFD473AF4BC4719CD
Certificate serial:       31298EA80B4E9529CE5CD7FAD7F9CFD511698B11
Authority key identifier: 76:8C:46:88:40:EA:B0:C1:EA:F4:BA:DF:FD:47:3A:F4:BC:47:19:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa
Signing time:             Mon 07 Jul 2025 19:00:00 +0000
ROA not before:           Mon 07 Jul 2025 18:55:00 +0000
ROA not after:            Tue 07 Jul 2026 19:00:00 +0000
asID:                     262813
IP address blocks:        177.70.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.crl
                          rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:29:8e:a8:0b:4e:95:29:ce:5c:d7:fa:d7:f9:cf:d5:11:69:8b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768C468840EAB0C1EAF4BADFFD473AF4BC4719CD
        Validity
            Not Before: Jul  7 18:55:00 2025 GMT
            Not After : Jul  7 19:00:00 2026 GMT
        Subject: CN=3082010A02820101009C7FB15EB92F81EA679F40D1AB1F5F056297F5D7FAEC5DA99015399EE9329A63761746297C68E1882961E9AE81853710B99E30688C20ECE55F9895C2C84AD80943D1063F91B04EEF024EF3BADE1C1080AD3BAF0AEFD090F53AE0410ABA8DAC6A8451B7B352D60C7FB609EC7B308080ECC310B4361A6D3A66A8257C7217B7D10939332012E14F78BDA7DCB8E076EA84B51311AC1CB7F6038663C26CA7A14D604B5F429045F72607134C93BAD559DD69CED2705879970005E0F459E2081D6387BABC259CC4FC06BEB78CFA8EEAB9094D134CE8995436541C5612912B5789C3578D5E6B990159C51957ECC13BB9BA900D12330DBD070572537846306D4D19EF921D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:b1:5e:b9:2f:81:ea:67:9f:40:d1:ab:1f:
                    5f:05:62:97:f5:d7:fa:ec:5d:a9:90:15:39:9e:e9:
                    32:9a:63:76:17:46:29:7c:68:e1:88:29:61:e9:ae:
                    81:85:37:10:b9:9e:30:68:8c:20:ec:e5:5f:98:95:
                    c2:c8:4a:d8:09:43:d1:06:3f:91:b0:4e:ef:02:4e:
                    f3:ba:de:1c:10:80:ad:3b:af:0a:ef:d0:90:f5:3a:
                    e0:41:0a:ba:8d:ac:6a:84:51:b7:b3:52:d6:0c:7f:
                    b6:09:ec:7b:30:80:80:ec:c3:10:b4:36:1a:6d:3a:
                    66:a8:25:7c:72:17:b7:d1:09:39:33:20:12:e1:4f:
                    78:bd:a7:dc:b8:e0:76:ea:84:b5:13:11:ac:1c:b7:
                    f6:03:86:63:c2:6c:a7:a1:4d:60:4b:5f:42:90:45:
                    f7:26:07:13:4c:93:ba:d5:59:dd:69:ce:d2:70:58:
                    79:97:00:05:e0:f4:59:e2:08:1d:63:87:ba:bc:25:
                    9c:c4:fc:06:be:b7:8c:fa:8e:ea:b9:09:4d:13:4c:
                    e8:99:54:36:54:1c:56:12:91:2b:57:89:c3:57:8d:
                    5e:6b:99:01:59:c5:19:57:ec:c1:3b:b9:ba:90:0d:
                    12:33:0d:bd:07:05:72:53:78:46:30:6d:4d:19:ef:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D4:54:3B:E5:EC:9D:DF:A9:BE:B8:11:BD:89:A0:AC:C6:55:27:CC
            X509v3 Authority Key Identifier:
                keyid:76:8C:46:88:40:EA:B0:C1:EA:F4:BA:DF:FD:47:3A:F4:BC:47:19:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3137372e37302e3134342e302f32302d3234203d3e20323632383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:50:a9:20:98:08:78:4c:7b:de:76:8d:cf:7c:52:f8:8e:b6:
         b8:3e:e0:bd:aa:75:ad:95:79:a2:c2:ee:33:c8:8d:5f:45:8f:
         8d:19:05:5c:a5:aa:08:ef:7c:47:8f:56:88:b7:3a:c2:e2:74:
         14:b8:03:81:85:83:ce:12:73:94:4d:83:e5:e2:25:94:0d:81:
         1d:07:13:d8:fb:b9:0c:c8:c7:4c:04:a2:18:91:54:25:eb:d2:
         07:d9:41:30:87:96:76:73:14:4d:42:22:9e:79:79:69:e5:bf:
         b0:0b:e8:ca:7e:65:16:87:f4:d0:51:d6:a0:92:6c:22:cf:a2:
         b1:05:f0:0a:ee:7b:6b:98:e9:89:c4:7d:39:22:35:f1:ee:9f:
         55:55:9f:13:82:59:ae:a1:64:b9:01:ca:a3:bf:58:25:64:63:
         75:3e:f4:1b:1c:d3:cb:ac:78:f1:51:c8:bf:84:38:34:6c:26:
         c2:8e:0a:d7:d8:b1:e9:bd:13:93:de:dd:a2:91:b1:76:46:33:
         5e:c2:3c:72:40:4a:cb:29:5c:9d:b6:a6:91:ff:f4:20:c8:1b:
         f5:79:57:b9:e6:ff:0b:60:ee:c6:cb:b1:74:05:2b:a3:65:38:
         4d:43:a8:ca:55:a3:1c:d8:88:1c:50:3d:70:45:77:03:3e:30:
         17:b7:a1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:24 2025 by rpki-client