Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3235322e302f32322d3332203d3e20313938393439.roa
File:                     3137372e382e3235322e302f32322d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          7DC0/oxeMYbDRTIplOvIleVUcqRA4HYfRGscELunxd4=
Subject key identifier:   FC:DB:2C:66:61:30:4F:52:C9:32:10:07:6B:95:7A:9D:66:F8:8F:3C
Certificate issuer:       /CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
Certificate serial:       09E95F515455A29F44E8C975738BE26A65DADF35
Authority key identifier: A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3235322e302f32322d3332203d3e20313938393439.roa
Signing time:             Fri 22 Aug 2025 15:19:28 +0000
ROA not before:           Fri 22 Aug 2025 15:14:28 +0000
ROA not after:            Fri 21 Aug 2026 15:19:28 +0000
asID:                     198949
IP address blocks:        177.8.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl
                          rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e9:5f:51:54:55:a2:9f:44:e8:c9:75:73:8b:e2:6a:65:da:df:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
        Validity
            Not Before: Aug 22 15:14:28 2025 GMT
            Not After : Aug 21 15:19:28 2026 GMT
        Subject: CN=FCDB2C6661304F52C93210076B957A9D66F88F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ea:89:14:2e:e7:4f:3b:4a:06:c5:71:17:e8:
                    9a:27:62:54:8f:92:a8:3f:0c:3c:b9:df:e9:5d:6c:
                    2e:f6:ed:2b:f6:2b:6c:90:63:d8:3b:28:67:5d:2c:
                    1d:97:38:d5:11:e0:64:78:13:b1:75:04:24:dd:b5:
                    1b:40:2c:17:d9:3f:7b:a6:5d:62:3f:cd:f2:0e:1c:
                    7c:e7:c3:d6:99:d9:c1:37:31:cd:ce:52:b1:ff:99:
                    d1:44:1f:76:8f:7e:f1:96:61:82:fd:25:e9:4b:39:
                    d3:10:1c:99:7a:05:c9:45:ae:0a:2f:77:bd:5b:93:
                    35:28:95:d8:91:ab:04:72:1d:cc:d5:8d:d2:c2:dd:
                    88:5d:9b:90:ea:c9:ca:96:38:51:1d:75:1a:af:c6:
                    b0:c7:85:6f:f2:60:88:b8:f3:9a:c1:3f:70:04:06:
                    ea:f6:f9:e5:92:d5:20:ce:58:7a:8d:13:c1:3f:8a:
                    26:08:e7:3e:85:a4:55:4d:73:1e:bb:47:f0:2c:d0:
                    22:a5:71:32:3d:d0:8b:9f:ec:5a:5b:ed:13:ca:be:
                    b1:82:29:69:3b:ea:b2:3f:89:6b:9b:e1:ce:0f:a0:
                    59:0e:2e:90:34:66:7a:16:0d:7d:52:df:53:1f:bc:
                    ae:5a:5f:bf:7f:e0:19:6d:94:6c:a5:3c:30:18:33:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DB:2C:66:61:30:4F:52:C9:32:10:07:6B:95:7A:9D:66:F8:8F:3C
            X509v3 Authority Key Identifier:
                keyid:A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3235322e302f32322d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:d8:84:13:5f:93:33:7b:f2:52:40:c3:78:ab:5b:57:ea:7c:
         b5:c9:05:96:ea:fe:ae:14:9f:a7:e7:98:eb:a7:0d:5c:16:83:
         54:08:84:a2:54:6d:1a:58:d3:97:58:d2:ed:17:14:a0:ca:15:
         f8:46:f8:4c:a8:23:53:85:4d:c0:71:ed:6d:f8:3c:36:98:aa:
         a1:73:69:0d:25:1e:1a:67:c3:fb:d3:ea:b7:5d:04:af:8a:fd:
         ef:20:f3:08:c4:a4:94:cc:ba:53:cd:70:36:b2:01:71:d2:97:
         69:3e:96:0b:b4:10:c7:37:e6:66:df:3c:50:04:ec:73:6c:67:
         9b:e8:07:33:07:03:18:62:b9:3c:e4:9f:56:72:99:59:7f:da:
         04:ba:00:47:79:da:05:aa:db:d0:95:b1:66:86:94:7f:d4:7e:
         47:05:69:d1:87:19:c4:f6:5b:da:3b:83:15:f8:aa:0e:56:c7:
         8e:5d:a8:97:72:17:97:0f:15:c5:c5:ed:07:97:20:76:f5:05:
         ab:21:df:c1:c1:52:cb:73:0a:c1:5c:4d:d1:0a:20:37:99:72:
         ad:98:96:7f:1c:74:1f:82:e2:7e:9b:a4:63:db:d5:f2:a1:6b:
         9c:b2:3a:00:ec:69:3b:2c:c5:a8:98:10:92:b0:92:a1:c1:3d:
         a1:0d:e6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:49:54 2025 by rpki-client