Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34362e302f32332d3233203d3e20323633353931.roa
File:                     3137372e31302e34362e302f32332d3233203d3e20323633353931.roa (raw, json)
Hash identifier:          lnPZ9bYfuogOc3bJkansHAZhF2nocgdeivHUdtbSK/A=
Subject key identifier:   ED:35:30:8C:A6:F8:46:63:14:12:9D:02:2B:E5:9A:18:AF:D4:8C:A3
Certificate issuer:       /CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
Certificate serial:       04B2E424C5EFB2C7D5C44E4D5CBE942340A969EF
Authority key identifier: 7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34362e302f32332d3233203d3e20323633353931.roa
Signing time:             Mon 22 Sep 2025 13:26:24 +0000
ROA not before:           Mon 22 Sep 2025 13:21:24 +0000
ROA not after:            Mon 21 Sep 2026 13:26:24 +0000
asID:                     263591
IP address blocks:        177.10.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl
                          rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b2:e4:24:c5:ef:b2:c7:d5:c4:4e:4d:5c:be:94:23:40:a9:69:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
        Validity
            Not Before: Sep 22 13:21:24 2025 GMT
            Not After : Sep 21 13:26:24 2026 GMT
        Subject: CN=ED35308CA6F8466314129D022BE59A18AFD48CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:68:19:50:b0:b4:34:54:75:81:3f:2e:fb:
                    61:8f:a0:43:27:51:69:86:1c:f3:7c:63:70:9a:a4:
                    3d:d3:65:b1:e6:f9:72:18:9d:7c:97:e8:91:2e:fc:
                    c1:9e:7a:ff:f6:dc:b2:ee:d7:39:1c:92:da:60:e2:
                    0d:b9:48:7c:d0:f6:61:62:28:12:42:f3:74:9c:14:
                    f9:96:37:20:d4:cb:7c:21:ed:15:c1:e2:8d:56:c2:
                    d9:c3:12:2c:45:ee:64:e8:35:25:0c:1f:39:1f:6e:
                    78:aa:a4:34:56:c7:5a:2b:db:7f:a0:e6:b4:e8:0a:
                    ba:b1:4e:5d:15:5b:09:9c:71:0b:75:27:65:cf:b2:
                    db:a8:2d:9a:db:0d:3c:00:48:ad:31:fa:dc:76:7b:
                    64:de:09:1f:6c:62:97:f1:c7:0c:23:8c:db:18:14:
                    c3:c0:07:ce:c1:38:f2:1b:4f:b1:25:14:42:7f:90:
                    a4:ba:b9:19:1b:05:05:1b:18:a7:14:55:5b:3f:6d:
                    eb:29:5b:cc:54:fd:dd:b2:3c:4d:d8:60:b3:32:67:
                    bf:8c:29:35:08:d7:77:53:7d:c7:55:2d:96:49:1b:
                    89:b6:eb:58:4a:d5:a4:70:74:90:03:2f:72:29:69:
                    d8:2f:76:f5:ca:e3:15:e5:5e:c4:f2:e2:71:5c:5b:
                    28:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:35:30:8C:A6:F8:46:63:14:12:9D:02:2B:E5:9A:18:AF:D4:8C:A3
            X509v3 Authority Key Identifier:
                keyid:7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/3137372e31302e34362e302f32332d3233203d3e20323633353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:6c:2c:f6:cd:cf:33:ce:8a:c2:62:bc:cf:a4:ed:cb:fa:35:
         27:7e:1e:e7:06:0f:8f:3a:10:a0:00:44:62:1d:49:4d:b9:2d:
         b9:28:c2:b6:dd:3b:65:35:98:3b:6a:e6:65:cb:18:5e:47:cf:
         2f:88:78:c7:e2:6d:c5:20:25:4e:03:9b:d1:54:41:17:06:95:
         08:91:49:82:6c:20:e2:cb:25:97:0c:27:9b:b4:80:f7:a8:0f:
         00:bf:aa:a9:ae:27:a1:e4:e1:24:cf:d0:c0:81:a8:77:e6:56:
         3d:b5:ca:a4:de:34:ce:89:5a:9f:34:40:81:b4:23:f7:6b:8b:
         ba:88:a8:ef:5c:8d:2f:12:8e:87:14:7b:e5:4e:e7:84:1b:eb:
         91:b6:fd:54:dd:fc:9a:d9:4d:cc:6d:c6:9d:b0:42:4d:28:f5:
         a7:14:6a:cc:03:2b:3f:a8:9e:84:74:24:86:40:5e:8c:af:24:
         ea:8f:4f:e9:38:a3:b0:fc:2d:1a:a9:2d:dc:10:ba:b8:7c:aa:
         cb:5b:cb:52:a4:d8:eb:f4:88:a7:6e:bb:09:13:48:8c:68:2f:
         15:c9:21:ee:3a:0b:e3:ba:55:3e:14:ba:15:1e:21:ef:8b:09:
         73:4a:75:1c:7a:ac:ec:94:ee:75:e1:80:91:65:c5:a4:05:f3:
         b8:28:0c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:16 2025 by rpki-client