Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/3137372e3132392e3137322e302f32322d3332203d3e20313938393439.roa
File:                     3137372e3132392e3137322e302f32322d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          KWOcoR9hqLH7384p+O+WHFWxKloI3EeqvgQB7yfHZGs=
Subject key identifier:   45:EB:4A:02:9C:C9:08:1D:63:36:9A:FF:F2:B8:76:7A:A0:8A:7B:1A
Certificate issuer:       /CN=D5A1856A52E7F9EBF280FCB86750839A6466C111
Certificate serial:       138E4657CBDCD5326523AEEDDEC66996FF30BDC6
Authority key identifier: D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/3137372e3132392e3137322e302f32322d3332203d3e20313938393439.roa
Signing time:             Mon 15 Sep 2025 13:22:00 +0000
ROA not before:           Mon 15 Sep 2025 13:17:00 +0000
ROA not after:            Mon 14 Sep 2026 13:22:00 +0000
asID:                     198949
IP address blocks:        177.129.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl
                          rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 11:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8e:46:57:cb:dc:d5:32:65:23:ae:ed:de:c6:69:96:ff:30:bd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A1856A52E7F9EBF280FCB86750839A6466C111
        Validity
            Not Before: Sep 15 13:17:00 2025 GMT
            Not After : Sep 14 13:22:00 2026 GMT
        Subject: CN=45EB4A029CC9081D63369AFFF2B8767AA08A7B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:fe:f5:e7:d6:b9:3e:57:2f:d7:87:08:2c:
                    6d:71:7f:56:77:13:89:4d:6f:36:c3:7e:0c:00:ed:
                    75:c7:5c:78:76:58:9c:fc:11:a4:d8:23:a3:00:64:
                    26:ee:8e:15:b3:4f:b5:f3:6a:44:d7:a7:a5:c2:31:
                    16:9a:6b:29:6d:0f:fd:75:18:18:e5:03:04:81:0b:
                    44:15:6d:65:02:28:20:96:c6:4e:60:05:ca:cf:30:
                    3e:91:07:fb:c9:ad:4c:f8:de:54:2c:d6:ab:44:50:
                    8e:1f:da:86:a8:0b:4a:b0:7f:80:40:ea:ce:d1:77:
                    56:dc:e1:cf:74:db:c2:0f:b3:1b:4c:4d:1a:5c:a7:
                    b3:98:a1:39:21:e9:05:3f:8b:5a:39:51:e9:42:41:
                    3a:d5:d7:31:b4:f7:58:3b:52:51:ef:dd:69:71:5d:
                    98:74:ef:41:e4:6b:37:06:6e:8c:c8:9a:28:d5:a6:
                    5e:02:a3:57:ab:92:27:8b:f9:76:6f:ea:1e:73:e3:
                    c7:f8:d0:e3:98:17:23:83:22:ae:6f:a1:a0:b8:1a:
                    d2:48:d2:e5:f2:71:ef:50:7c:99:ca:25:0c:f1:c6:
                    28:af:64:d9:34:f8:f6:36:5b:46:0e:35:5a:f8:66:
                    88:04:d4:83:3c:fd:48:91:cd:c2:76:d4:e4:8f:6b:
                    82:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EB:4A:02:9C:C9:08:1D:63:36:9A:FF:F2:B8:76:7A:A0:8A:7B:1A
            X509v3 Authority Key Identifier:
                keyid:D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/3137372e3132392e3137322e302f32322d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:9c:75:9a:7d:ad:bb:62:6f:55:47:6e:25:c9:0e:9a:5f:f1:
         3d:59:da:1b:f9:f3:b5:1b:08:f9:54:e5:67:bd:2e:26:99:f6:
         e6:41:59:c9:c2:47:ea:5b:a1:24:ab:ee:c8:66:03:f4:8e:77:
         d8:0b:30:35:ac:bd:bf:78:c2:1e:9c:c4:68:1f:e8:48:dc:0b:
         2b:63:18:ac:c6:9f:bc:e7:f6:3f:ee:f4:80:fe:93:58:17:39:
         4a:08:25:d0:23:83:0a:62:95:bc:b3:05:c4:75:7d:82:da:3b:
         a5:19:35:bb:f6:ac:41:62:ad:ed:76:f3:89:fe:e4:de:f6:6f:
         b4:ad:ca:f4:b8:c2:ee:f2:49:57:0d:d9:ea:c9:3f:fe:49:fe:
         e7:8e:a2:25:1e:3c:26:ef:b9:a1:5e:4c:25:f3:ad:45:2a:39:
         f8:ea:a4:3c:6a:91:0f:1b:c2:53:23:ff:0a:6b:9d:d6:4c:03:
         44:49:64:65:72:db:f8:ea:a7:60:54:1a:ca:2e:60:7b:ae:64:
         3f:a7:1a:78:3b:86:f1:14:25:84:03:a7:af:14:2c:42:4d:81:
         c2:dc:29:20:fa:58:76:ca:f2:87:f8:de:37:28:41:b1:36:a5:
         72:46:db:df:e4:ce:96:68:4d:cd:21:c4:af:f6:da:09:db:06:
         91:a9:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:42 2025 by rpki-client