Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/3137372e35352e3132382e302f32302d3332203d3e203533303033.roa
File:                     3137372e35352e3132382e302f32302d3332203d3e203533303033.roa (raw, json)
Hash identifier:          IKlkGuyvNnCKF+k9PJJJ3z1W9joWD6fNlIQIW0/Dx8Q=
Subject key identifier:   1A:84:17:68:4D:90:22:8F:3A:EA:1D:81:DA:D0:05:BC:02:3F:A5:EA
Certificate issuer:       /CN=E483282DA50873B6832166A0D902D6605AA93019
Certificate serial:       73C12D1506C21BE0494E590727ED7E846C9E5165
Authority key identifier: E4:83:28:2D:A5:08:73:B6:83:21:66:A0:D9:02:D6:60:5A:A9:30:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E483282DA50873B6832166A0D902D6605AA93019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/3137372e35352e3132382e302f32302d3332203d3e203533303033.roa
Signing time:             Wed 03 Sep 2025 19:49:59 +0000
ROA not before:           Wed 03 Sep 2025 19:44:59 +0000
ROA not after:            Wed 02 Sep 2026 19:49:59 +0000
asID:                     53003
IP address blocks:        177.55.128.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.crl
                          rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E483282DA50873B6832166A0D902D6605AA93019.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c1:2d:15:06:c2:1b:e0:49:4e:59:07:27:ed:7e:84:6c:9e:51:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E483282DA50873B6832166A0D902D6605AA93019
        Validity
            Not Before: Sep  3 19:44:59 2025 GMT
            Not After : Sep  2 19:49:59 2026 GMT
        Subject: CN=1A8417684D90228F3AEA1D81DAD005BC023FA5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:a6:28:fd:7f:45:80:bb:99:53:0e:7d:c4:
                    8b:fc:61:a1:60:96:43:ba:3d:e4:68:86:49:26:fa:
                    ac:99:7e:f1:11:d9:01:fa:5c:c9:2e:c7:87:72:25:
                    0b:2d:43:c5:e0:3a:44:f7:77:26:1f:7f:7d:08:ab:
                    d2:5e:97:e2:99:31:4f:39:a5:52:b7:6d:9a:d7:c8:
                    56:00:59:18:16:5a:f4:f2:ea:97:5e:e0:e3:8b:11:
                    69:9c:89:29:59:56:1a:24:28:12:8a:7c:e3:55:1d:
                    0c:88:a8:6f:e5:ca:82:78:48:f9:fa:5b:88:7b:d8:
                    f5:ff:ee:84:90:5e:a4:b3:7d:06:64:a6:12:34:93:
                    45:f9:53:2b:63:20:51:88:2a:3e:1e:fd:7b:9a:0b:
                    4f:a8:db:75:94:12:30:8a:7e:ca:b7:83:ff:55:0d:
                    24:07:dd:b3:61:88:dd:a9:90:8d:1d:a9:63:61:62:
                    a6:df:f2:19:f6:ee:ee:13:f1:f4:c9:84:08:8f:3f:
                    c2:89:2a:64:b6:2f:3e:c8:0a:03:23:3e:8f:7f:4d:
                    04:d6:d1:bc:d3:6f:7d:c0:fa:00:07:4a:4a:f4:3e:
                    bd:51:9a:55:c8:79:38:7a:1a:5c:1e:4d:6c:cc:79:
                    21:e6:83:49:92:d5:b5:e2:4d:fb:78:a4:ce:ab:6b:
                    08:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:84:17:68:4D:90:22:8F:3A:EA:1D:81:DA:D0:05:BC:02:3F:A5:EA
            X509v3 Authority Key Identifier:
                keyid:E4:83:28:2D:A5:08:73:B6:83:21:66:A0:D9:02:D6:60:5A:A9:30:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E483282DA50873B6832166A0D902D6605AA93019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/3137372e35352e3132382e302f32302d3332203d3e203533303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:a8:31:d4:93:f1:a6:17:02:93:0a:a7:30:6b:c8:ba:82:ad:
         27:54:0f:f3:76:49:c5:2b:8c:86:66:1e:dc:da:e8:90:df:75:
         4d:c4:9f:dd:6f:c3:2e:da:e2:67:ab:fc:25:c8:33:dd:88:e4:
         f7:8e:97:ca:82:02:6b:59:5c:41:59:d8:1e:57:27:b8:75:51:
         e6:9b:e2:54:f6:4f:87:1a:9d:19:ef:43:b4:87:bc:3b:ed:89:
         7c:7a:a4:f6:e7:65:e2:c1:2f:24:8f:40:00:0c:5c:90:72:a2:
         ec:2d:43:59:65:3c:65:21:ad:98:ef:26:4a:5c:35:3d:79:37:
         6a:be:7b:04:f1:36:ac:81:c5:6d:d4:e3:72:fc:0a:37:3b:89:
         dd:7e:df:d3:e5:3c:af:c3:d1:13:3e:96:11:0d:49:dc:fd:b6:
         d8:d1:2a:f6:09:1c:a7:5c:5f:ba:54:ba:ea:78:41:8d:b8:29:
         4a:59:98:a9:df:47:60:36:22:67:3d:a7:b1:e0:75:c0:5b:7f:
         39:ac:53:17:1a:3c:34:4f:7f:51:3f:39:7b:56:bf:11:7d:80:
         44:aa:56:6e:62:23:12:c7:79:3b:01:1e:13:e1:4d:ad:17:7b:
         2b:db:59:3d:2c:cf:55:29:cb:f2:dc:94:54:42:32:0b:48:6d:
         55:02:bb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:45:25 2025 by rpki-client