Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34382e302f32302d3234203d3e20323632393039.roa
File:                     3137372e33362e34382e302f32302d3234203d3e20323632393039.roa (raw, json)
Hash identifier:          Rk8Z+G4PHuMeM08bS8IepaAJ00xG50GAhSAtMt6r8mA=
Subject key identifier:   2F:F5:23:E7:0B:65:73:E7:BA:D5:BC:20:76:2D:09:DC:8B:F3:5E:56
Certificate issuer:       /CN=C92598511D78173796EE1B06996EA90E775D9542
Certificate serial:       53646B47FF30A75681E951D16964DA6E08D811A0
Authority key identifier: C9:25:98:51:1D:78:17:37:96:EE:1B:06:99:6E:A9:0E:77:5D:95:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92598511D78173796EE1B06996EA90E775D9542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34382e302f32302d3234203d3e20323632393039.roa
Signing time:             Tue 19 Aug 2025 17:04:19 +0000
ROA not before:           Tue 19 Aug 2025 16:59:19 +0000
ROA not after:            Tue 18 Aug 2026 17:04:19 +0000
asID:                     262909
IP address blocks:        177.36.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/C92598511D78173796EE1B06996EA90E775D9542.crl
                          rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/C92598511D78173796EE1B06996EA90E775D9542.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92598511D78173796EE1B06996EA90E775D9542.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 16:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:64:6b:47:ff:30:a7:56:81:e9:51:d1:69:64:da:6e:08:d8:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92598511D78173796EE1B06996EA90E775D9542
        Validity
            Not Before: Aug 19 16:59:19 2025 GMT
            Not After : Aug 18 17:04:19 2026 GMT
        Subject: CN=2FF523E70B6573E7BAD5BC20762D09DC8BF35E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:98:48:66:1d:53:66:ef:cb:04:6c:c9:26:
                    1c:e8:6e:16:a6:6f:a9:91:e1:04:5f:bf:be:7f:41:
                    e3:b2:33:e5:e0:8b:0a:cc:4b:75:f6:3e:a5:1b:db:
                    5f:72:62:6a:b1:0a:20:67:e3:a3:48:8f:55:0b:4f:
                    50:4f:b5:a8:a0:dd:b5:1f:74:45:c7:22:26:c1:ff:
                    b8:a6:e8:1b:7c:da:04:e5:92:e3:64:e5:42:7c:7c:
                    78:64:fa:d3:86:0b:94:a0:fb:84:12:34:28:78:44:
                    88:90:1d:75:78:73:10:5c:ea:8f:33:c2:fe:b6:da:
                    f5:4f:95:72:89:33:77:b9:de:0b:70:c8:68:49:53:
                    d3:bb:dd:4c:ec:12:e5:8a:72:17:bd:0f:c5:3b:5c:
                    39:cd:39:49:39:98:a9:55:38:5e:a6:3a:2b:37:2e:
                    3e:a3:a6:54:df:53:75:34:fe:56:4a:a7:92:3f:45:
                    15:3e:96:d8:d7:75:50:d9:65:6e:07:42:1e:38:4f:
                    17:c2:e4:51:9c:37:21:7e:f3:fe:09:e4:14:2d:cd:
                    e8:80:5f:72:2a:b7:50:1a:9e:1c:45:34:96:b9:f9:
                    65:4c:2b:6a:ee:ef:9e:77:56:88:5f:6c:a4:10:20:
                    ad:a5:f5:83:76:3a:2f:4b:db:99:8e:60:39:c9:85:
                    85:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F5:23:E7:0B:65:73:E7:BA:D5:BC:20:76:2D:09:DC:8B:F3:5E:56
            X509v3 Authority Key Identifier:
                keyid:C9:25:98:51:1D:78:17:37:96:EE:1B:06:99:6E:A9:0E:77:5D:95:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/C92598511D78173796EE1B06996EA90E775D9542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92598511D78173796EE1B06996EA90E775D9542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwYDMXVycREve6ur2qbmpQXfbAi5guCgnsqSrXsUUBws/0/3137372e33362e34382e302f32302d3234203d3e20323632393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:9d:6b:ef:c0:02:3c:7b:60:8d:eb:58:9b:1e:d5:2c:99:6c:
         05:d0:aa:13:bd:ff:3a:1a:6b:2a:74:2d:a8:1a:f1:f4:0d:2e:
         6f:68:ed:f8:07:54:1d:09:40:f2:a1:1e:60:2e:7f:83:66:5c:
         66:55:19:5f:fd:cf:c3:ea:a7:c8:c9:0e:0f:3c:a8:71:18:7e:
         1b:d1:87:16:84:7a:46:28:ad:1c:f2:93:c2:5b:2c:a5:2b:37:
         a6:5b:5b:ee:89:9e:f0:60:20:12:dd:39:6a:0d:c4:eb:f1:b4:
         db:88:af:4c:83:22:5e:0f:47:94:c1:c8:60:4d:ef:11:36:50:
         4a:5e:38:d2:10:d8:b8:0e:53:8b:40:cb:24:07:48:32:58:22:
         50:c0:6b:23:73:c7:23:fc:4b:72:57:4f:24:3f:3f:c2:ed:40:
         6b:b5:a0:66:53:92:84:83:6a:45:2e:cb:06:61:d7:68:08:30:
         93:b2:b3:60:0b:34:9d:dd:45:ef:72:94:2a:83:81:61:78:bc:
         9d:62:39:db:0a:1e:71:d5:dd:52:7c:e1:35:91:52:b9:c7:72:
         36:1a:ef:1c:4a:3f:81:1a:a0:a1:71:1c:37:c9:a2:0d:a1:d7:
         85:77:d9:1f:e5:e3:01:30:e7:44:82:86:78:b0:bf:3d:21:e9:
         fa:40:5f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:20:49 2025 by rpki-client