Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34342e302f32332d3233203d3e20323633353931.roa
File:                     3137372e31302e34342e302f32332d3233203d3e20323633353931.roa (raw, json)
Hash identifier:          5ci2l0Xf55mB6PjSQDeuYsf4WUIDzWxdEJrwSY2Ij8E=
Subject key identifier:   2A:AD:C0:57:AF:83:73:DB:52:DE:12:49:5F:13:26:58:4A:A0:A6:C4
Certificate issuer:       /CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
Certificate serial:       7C695B6F89DF45C9F7863BE4E570534B02452CE5
Authority key identifier: 7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34342e302f32332d3233203d3e20323633353931.roa
Signing time:             Mon 22 Sep 2025 13:26:23 +0000
ROA not before:           Mon 22 Sep 2025 13:21:23 +0000
ROA not after:            Mon 21 Sep 2026 13:26:23 +0000
asID:                     263591
IP address blocks:        177.10.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl
                          rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:69:5b:6f:89:df:45:c9:f7:86:3b:e4:e5:70:53:4b:02:45:2c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
        Validity
            Not Before: Sep 22 13:21:23 2025 GMT
            Not After : Sep 21 13:26:23 2026 GMT
        Subject: CN=2AADC057AF8373DB52DE12495F1326584AA0A6C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:1d:39:ed:2c:fb:0a:45:38:47:ad:b4:61:
                    23:bf:1e:48:ac:98:47:54:a5:4e:f4:84:a8:99:1d:
                    bb:1b:4a:06:64:8f:a4:c2:c6:2f:8e:27:9d:59:61:
                    d7:ea:89:71:d6:a4:d9:fe:97:03:61:9e:22:06:0b:
                    4c:b9:2c:5d:da:bb:f5:97:0e:3d:d9:d0:a0:6e:fd:
                    68:1e:d6:79:1a:32:b2:b9:f3:06:0c:71:4b:5a:87:
                    15:1e:de:c9:1c:fe:e8:31:de:58:aa:bd:40:89:4f:
                    32:cc:23:56:28:cc:2f:01:bc:70:f1:bb:fc:09:c5:
                    b1:4f:18:f4:c8:0a:59:45:8f:9b:e1:4c:8b:ac:0c:
                    80:79:4f:0e:96:85:48:93:c4:da:21:be:6d:3b:e8:
                    22:ec:ee:d7:8f:f4:03:af:d6:09:e4:49:a7:b1:29:
                    48:6a:be:99:c1:8b:f3:0c:56:a1:f3:72:f5:f5:33:
                    a6:34:a6:f0:ae:d6:11:9c:d4:3d:60:22:52:58:21:
                    90:e5:cd:ad:6f:a1:d2:9a:72:f3:b8:da:4d:96:b2:
                    eb:94:e5:bd:ce:3c:5b:22:22:4e:bb:5c:49:2c:b0:
                    aa:9c:5c:1c:40:23:68:03:8d:85:2f:ba:80:a9:56:
                    2a:b5:66:63:be:24:81:01:95:db:d5:ab:17:f5:22:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AD:C0:57:AF:83:73:DB:52:DE:12:49:5F:13:26:58:4A:A0:A6:C4
            X509v3 Authority Key Identifier:
                keyid:7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34342e302f32332d3233203d3e20323633353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:2d:fb:4f:ed:91:7d:de:db:83:8f:9f:8a:ec:6e:76:66:d8:
         dd:b7:95:10:54:7a:a7:08:15:47:47:cc:2b:73:ee:27:e5:92:
         80:31:a2:d7:09:1c:83:30:ef:66:8f:e3:64:d2:4a:05:05:85:
         79:0b:f4:bc:80:dd:fd:a3:97:c0:16:2e:2c:74:be:28:f9:79:
         55:0a:54:33:21:71:f0:e7:4f:fe:18:27:38:b5:ed:47:12:a8:
         41:5a:bc:8f:e7:57:3f:b6:35:5b:3f:10:6c:ba:58:f9:d3:c3:
         c4:51:c5:1f:ea:15:9a:04:4b:7c:2f:eb:de:f1:9d:9e:7d:cd:
         e4:51:6a:ac:fb:1e:5c:17:29:cc:77:26:8d:cd:59:d9:28:e7:
         50:50:03:aa:b1:ad:f2:c1:b8:28:e9:c9:ee:a3:d9:0c:52:a9:
         2f:d3:56:e6:f3:6e:23:7f:3c:b1:10:bc:68:ed:ef:e8:50:32:
         80:31:50:e8:59:01:4b:8c:74:70:62:a6:69:79:93:04:c7:73:
         1e:87:f2:57:fd:73:49:d9:be:d8:c4:8d:46:62:72:c7:d1:12:
         e2:6f:c1:79:11:22:c6:92:a6:fb:b3:dc:1c:26:0a:e3:e7:bb:
         35:32:75:59:8c:dc:de:b4:8f:fd:4d:af:92:0f:9c:ae:76:01:
         25:b4:39:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:15 2025 by rpki-client