Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e34382e302f32302d3332203d3e20323632353838.roa
File:                     3137372e37352e34382e302f32302d3332203d3e20323632353838.roa (raw, json)
Hash identifier:          g+BQjnshu/T89iCxLxgBpkKWO5lfsmAPBro5ZFYgeKs=
Subject key identifier:   0A:F3:67:12:D9:9B:EF:E1:06:5C:88:2C:E6:AC:0C:94:5A:E7:4C:4E
Certificate issuer:       /CN=947E29F37C387A9590C135AE83DBF68B102E9E57
Certificate serial:       594D09330242AC17085C5DD3D653D8FB2E4B6C68
Authority key identifier: 94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e34382e302f32302d3332203d3e20323632353838.roa
Signing time:             Tue 23 Sep 2025 21:28:33 +0000
ROA not before:           Tue 23 Sep 2025 21:23:33 +0000
ROA not after:            Tue 22 Sep 2026 21:28:33 +0000
asID:                     262588
IP address blocks:        177.75.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl
                          rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:15:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4d:09:33:02:42:ac:17:08:5c:5d:d3:d6:53:d8:fb:2e:4b:6c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947E29F37C387A9590C135AE83DBF68B102E9E57
        Validity
            Not Before: Sep 23 21:23:33 2025 GMT
            Not After : Sep 22 21:28:33 2026 GMT
        Subject: CN=0AF36712D99BEFE1065C882CE6AC0C945AE74C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4f:20:78:73:39:76:6b:9c:9a:08:b8:0a:ad:
                    58:f3:68:bf:fe:ae:6b:86:0e:2c:ae:66:d8:73:de:
                    08:2a:af:27:6c:4d:b5:00:0e:2a:40:66:bc:de:3c:
                    dc:7f:33:ea:30:03:1a:76:7c:95:8e:a3:45:54:5c:
                    83:53:76:b9:a6:58:fe:c6:37:38:76:95:c3:f4:27:
                    67:93:9c:e8:3c:87:1f:a0:51:a7:45:a1:21:04:aa:
                    e0:aa:67:0f:73:8e:d1:b5:f2:f5:81:3f:ea:e8:4a:
                    d6:a3:92:7f:22:70:56:4f:66:47:12:1f:f5:6c:94:
                    1f:4a:ca:c7:d3:a8:ba:57:d2:80:58:0a:cc:19:67:
                    6b:dc:a7:3f:7a:cc:9a:b8:ee:04:c0:c9:60:f1:1c:
                    76:35:cc:d1:8f:3c:22:2f:ab:66:09:fd:67:dc:87:
                    fd:28:8f:e6:5a:78:8f:ec:21:b8:b2:88:c3:20:3f:
                    a7:1f:42:44:39:9b:67:3a:36:67:10:ec:1b:6e:8e:
                    10:92:59:94:b7:2f:80:49:39:78:79:81:df:01:5b:
                    01:e3:2b:69:32:56:b6:44:58:79:03:a8:45:cc:8d:
                    7c:c4:f6:15:66:1b:21:ed:0c:cf:29:79:a7:53:78:
                    9c:b9:d9:14:5d:56:27:5b:c2:4a:bf:2f:ee:e9:0e:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F3:67:12:D9:9B:EF:E1:06:5C:88:2C:E6:AC:0C:94:5A:E7:4C:4E
            X509v3 Authority Key Identifier:
                keyid:94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e34382e302f32302d3332203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:02:cf:8b:ff:5c:03:f4:95:d5:06:54:d3:50:cb:18:8b:52:
         78:1f:f2:71:79:98:fe:2a:8d:22:6d:9e:fc:7b:e4:39:0c:2b:
         da:6d:c9:d3:a3:30:c5:b9:dc:05:d1:de:1a:0f:ad:cc:d8:83:
         44:a6:b8:6d:f2:fe:fe:c0:92:5c:e7:6b:31:f9:eb:04:3e:6f:
         b8:a9:5a:c7:ae:ec:ad:49:d0:80:f0:5a:19:2d:b3:fb:51:bd:
         df:c6:1e:fa:ed:1d:8f:73:0d:07:df:4d:55:1f:8a:1c:84:17:
         1a:d5:2c:cd:57:11:35:ce:ef:68:80:70:9c:2e:5e:9d:6f:ff:
         e3:14:2e:64:f7:88:e5:17:0c:96:10:31:99:16:57:7b:51:68:
         91:eb:e6:6b:a4:a5:3c:72:05:7b:34:23:b2:ce:56:4c:66:7b:
         a9:a9:96:f6:97:89:62:fb:be:1e:c0:37:dd:be:d8:0d:d0:58:
         cd:6d:cd:a2:4b:95:ea:56:c7:6c:bb:9d:aa:b2:f0:b9:0e:b5:
         71:80:e9:49:82:76:e5:25:67:f2:2b:7d:ec:c6:81:ef:55:53:
         84:71:ee:77:6d:22:15:6e:e3:f1:62:0a:e7:47:0a:49:5d:8a:
         c9:c6:cc:6f:03:82:06:e8:a7:18:40:98:72:06:b0:98:25:cf:
         02:c0:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:13 2025 by rpki-client