Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa
File:                     3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          vM1NLsDp1BOHPyKbkBFOfotfvEFCDxeRwQPWF65L7ho=
Subject key identifier:   30:B3:63:63:A5:0C:A0:9F:D9:93:C7:E6:A6:43:DB:BD:13:A8:E7:24
Certificate issuer:       /CN=944D1D572BAB1051387200BA68477F359EA492CF
Certificate serial:       469C8D01C0F1A1EA41E94426633243579C95154C
Authority key identifier: 94:4D:1D:57:2B:AB:10:51:38:72:00:BA:68:47:7F:35:9E:A4:92:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D1D572BAB1051387200BA68477F359EA492CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa
Signing time:             Fri 06 Jun 2025 13:21:35 +0000
ROA not before:           Fri 06 Jun 2025 13:16:35 +0000
ROA not after:            Fri 05 Jun 2026 13:21:35 +0000
asID:                     263444
IP address blocks:        177.91.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D1D572BAB1051387200BA68477F359EA492CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 19:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9c:8d:01:c0:f1:a1:ea:41:e9:44:26:63:32:43:57:9c:95:15:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=944D1D572BAB1051387200BA68477F359EA492CF
        Validity
            Not Before: Jun  6 13:16:35 2025 GMT
            Not After : Jun  5 13:21:35 2026 GMT
        Subject: CN=30B36363A50CA09FD993C7E6A643DBBD13A8E724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:22:6a:b0:84:54:e4:53:d7:02:ee:27:34:
                    11:58:a3:8c:6b:0c:2a:1e:ac:b5:24:32:e3:bc:2d:
                    e3:23:35:70:d0:59:6a:bf:de:6f:df:63:38:2a:1d:
                    ba:2b:cf:f9:70:cb:9a:aa:9a:e9:4f:1d:06:88:1c:
                    96:74:a9:27:7f:80:a1:10:38:82:f5:45:72:f4:cb:
                    87:c7:75:08:e4:61:b3:3e:43:1f:39:d0:f4:99:7d:
                    e8:35:73:c6:1e:9d:d7:21:23:e1:9b:d9:7e:22:3f:
                    ca:6e:1d:87:8f:00:a1:5e:ab:30:2c:7b:db:9c:e9:
                    f0:28:b5:c8:29:dc:14:49:45:3e:9b:5d:e1:27:85:
                    c6:dc:e7:12:ba:8b:3c:bd:48:ea:74:86:08:94:b7:
                    e7:f4:c9:a1:8d:33:98:26:6d:fb:d4:f6:75:e6:52:
                    f9:5f:85:9a:58:11:3b:55:a3:37:24:73:0d:2d:b8:
                    80:c6:5f:72:62:6e:c9:65:47:43:36:f1:4c:13:55:
                    80:16:18:1f:5c:58:7d:bb:9d:ea:b4:8d:8c:ac:04:
                    9e:34:6c:b3:2f:4c:89:66:ff:3d:f9:e9:16:e3:d8:
                    7c:bc:c0:85:ef:12:55:2a:37:70:b5:31:6e:6d:d9:
                    47:bb:f5:f4:5e:55:7b:ab:e7:4a:e5:83:c4:a8:fc:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B3:63:63:A5:0C:A0:9F:D9:93:C7:E6:A6:43:DB:BD:13:A8:E7:24
            X509v3 Authority Key Identifier:
                keyid:94:4D:1D:57:2B:AB:10:51:38:72:00:BA:68:47:7F:35:9E:A4:92:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D1D572BAB1051387200BA68477F359EA492CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:a2:0f:03:66:ca:75:94:d8:2d:90:34:46:86:ce:9b:d9:9d:
         d9:7c:04:21:86:f2:31:fd:e9:38:31:2f:d9:6b:07:25:29:3c:
         60:8f:15:d0:b7:14:4f:50:4d:57:7a:51:e6:97:0d:83:c2:0b:
         93:8e:73:f3:b7:ba:91:ac:22:5b:05:a2:ee:16:5b:80:f7:92:
         07:44:7f:a2:63:c3:a4:6a:c4:bf:9d:9e:a0:02:6d:ab:7f:c9:
         f4:1f:df:aa:1d:f1:a7:64:1c:1b:45:63:6d:3f:50:21:dd:36:
         15:2b:80:6e:4c:8d:dd:3f:a3:e3:9d:af:ca:ab:9b:d5:2e:8e:
         a1:7a:bb:64:f7:9a:bc:d5:73:c4:0b:90:eb:13:74:c4:0e:d9:
         30:6e:b9:35:9d:73:27:91:dd:a7:28:cc:a0:1e:f0:6c:08:91:
         9e:48:12:1b:4b:b4:59:40:18:9c:69:99:e6:0b:18:47:24:09:
         c3:49:d5:6f:27:7e:55:67:e7:e6:1c:43:75:fe:b7:1d:67:d5:
         29:72:8f:08:d8:87:c4:1b:f1:ab:ab:9a:98:2a:94:3f:b6:52:
         ae:f0:00:bf:36:48:b1:2b:23:77:8a:52:28:0d:20:90:40:5e:
         86:e4:9e:85:35:35:b1:0b:89:57:5c:21:ff:35:e0:e5:a0:89:
         04:b3:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:59:28 2025 by rpki-client