Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34342e302f32342d3234203d3e20323633353931.roa
File:                     3137372e31302e34342e302f32342d3234203d3e20323633353931.roa (raw, json)
Hash identifier:          TbkfXSRa0O9iAJz+59/ePZF2WlpDY7CeVcbA6ICCWTw=
Subject key identifier:   01:83:65:4C:7B:06:E9:0D:5A:20:24:E8:F2:DF:28:72:12:B7:07:B2
Certificate issuer:       /CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
Certificate serial:       15C8769AED44B9EF399B28A39DEADC8B33F1D0EB
Authority key identifier: 7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34342e302f32342d3234203d3e20323633353931.roa
Signing time:             Mon 22 Sep 2025 13:26:21 +0000
ROA not before:           Mon 22 Sep 2025 13:21:21 +0000
ROA not after:            Mon 21 Sep 2026 13:26:21 +0000
asID:                     263591
IP address blocks:        177.10.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl
                          rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c8:76:9a:ed:44:b9:ef:39:9b:28:a3:9d:ea:dc:8b:33:f1:d0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
        Validity
            Not Before: Sep 22 13:21:21 2025 GMT
            Not After : Sep 21 13:26:21 2026 GMT
        Subject: CN=0183654C7B06E90D5A2024E8F2DF287212B707B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:17:9a:bc:5f:4f:81:42:29:30:d0:29:e7:66:
                    cc:c9:d8:17:0f:51:62:ee:94:66:85:72:a4:c2:42:
                    6c:14:36:8b:77:d6:d9:0d:24:de:05:fd:33:07:c5:
                    1c:ae:7d:96:5f:b4:cb:07:54:c6:5d:cd:8b:47:3d:
                    bd:b8:50:2e:b8:cd:b3:fd:5a:e2:f8:fc:be:b0:d2:
                    da:dd:2f:6c:f5:30:2f:83:6a:31:7b:31:30:62:8a:
                    a1:c1:f1:0d:13:b7:a1:db:34:04:b8:c0:18:01:f0:
                    40:d6:56:81:07:28:d8:a4:0d:95:18:54:6e:23:48:
                    ce:7f:f6:f6:fc:87:ef:6f:a6:cc:61:81:62:bf:b1:
                    58:ff:f7:33:3e:e5:f6:df:69:7f:ec:87:66:96:08:
                    8d:94:68:e8:dc:2e:e5:92:3e:5f:2b:d2:74:3b:7c:
                    0c:b8:c1:82:5e:da:c6:97:08:20:cf:a7:33:e1:90:
                    b6:7f:44:2d:9c:4c:75:bb:45:f6:07:34:e7:a3:bb:
                    bb:45:b2:c8:af:a6:8c:ab:14:8f:ac:83:d5:7f:0f:
                    9d:03:80:94:7a:da:45:9c:71:fc:64:1c:ab:f1:7f:
                    4c:e1:26:c7:f4:1a:32:51:9b:e9:cf:fc:cb:16:e7:
                    44:1e:ef:ac:61:d6:61:5f:08:9c:4f:60:88:77:8a:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:83:65:4C:7B:06:E9:0D:5A:20:24:E8:F2:DF:28:72:12:B7:07:B2
            X509v3 Authority Key Identifier:
                keyid:7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34342e302f32342d3234203d3e20323633353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:3d:6f:44:fb:3e:33:2b:04:19:8f:85:b3:b1:2e:43:76:a3:
         24:01:4f:1f:2a:ec:46:ba:4f:f8:ae:04:4c:b3:96:4b:f9:75:
         02:91:1e:b0:46:81:13:32:fe:06:c3:06:58:99:d2:21:3b:54:
         07:36:c9:5f:f5:c1:5f:93:83:54:78:d1:ff:bc:aa:cd:9e:95:
         b1:f4:f0:ca:ad:69:5d:20:94:00:a6:bd:0d:35:21:f6:c3:c6:
         92:dc:2a:45:cc:f8:66:c7:b2:22:59:9f:55:4e:3c:44:f3:2f:
         35:15:3b:80:aa:62:ea:85:a3:3b:da:00:3f:c0:e3:56:cd:97:
         dd:0b:5d:ea:4b:f1:43:4c:1f:81:a6:67:9c:2c:30:e6:b1:47:
         1a:a2:26:4b:d8:d9:8d:f9:b3:9b:0c:43:e9:9d:ef:8b:1f:3f:
         aa:b0:d2:1c:23:12:ca:bf:7c:45:da:e5:bc:83:44:37:09:a0:
         7b:5a:82:43:af:4b:6d:fb:71:1e:c8:40:d4:5d:13:2d:b5:05:
         48:4f:cb:5b:31:13:5d:25:cc:db:06:cd:fb:e8:36:86:43:dd:
         1d:4b:23:52:ce:fb:62:b2:9f:5b:54:88:62:0b:a7:b7:9a:e9:
         b1:b5:d4:76:7e:24:d1:7a:d4:99:0d:b2:f3:6e:58:d6:4b:c6:
         c9:b4:19:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:14 2025 by rpki-client