Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32322d3332203d3e20323632363137.roa
File:                     3137372e38352e3233322e302f32322d3332203d3e20323632363137.roa (raw, json)
Hash identifier:          bLP7NrCXxlB1If+GY2Eg23UbokWjL/rJ4l9yG9CazPo=
Subject key identifier:   A0:17:06:34:B4:D6:1B:64:A5:A7:AC:94:68:58:C5:8F:D2:6A:51:E3
Certificate issuer:       /CN=700B164F16E24A0A809CC317627FE42A6C02FBB6
Certificate serial:       0EB1DBCACDF8FAFBF1C06BAC5BB4271B2D900B3D
Authority key identifier: 70:0B:16:4F:16:E2:4A:0A:80:9C:C3:17:62:7F:E4:2A:6C:02:FB:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700B164F16E24A0A809CC317627FE42A6C02FBB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32322d3332203d3e20323632363137.roa
Signing time:             Wed 24 Sep 2025 13:57:50 +0000
ROA not before:           Wed 24 Sep 2025 13:52:50 +0000
ROA not after:            Wed 23 Sep 2026 13:57:50 +0000
asID:                     262617
IP address blocks:        177.85.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/700B164F16E24A0A809CC317627FE42A6C02FBB6.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/700B164F16E24A0A809CC317627FE42A6C02FBB6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700B164F16E24A0A809CC317627FE42A6C02FBB6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b1:db:ca:cd:f8:fa:fb:f1:c0:6b:ac:5b:b4:27:1b:2d:90:0b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700B164F16E24A0A809CC317627FE42A6C02FBB6
        Validity
            Not Before: Sep 24 13:52:50 2025 GMT
            Not After : Sep 23 13:57:50 2026 GMT
        Subject: CN=A0170634B4D61B64A5A7AC946858C58FD26A51E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:51:0e:ba:b3:d8:11:aa:9b:79:3f:0d:4a:
                    16:92:23:7e:e9:18:ad:e4:24:f5:e1:6a:da:f1:46:
                    5e:30:3f:06:33:cc:42:20:58:04:f7:a3:77:a1:41:
                    b9:a7:94:e6:64:6e:53:4d:b3:71:80:93:26:ee:da:
                    ae:92:b3:eb:e8:03:c7:66:40:c2:af:5f:d7:39:a9:
                    ff:7e:aa:2b:39:77:cd:86:bf:12:70:da:52:fc:ba:
                    7e:d8:35:7a:b8:a8:6a:2a:5e:40:3f:7b:da:74:76:
                    a5:b4:ca:54:b1:ce:c3:57:41:46:cb:81:c2:54:c9:
                    cf:10:a8:3f:2c:00:d4:10:82:14:81:bc:5a:2d:7d:
                    9e:84:2b:48:20:d9:cb:ba:db:de:64:d8:31:65:c1:
                    7c:03:2c:23:9d:1d:46:e1:b5:88:e2:fb:ce:55:d6:
                    5a:2d:f9:3e:5f:29:19:02:5c:e8:20:6f:53:3b:09:
                    70:b6:99:02:3d:fe:4a:4c:cf:ea:8c:5b:31:74:0a:
                    64:d5:05:d2:e4:31:01:af:4c:d6:60:18:81:5f:46:
                    a1:d2:00:ab:18:62:68:c1:90:70:c8:78:5e:9b:1d:
                    97:fc:20:62:2d:62:91:0c:72:82:7c:02:b6:1f:60:
                    e2:d2:8a:40:4c:13:a9:98:a9:77:85:80:99:a4:cc:
                    c6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:17:06:34:B4:D6:1B:64:A5:A7:AC:94:68:58:C5:8F:D2:6A:51:E3
            X509v3 Authority Key Identifier:
                keyid:70:0B:16:4F:16:E2:4A:0A:80:9C:C3:17:62:7F:E4:2A:6C:02:FB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/700B164F16E24A0A809CC317627FE42A6C02FBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700B164F16E24A0A809CC317627FE42A6C02FBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3137372e38352e3233322e302f32322d3332203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:f1:d1:63:e2:b7:7d:7d:19:be:45:05:cc:41:81:ec:81:d8:
         e6:28:76:f6:1d:5d:83:a9:b9:00:bb:0a:e6:f8:42:98:a7:69:
         ed:72:3f:46:e0:7c:98:b2:fe:ba:4c:47:40:a3:31:3e:3b:aa:
         db:6b:81:49:0b:48:4b:d4:26:27:c3:a3:cc:d4:2f:de:fd:5a:
         e2:f1:a7:27:9a:59:af:a8:76:79:bc:6e:97:78:55:b2:16:c3:
         93:7d:f2:cb:b9:3e:34:c7:7b:60:f6:2c:30:02:9f:f9:7a:f2:
         f3:5f:af:4b:fd:d5:6e:66:22:5c:52:ad:80:df:f5:0b:68:a8:
         15:d1:ed:db:3e:4c:5b:e7:3a:e5:51:6c:6b:e8:54:cd:7d:e1:
         28:6b:db:a8:4d:3f:43:c3:3e:1e:14:64:40:8e:9b:62:51:f8:
         17:23:e0:9a:9f:fa:e5:54:db:1b:4f:77:bb:e2:12:40:41:ed:
         f6:b3:65:a2:7f:4c:88:01:3a:2a:78:98:f1:68:4f:da:68:34:
         d2:5b:04:cc:93:a0:60:0f:60:a9:92:a6:68:67:d5:85:64:cb:
         07:f5:7b:6b:29:ab:e7:f7:e2:f7:c2:81:40:7f:f1:1c:10:a7:
         d4:e9:ea:59:54:3b:00:62:48:b9:d1:65:ad:83:4b:7b:54:05:
         ee:a4:64:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:56:15 2025 by rpki-client