Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e39362e302f32342d3234203d3e20323633333437.roa
File:                     3137372e32332e39362e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          0OeyYR+PL9cXE66eMwjHONxqujafQ+ndAopoYEtHNgU=
Subject key identifier:   05:E4:4A:FC:90:6C:89:E9:CC:AE:CA:ED:D0:86:A7:DB:F0:6D:ED:DF
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       3012C5320B4C0AB1BA11298CD1CDE4F4DB9E4D99
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e39362e302f32342d3234203d3e20323633333437.roa
Signing time:             Sat 11 Oct 2025 14:03:03 +0000
ROA not before:           Sat 11 Oct 2025 13:58:03 +0000
ROA not after:            Sat 10 Oct 2026 14:03:03 +0000
asID:                     263347
IP address blocks:        177.23.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:12:c5:32:0b:4c:0a:b1:ba:11:29:8c:d1:cd:e4:f4:db:9e:4d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Oct 11 13:58:03 2025 GMT
            Not After : Oct 10 14:03:03 2026 GMT
        Subject: CN=05E44AFC906C89E9CCAECAEDD086A7DBF06DEDDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:8b:46:a1:42:39:c9:81:2d:80:a1:a1:ac:
                    b6:d0:22:89:be:66:33:11:3d:15:ba:e4:ee:6f:16:
                    4e:9a:0e:e4:f3:c2:7b:2d:9d:2b:0d:21:79:e3:b9:
                    ea:b9:5c:7f:26:6a:52:35:5d:2f:ef:84:01:d9:d9:
                    83:c7:4c:cd:71:65:c2:b6:f8:cf:0e:3f:f6:6b:fd:
                    4c:11:35:60:52:79:0e:5c:c8:4f:86:25:16:1d:c7:
                    68:a3:3b:fb:3a:c8:ae:83:ff:43:e6:79:41:07:b5:
                    f3:86:11:76:f9:94:c7:6c:7d:62:46:68:0e:a8:94:
                    ee:8d:72:19:90:af:06:ae:f2:7d:05:85:94:e8:b9:
                    4e:cd:40:fa:e9:d8:d6:b7:c2:9d:5e:31:a6:b2:7c:
                    67:7e:1e:50:a9:31:b6:9d:9d:58:40:aa:79:1d:a3:
                    f9:0a:53:34:b8:64:e0:83:ec:a0:78:df:90:46:12:
                    71:68:69:fc:0b:a2:39:4e:4e:8f:80:d2:38:3a:92:
                    ae:aa:ed:25:76:2b:17:60:78:6b:8d:4d:c8:21:1a:
                    a3:e9:f2:45:28:29:25:56:3d:00:3a:04:b4:7b:49:
                    b2:84:3a:fd:65:e4:8f:f1:fe:0e:0e:e5:f6:a8:ae:
                    54:a2:f3:04:60:43:9b:5e:2b:91:c9:19:4a:6b:37:
                    ff:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E4:4A:FC:90:6C:89:E9:CC:AE:CA:ED:D0:86:A7:DB:F0:6D:ED:DF
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e39362e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:ab:f2:4d:35:55:8e:21:01:24:ec:ad:da:ad:bc:ba:58:
         63:af:7c:cd:16:a2:c5:d4:ab:71:a9:12:5a:0e:13:ad:fb:95:
         d0:d1:33:4a:dc:ed:dc:2b:fd:04:60:ea:e2:11:83:48:ac:93:
         b4:c4:6b:3e:15:b4:28:0e:1f:a9:52:64:33:cf:db:4a:1b:1e:
         b9:14:0f:d4:54:7d:20:f1:3e:e1:4f:22:18:c1:73:b9:5f:8b:
         3d:78:a0:d4:d8:c3:f6:04:13:c9:da:73:0e:3a:aa:a6:e9:f0:
         0c:a7:66:e8:a3:df:ea:df:21:4b:65:ce:ad:e1:71:6c:ab:2c:
         79:75:2e:2c:19:12:c2:a5:cb:31:d4:c0:cb:82:83:eb:2f:6c:
         b4:87:bf:cd:a3:be:80:0d:b8:68:fd:30:eb:d6:00:b6:4f:43:
         c2:ab:cc:33:59:44:e6:d2:94:85:d2:68:4e:77:87:96:ed:a2:
         6b:b0:3b:1b:15:3e:77:2c:dc:cd:93:5b:03:ca:21:e8:28:5b:
         33:cd:92:7e:ee:3d:66:f1:a2:35:e7:af:13:3a:14:15:65:47:
         28:b8:ad:4e:d9:35:fb:2c:3e:ca:30:07:10:78:03:0b:ee:69:
         a7:02:3e:04:f4:58:a4:df:e1:11:f1:53:46:70:e3:64:f4:47:
         2e:1f:37:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:35 2025 by rpki-client