Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34342e302f32322d3232203d3e20323633353931.roa
File:                     3137372e31302e34342e302f32322d3232203d3e20323633353931.roa (raw, json)
Hash identifier:          cTZG4R5SkrofhhLq7GSPVCj2rx/zeTtzM/RuxXx3Qr4=
Subject key identifier:   65:2F:B2:99:1D:6E:DA:49:66:06:7B:C5:9B:91:0F:1D:41:71:3A:93
Certificate issuer:       /CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
Certificate serial:       526C6CB0A90016D641EA2EC9B42E6B3805F2DFEC
Authority key identifier: 7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34342e302f32322d3232203d3e20323633353931.roa
Signing time:             Mon 22 Sep 2025 13:26:20 +0000
ROA not before:           Mon 22 Sep 2025 13:21:20 +0000
ROA not after:            Mon 21 Sep 2026 13:26:20 +0000
asID:                     263591
IP address blocks:        177.10.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl
                          rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6c:6c:b0:a9:00:16:d6:41:ea:2e:c9:b4:2e:6b:38:05:f2:df:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
        Validity
            Not Before: Sep 22 13:21:20 2025 GMT
            Not After : Sep 21 13:26:20 2026 GMT
        Subject: CN=652FB2991D6EDA4966067BC59B910F1D41713A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:33:d0:81:47:d4:27:ad:35:70:0b:d9:66:fc:
                    f2:ae:6a:ee:bc:af:f9:56:af:6e:1d:a7:f4:c6:ae:
                    fb:b6:94:06:b4:7e:b2:f0:90:d1:b8:e7:e7:b4:3c:
                    3e:1c:f5:16:19:2f:24:b4:f8:d3:e1:34:90:05:18:
                    98:bb:65:6e:d7:71:82:24:e8:3d:9b:66:11:b5:1f:
                    66:0b:e3:e8:50:23:b4:64:e5:5a:e1:a5:ed:24:46:
                    8b:a4:c1:bd:54:9c:58:a6:5d:de:f3:98:12:06:6b:
                    dd:01:38:5e:6e:65:f9:9b:3f:ce:fc:17:aa:06:5f:
                    d7:91:dc:f9:33:96:24:69:a3:dc:ab:c7:30:e2:62:
                    56:39:a5:cc:5a:d4:e9:9f:cd:5d:da:b4:dc:7e:5b:
                    5e:7b:11:3e:7d:85:9e:52:0f:a2:c0:55:22:18:ae:
                    3a:68:1f:6e:ab:c4:d7:2e:51:88:38:23:0f:06:46:
                    eb:c3:ee:2e:75:2b:ca:a9:0c:eb:a8:de:60:46:b6:
                    be:63:a2:90:da:77:00:55:19:1d:6d:57:1e:29:98:
                    49:ae:ef:7c:5b:e3:db:2d:67:e7:02:19:f6:d2:52:
                    f1:03:72:ed:ef:e9:43:9c:c5:e4:99:65:81:88:1f:
                    10:6b:94:0c:e4:51:a4:44:89:c1:d1:67:e4:28:98:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2F:B2:99:1D:6E:DA:49:66:06:7B:C5:9B:91:0F:1D:41:71:3A:93
            X509v3 Authority Key Identifier:
                keyid:7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34342e302f32322d3232203d3e20323633353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:cf:8b:04:f9:dc:60:aa:0a:32:3a:22:d8:71:cc:d2:2a:f0:
         3f:a3:63:6d:8b:33:05:7e:4f:95:03:dc:a5:54:1f:8f:cb:d6:
         d0:56:2a:64:0c:1c:06:6e:eb:b0:0a:38:33:81:a7:2e:68:4c:
         5c:ee:b6:02:51:3c:34:80:ec:a8:c5:10:8a:ae:3d:eb:f7:62:
         6a:c0:ab:30:60:51:83:07:07:f3:52:ff:ae:d9:68:46:74:b4:
         8d:8d:10:88:27:e0:e7:1e:5d:3c:76:c3:14:73:dc:c1:60:24:
         67:a8:f5:61:49:57:e7:0e:da:8d:df:b6:39:0d:52:fb:24:87:
         54:71:35:f4:c4:a3:3c:39:85:fe:ed:6c:f5:4a:bd:86:77:81:
         c7:8a:99:6d:f5:9d:1e:49:0b:b2:ba:de:7b:59:fd:73:5b:13:
         9a:ec:2c:35:a8:aa:3a:94:8a:fe:c0:b5:89:12:5d:60:0c:a6:
         cc:12:07:a6:ee:83:d3:62:0e:82:95:c0:c1:a2:8a:11:44:c8:
         4e:9e:24:d5:a8:30:4e:44:b9:48:40:e3:bd:1d:fb:a0:f2:2f:
         2c:10:da:21:cf:69:7e:2d:04:b3:95:21:0b:a5:af:b8:2e:85:
         db:51:cb:94:9f:a8:15:25:29:e9:f2:1e:e6:17:1b:fa:c6:18:
         5f:ee:a8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:16 2025 by rpki-client