Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3235322e302f32322d3332203d3e20313938393439.roa
File:                     3137372e382e3235322e302f32322d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          2G7mPc9Ju5flp3dRhs27WZsyixOb2moFBERTjdMy4sI=
Subject key identifier:   25:B2:F2:5C:82:0F:0B:DA:12:67:66:B0:00:64:61:2B:C7:B3:85:05
Certificate issuer:       /CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
Certificate serial:       217509D78236BD1CF26B812DC5C9FBC9F0B73360
Authority key identifier: A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3235322e302f32322d3332203d3e20313938393439.roa
Signing time:             Fri 24 Jul 2026 15:48:38 +0000
ROA not before:           Fri 24 Jul 2026 15:43:38 +0000
ROA not after:            Fri 23 Jul 2027 15:48:38 +0000
asID:                     198949
IP address blocks:        177.8.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl
                          rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:75:09:d7:82:36:bd:1c:f2:6b:81:2d:c5:c9:fb:c9:f0:b7:33:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
        Validity
            Not Before: Jul 24 15:43:38 2026 GMT
            Not After : Jul 23 15:48:38 2027 GMT
        Subject: CN=25B2F25C820F0BDA126766B00064612BC7B38505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3d:0d:ee:fb:c4:c3:22:5b:9e:79:5f:00:42:
                    ec:a6:30:e8:85:89:18:bf:35:17:05:eb:5b:4b:d7:
                    ae:35:69:88:c1:b3:f7:9a:de:a1:52:63:ad:37:66:
                    61:ad:fb:9e:7c:5f:92:17:f9:c6:61:40:51:3f:82:
                    60:3d:5a:bf:1c:e2:58:71:1a:a5:6a:57:2e:73:29:
                    84:da:ff:6e:8b:b4:f3:b5:8e:c0:7f:49:b2:de:10:
                    61:07:49:1a:c3:f1:e6:46:be:ed:34:f8:43:0c:3b:
                    39:b5:f4:77:26:88:81:ad:34:fc:4c:a3:8c:d2:7d:
                    7a:06:11:8a:82:49:45:58:39:7b:c9:3e:4e:51:62:
                    16:98:82:41:8a:0f:47:43:32:f5:c5:ac:7c:d9:4c:
                    78:a7:8c:93:76:87:ec:db:45:ea:bf:5a:4c:0a:8f:
                    1d:25:40:5f:d0:ae:8d:a9:cc:b6:aa:e7:cc:ec:12:
                    56:b5:1c:2c:2f:05:42:bf:d3:c1:91:94:c2:7e:a3:
                    10:e8:fb:45:6b:92:1a:ab:2d:52:97:fe:c7:ed:b3:
                    ab:c2:6a:ed:36:88:6b:eb:74:b4:25:c9:70:7f:77:
                    cb:99:3a:e5:14:04:f9:b7:59:2a:56:a6:14:ef:76:
                    8e:f2:c4:a5:31:7e:ac:ee:45:9d:a2:45:d3:19:b2:
                    03:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B2:F2:5C:82:0F:0B:DA:12:67:66:B0:00:64:61:2B:C7:B3:85:05
            X509v3 Authority Key Identifier:
                keyid:A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3137372e382e3235322e302f32322d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:82:31:5c:63:42:21:58:8d:b3:5e:93:7c:d9:6f:e7:d2:
         f2:24:bb:aa:93:38:1c:57:d6:3a:c5:9d:45:61:2b:48:9d:f3:
         29:94:b7:04:be:09:a0:05:39:75:c0:8d:e6:ca:1f:3e:09:52:
         c5:92:c5:74:79:d0:1d:fe:c3:cb:c5:b8:06:12:f5:77:62:fa:
         dc:a2:ec:e3:62:69:e1:aa:22:bf:77:4b:82:c0:a4:62:cd:fc:
         cb:8d:25:97:57:4c:2f:5c:a7:f1:12:51:16:fa:f2:dc:68:06:
         d0:b2:f5:8e:03:ea:ad:ea:d9:68:d4:24:06:c8:b8:a7:0a:9b:
         fb:94:9c:98:5f:9c:98:e0:73:2b:73:7b:fd:ea:3f:68:79:e9:
         07:04:eb:8e:59:03:95:ad:46:a2:a5:3f:7b:24:99:f4:e0:46:
         40:72:62:6d:58:15:11:66:bb:0b:6d:27:f4:e5:e3:79:a0:03:
         30:71:5d:cb:0e:14:0b:cf:ec:20:d7:13:1b:df:d3:eb:0b:08:
         c1:02:74:03:0b:9e:d2:7a:8d:88:08:2d:90:ef:33:bd:26:50:
         38:ce:f0:fa:5f:29:ae:ab:32:66:81:29:12:61:91:2d:b7:cc:
         28:62:ac:6e:85:fb:5c:d4:46:ab:b9:a0:d3:7a:a5:b1:f9:7e:
         b2:c1:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:24:39 2026 by rpki-client