Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/3137372e3132392e36342e302f32342d3234203d3e20323732373133.roa
File:                     3137372e3132392e36342e302f32342d3234203d3e20323732373133.roa (raw, json)
Hash identifier:          ge+yYFJNirKnVCEbRb4Q5GE2Vr5gFCwDtAoAQwvImVM=
Subject key identifier:   6E:0A:92:84:CE:B6:48:4B:2A:C9:DC:75:11:1E:F9:0D:26:7E:62:B4
Certificate issuer:       /CN=0D544ED42C6259C03F729BAE35330B8BC76BC251
Certificate serial:       68E7DD190DB0348408823E49645EAF391F0D8497
Authority key identifier: 0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/3137372e3132392e36342e302f32342d3234203d3e20323732373133.roa
Signing time:             Mon 06 Oct 2025 23:34:55 +0000
ROA not before:           Mon 06 Oct 2025 23:29:55 +0000
ROA not after:            Mon 05 Oct 2026 23:34:55 +0000
asID:                     272713
IP address blocks:        177.129.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl
                          rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 19:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e7:dd:19:0d:b0:34:84:08:82:3e:49:64:5e:af:39:1f:0d:84:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D544ED42C6259C03F729BAE35330B8BC76BC251
        Validity
            Not Before: Oct  6 23:29:55 2025 GMT
            Not After : Oct  5 23:34:55 2026 GMT
        Subject: CN=6E0A9284CEB6484B2AC9DC75111EF90D267E62B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:b7:d1:94:2c:4b:e3:d9:b5:f7:1d:e3:81:
                    43:dd:7f:c2:28:43:fd:ef:f8:df:51:69:57:ac:6e:
                    09:30:43:b3:c8:27:2e:a7:52:7b:b5:05:30:ff:fd:
                    63:e7:da:81:bf:f4:e6:26:57:34:35:22:4d:6e:20:
                    de:61:c3:a4:77:09:e8:f0:ef:98:da:63:74:cc:20:
                    31:f5:41:69:3d:b4:5f:b8:83:76:3b:7d:8c:b7:97:
                    4c:94:d4:16:4e:4e:b0:d1:5c:49:88:ce:81:bc:b5:
                    5b:3d:09:b3:80:96:f2:64:72:83:f1:67:84:f5:d2:
                    e9:33:58:ed:ae:7a:ab:d7:72:45:8c:12:bb:34:45:
                    6d:eb:f4:83:e3:d2:49:dc:3d:e7:15:c7:ee:6b:b3:
                    5d:96:02:0e:58:57:1a:c5:76:eb:7b:cd:53:71:a5:
                    bd:93:f5:96:fa:c1:17:75:30:99:c2:d4:7c:ce:58:
                    03:cb:de:08:08:57:5a:cf:61:e1:44:d1:bc:fc:48:
                    76:dc:7c:dc:60:a6:9b:03:3e:31:c9:a4:66:2b:21:
                    ec:d8:12:3d:55:72:74:96:ff:5a:f3:52:d0:82:9d:
                    c0:37:ae:75:78:4b:b8:3d:42:ea:a6:e4:b1:44:e1:
                    bf:9f:c2:43:a9:87:fb:6b:fc:6e:0a:76:02:4f:9f:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0A:92:84:CE:B6:48:4B:2A:C9:DC:75:11:1E:F9:0D:26:7E:62:B4
            X509v3 Authority Key Identifier:
                keyid:0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/3137372e3132392e36342e302f32342d3234203d3e20323732373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:b4:0d:85:57:6c:c9:2c:ad:97:0c:58:2f:8f:d3:57:79:b3:
         92:26:da:05:b1:20:e3:47:c0:3f:55:e5:ce:92:08:07:e1:08:
         40:62:2f:33:7b:2c:f2:e4:af:41:b6:bc:92:f6:b9:cf:a4:6b:
         7c:dd:e8:da:61:5e:09:dd:03:17:47:a2:ee:a5:e4:d9:7c:b8:
         1c:82:e5:85:e3:86:a0:1f:0c:80:a5:73:6c:20:22:1e:95:06:
         7c:c4:8f:df:f0:d2:c3:3d:6e:e1:f7:05:0e:1d:e2:58:37:28:
         e3:4a:49:7c:47:15:41:f4:46:72:62:7f:e4:72:94:ef:63:95:
         d5:06:77:0e:ef:3f:a6:7a:9f:34:51:6f:8d:0e:f5:7a:32:b6:
         1a:56:b0:ca:96:9a:1b:fd:4d:7c:07:6b:92:48:35:92:d7:98:
         4b:6c:ed:29:68:5c:c6:ca:f5:fa:9e:02:5c:c2:ee:de:6b:32:
         c4:01:04:50:98:45:8c:c1:99:d0:ec:9e:35:cc:1c:59:13:a8:
         1c:86:fa:5a:63:6a:ef:9a:97:2e:6e:05:c0:59:52:53:bf:67:
         4d:97:84:ad:33:e0:55:74:4a:2f:ee:08:fc:39:4c:26:fa:ac:
         7a:2a:fd:84:d1:ac:13:c1:a2:8d:8e:bd:a9:51:72:90:36:e8:
         b4:56:59:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:58 2025 by rpki-client