Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3137372e3133302e302e302f32302d3234203d3e203238323630.roa
File:                     3137372e3133302e302e302f32302d3234203d3e203238323630.roa (raw, json)
Hash identifier:          p0UevZOdii/KW2bPf0yYOW8ejVYVJ+FjzqZKGs3sPnQ=
Subject key identifier:   C3:B1:48:47:AB:C6:DB:FA:90:8A:46:68:31:EC:5E:4B:B6:97:A2:BE
Certificate issuer:       /CN=2A63119ED3171CA655D3DBACD89FA128C88760E9
Certificate serial:       4094BC54AEAC270242026FF581537705AEB8BAB3
Authority key identifier: 2A:63:11:9E:D3:17:1C:A6:55:D3:DB:AC:D8:9F:A1:28:C8:87:60:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3137372e3133302e302e302f32302d3234203d3e203238323630.roa
Signing time:             Wed 10 Sep 2025 18:48:46 +0000
ROA not before:           Wed 10 Sep 2025 18:43:46 +0000
ROA not after:            Wed 09 Sep 2026 18:48:46 +0000
asID:                     28260
IP address blocks:        177.130.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.crl
                          rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:94:bc:54:ae:ac:27:02:42:02:6f:f5:81:53:77:05:ae:b8:ba:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A63119ED3171CA655D3DBACD89FA128C88760E9
        Validity
            Not Before: Sep 10 18:43:46 2025 GMT
            Not After : Sep  9 18:48:46 2026 GMT
        Subject: CN=C3B14847ABC6DBFA908A466831EC5E4BB697A2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:9c:e8:65:34:06:eb:25:3a:58:f7:92:d6:
                    85:3d:8c:83:d8:92:a9:92:fb:80:10:c4:ae:bf:1e:
                    cc:14:7d:cd:45:66:95:b6:65:ca:11:8c:53:46:f4:
                    8a:23:0b:3b:48:1f:4b:4c:41:43:d6:94:59:32:96:
                    23:dc:0b:20:1e:28:8e:19:98:78:f4:d7:16:fd:33:
                    50:2b:28:cc:64:aa:61:2a:41:77:1d:82:7f:83:09:
                    ed:2c:e8:e5:34:c2:d4:eb:41:33:58:07:1d:6f:33:
                    ef:b6:9a:12:03:da:14:1d:c5:90:39:3d:50:ea:65:
                    79:20:da:6e:0e:05:0c:bb:9f:b9:fa:47:04:62:d4:
                    66:e3:5d:c3:37:17:a5:f6:9b:44:c8:1b:fc:3f:fa:
                    8c:96:9a:cf:5e:a9:6a:87:5a:b4:96:73:17:d5:6f:
                    2a:cb:e1:2e:99:b7:0d:c9:70:26:ed:dc:12:f0:ff:
                    dc:dd:4a:73:5d:33:9d:7a:13:6e:8d:66:f0:36:55:
                    ae:fe:81:e0:17:79:27:05:95:77:28:63:83:29:e6:
                    be:95:df:4f:46:02:2a:07:c6:7f:5c:2a:c3:85:73:
                    06:a6:7d:52:26:27:6a:27:12:6d:be:e9:76:c7:5e:
                    ee:98:2b:ce:02:76:a8:1c:0e:a9:e8:08:6f:e9:9e:
                    42:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B1:48:47:AB:C6:DB:FA:90:8A:46:68:31:EC:5E:4B:B6:97:A2:BE
            X509v3 Authority Key Identifier:
                keyid:2A:63:11:9E:D3:17:1C:A6:55:D3:DB:AC:D8:9F:A1:28:C8:87:60:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3137372e3133302e302e302f32302d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:54:8f:5d:84:b2:04:c9:0e:1f:87:50:01:4d:37:9f:14:48:
         d2:3b:b9:91:6b:0c:36:87:c3:17:a0:66:30:d8:ee:3e:1a:5b:
         e0:0b:ed:f2:4b:af:76:1a:4b:ff:f9:a5:f3:08:50:3e:ae:f6:
         4e:26:11:cf:28:38:06:28:b2:07:c7:e1:11:11:ab:cc:b8:06:
         cd:0b:4f:a5:d1:57:dc:f3:7b:fc:de:5b:b1:88:ba:0b:0f:a4:
         e4:e5:71:04:b9:c2:61:c1:f4:f9:6f:3d:15:39:13:72:e4:3c:
         26:10:bf:a7:d2:74:a8:6d:d9:1a:20:54:9f:ed:5f:a4:41:56:
         69:6c:f1:df:80:87:d5:fb:a6:b4:31:01:a4:65:7b:19:a0:40:
         e0:0f:d4:e9:e4:87:09:15:98:ca:d3:93:25:5f:90:29:db:74:
         fa:3a:d4:33:63:6a:3e:71:82:af:c1:70:b8:17:e4:10:bf:80:
         4d:44:23:12:fe:7e:b2:8a:d0:df:c0:dc:25:51:12:85:98:3d:
         98:58:a7:11:55:c5:15:c1:69:e6:c4:f2:34:fd:7b:8a:f7:e0:
         d1:70:4e:40:6f:78:3b:98:d0:67:63:18:e9:28:cd:17:8d:cf:
         61:d4:eb:88:17:33:15:e8:6d:92:f7:6b:85:87:91:06:8a:aa:
         71:8a:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:30 2025 by rpki-client