Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa
File:                     3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa (raw, json)
Hash identifier:          5QIPH1QZnfEqsbgxWnWVRvk8bJ+PBMhem5jpXRr+FWU=
Subject key identifier:   57:F2:88:A4:2E:B8:A9:A1:A5:B5:95:9F:FE:65:46:CC:AE:78:DC:A4
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       38FB4C6F2CDB28ABA7C102CD5456BADF4D24DFE4
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa
Signing time:             Sat 02 Aug 2025 12:58:19 +0000
ROA not before:           Sat 02 Aug 2025 12:53:19 +0000
ROA not after:            Sat 01 Aug 2026 12:58:19 +0000
asID:                     262669
IP address blocks:        177.22.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fb:4c:6f:2c:db:28:ab:a7:c1:02:cd:54:56:ba:df:4d:24:df:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:19 2025 GMT
            Not After : Aug  1 12:58:19 2026 GMT
        Subject: CN=57F288A42EB8A9A1A5B5959FFE6546CCAE78DCA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:46:f8:06:16:4a:26:f0:88:9b:f7:4a:2b:
                    6c:c8:98:55:6c:45:9a:56:48:e7:e0:31:e1:d0:8e:
                    12:12:9f:11:6d:8c:6f:16:2a:46:50:fc:1c:81:bd:
                    47:5f:7b:8d:8f:f2:5c:63:af:2c:84:2a:57:61:ba:
                    a0:47:79:4f:51:1a:f0:8e:29:9c:17:fb:50:28:57:
                    f5:f3:24:46:07:45:ce:1e:fd:1f:e9:84:70:24:24:
                    a2:5e:c6:5f:0a:1c:fd:ab:41:35:06:bd:50:54:d2:
                    3f:7b:98:cd:9d:f8:7d:56:4b:ef:dc:0b:83:9b:95:
                    ad:ee:ba:e8:3a:56:4c:7c:c1:8f:ec:c5:6f:d6:d2:
                    11:85:15:f3:1c:16:b6:0c:7c:78:39:4d:f7:bb:ce:
                    9d:4f:fe:c5:b2:7a:a7:72:89:d8:5c:c3:95:7f:1a:
                    a0:cd:2a:bc:c8:2a:8f:8b:c8:0b:d3:4e:43:f7:81:
                    af:49:24:ec:4c:ba:03:44:a7:f3:f4:51:e2:35:17:
                    aa:50:37:c1:23:f2:7c:d3:96:90:77:41:6e:1a:17:
                    e3:1f:2c:2f:0d:7a:88:b1:b6:d4:0e:2c:f5:1f:e3:
                    37:55:30:01:b8:42:6f:e4:fb:19:d3:b4:02:3d:3c:
                    c2:48:12:62:d4:10:fd:06:da:c3:ee:c3:75:a0:9c:
                    bb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F2:88:A4:2E:B8:A9:A1:A5:B5:95:9F:FE:65:46:CC:AE:78:DC:A4
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:07:d2:c5:92:4e:8e:73:d5:0e:61:7e:57:1f:73:da:96:89:
         8a:47:3e:da:e7:d5:71:69:b8:f0:87:43:d8:ae:2f:34:24:c3:
         d9:b1:66:b0:45:b1:de:d2:21:b2:7f:40:55:57:23:84:58:6e:
         b1:82:68:a2:af:40:b5:33:c7:11:83:5d:aa:b1:97:13:45:23:
         f1:42:09:d0:b5:5a:4c:00:e9:5a:08:e8:14:18:65:86:53:33:
         ee:05:f0:b1:6c:63:9e:03:51:f4:dc:05:62:71:38:f7:cf:32:
         3a:23:86:cf:b8:57:79:2f:8d:ae:f3:63:9a:49:de:d3:61:49:
         84:6e:eb:e1:93:57:c7:c2:65:32:5b:79:10:21:cc:3f:64:35:
         cb:39:d4:b7:28:4a:4c:9d:04:d8:64:48:5c:04:93:6c:79:3d:
         6a:01:88:c8:c5:e6:7f:14:00:5c:03:9c:7c:0c:c0:a8:11:5a:
         96:ce:4d:aa:2c:e2:c4:b2:06:14:58:37:5d:05:d3:ad:03:82:
         4b:c9:ef:56:15:c8:4a:0d:da:56:b5:e5:89:fb:ea:9d:48:14:
         4d:ee:25:6b:60:a4:f8:4a:3e:3a:56:0f:c3:39:78:02:97:47:
         0b:4c:46:7f:e1:61:ee:48:59:7a:21:97:2c:f2:53:8b:11:c2:
         6f:30:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:29 2025 by rpki-client