Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/3137372e35342e39302e302f32332d3234203d3e20323634303130.roa
File:                     3137372e35342e39302e302f32332d3234203d3e20323634303130.roa (raw, json)
Hash identifier:          2kGiE9OyZ5C7G66G1DqVsyE6WMOW7YNJkTCoOhw3slg=
Subject key identifier:   DD:A9:8C:16:C1:61:21:7B:F3:D3:7E:2B:A1:33:36:A5:29:AE:95:FE
Certificate issuer:       /CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87
Certificate serial:       4173B6AE2558299804739B6EBE29B44E6E7DBE7D
Authority key identifier: 37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/3137372e35342e39302e302f32332d3234203d3e20323634303130.roa
Signing time:             Sat 06 Sep 2025 15:03:07 +0000
ROA not before:           Sat 06 Sep 2025 14:58:07 +0000
ROA not after:            Sat 05 Sep 2026 15:03:07 +0000
asID:                     264010
IP address blocks:        177.54.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl
                          rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:73:b6:ae:25:58:29:98:04:73:9b:6e:be:29:b4:4e:6e:7d:be:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87
        Validity
            Not Before: Sep  6 14:58:07 2025 GMT
            Not After : Sep  5 15:03:07 2026 GMT
        Subject: CN=DDA98C16C161217BF3D37E2BA13336A529AE95FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:d0:1a:95:07:6c:82:0b:d1:b7:67:54:e0:
                    20:6f:e5:de:d4:f8:98:14:ca:de:83:08:67:82:34:
                    7e:12:5e:7f:2f:f1:d1:df:d3:d9:6a:99:52:6c:9b:
                    59:4e:0f:e2:dd:4b:96:82:26:5e:99:c2:3a:cb:f3:
                    47:f7:29:62:a0:9d:8d:3c:f6:28:2f:0b:39:cd:fd:
                    ea:a2:3d:9e:54:c2:03:e5:21:f4:22:5b:39:2f:42:
                    55:64:1c:e0:60:13:bc:d2:24:3c:8b:55:9a:54:a2:
                    6e:2f:a7:69:6f:a0:82:c8:5b:93:08:cd:72:00:5e:
                    50:31:2a:89:04:92:66:93:54:6b:ca:8f:3a:19:cb:
                    82:a3:a9:e8:28:98:b6:b8:33:01:dd:c5:73:de:b4:
                    85:1b:1f:17:46:3c:bd:44:8c:c0:ee:97:a9:cd:59:
                    b1:a5:f9:e0:59:54:09:0a:b6:bc:72:33:6b:1c:22:
                    a9:cf:51:b6:07:a5:0f:aa:56:33:6e:60:56:66:24:
                    f9:f1:a7:9b:fc:eb:b1:76:1c:1c:f1:c4:7f:bb:5d:
                    5e:0f:57:7b:29:9c:98:11:07:2e:5b:07:9b:95:a3:
                    07:1d:66:65:fd:f9:0d:af:a4:fa:e7:d1:7c:10:ec:
                    f1:76:15:57:60:c2:71:66:e6:04:6f:56:78:cc:29:
                    9f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A9:8C:16:C1:61:21:7B:F3:D3:7E:2B:A1:33:36:A5:29:AE:95:FE
            X509v3 Authority Key Identifier:
                keyid:37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/3137372e35342e39302e302f32332d3234203d3e20323634303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:10:82:8f:08:ef:85:d3:4a:b7:cd:cd:d8:85:65:09:0a:a1:
         e3:bb:59:87:7c:af:93:c5:3d:09:1e:8b:59:51:20:14:7b:09:
         01:0c:ec:23:5f:94:ad:e2:ee:df:7c:69:9f:d0:f1:1c:67:7f:
         85:ad:bd:a8:be:82:b9:fa:5a:e0:6b:3c:c3:28:00:4d:75:ad:
         ce:1e:2f:1b:c3:4a:16:6a:5c:02:49:48:22:c1:2a:fe:7b:bc:
         de:3a:69:89:1e:85:cd:1f:16:73:60:76:d5:73:fd:e8:95:aa:
         4e:77:54:6a:5b:90:0a:ed:35:8f:09:1e:3d:23:02:d7:ed:6f:
         1b:3f:62:e3:3b:66:76:ed:07:c8:5b:58:2c:c8:fd:df:31:ec:
         c0:2f:8f:c6:01:48:98:13:c3:7b:d3:4b:a2:02:64:ad:6d:02:
         4b:8f:80:46:02:73:8e:89:1f:e1:8d:6b:b1:4c:c6:62:fe:e3:
         96:3b:ac:c3:c4:93:87:8d:05:6a:66:4a:35:e4:09:5e:fd:62:
         8f:d1:a9:00:f8:d5:4f:75:dd:dd:9f:93:57:84:aa:12:a1:e6:
         08:2b:4a:fa:a4:41:b3:f6:99:9c:64:34:2b:9a:a6:ee:d6:0e:
         0d:87:63:b7:24:35:92:b9:d1:6a:31:4b:98:e8:3e:8a:f2:b0:
         5a:42:57:63
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQXO2riVYKZgEc5tuvim0Tm59vn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdFQzY2RTZENTE1M0UzMzVDNEExMUI1MUM3REZCNDgx
RTkxQ0I4NzAeFw0yNTA5MDYxNDU4MDdaFw0yNjA5MDUxNTAzMDdaMDMxMTAvBgNV
BAMTKEREQTk4QzE2QzE2MTIxN0JGM0QzN0UyQkExMzMzNkE1MjlBRTk1RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbitAalQdsggvRt2dU4CBv5d7U
+JgUyt6DCGeCNH4SXn8v8dHf09lqmVJsm1lOD+LdS5aCJl6ZwjrL80f3KWKgnY08
9igvCznN/eqiPZ5UwgPlIfQiWzkvQlVkHOBgE7zSJDyLVZpUom4vp2lvoILIW5MI
zXIAXlAxKokEkmaTVGvKjzoZy4KjqegomLa4MwHdxXPetIUbHxdGPL1EjMDul6nN
WbGl+eBZVAkKtrxyM2scIqnPUbYHpQ+qVjNuYFZmJPnxp5v867F2HBzxxH+7XV4P
V3spnJgRBy5bB5uVowcdZmX9+Q2vpPrn0XwQ7PF2FVdgwnFm5gRvVnjMKZ/bAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3amMFsFhIXvz034roTM2pSmulf4wHwYDVR0j
BBgwFoAUN+xm5tUVPjNcShG1HH37SB6Ry4cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHd3MUNmRmFGeWRYdjNlMzdBaEVWSEYxRXpjTDlXNjJnTWIxUmp0ZXBj
Mk0vMS8zN0VDNjZFNkQ1MTUzRTMzNUM0QTExQjUxQzdERkI0ODFFOTFDQjg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3RUM2NkU2RDUxNTNFMzM1
QzRBMTFCNTFDN0RGQjQ4MUU5MUNCODcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R3dzFDZkZhRnlkWHYzZTM3QWhFVkhGMUV6Y0w5VzYyZ01iMVJqdGVwYzJNLzEv
MzEzNzM3MmUzNTM0MmUzOTMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM0
MzAzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsTZaMA0GCSqGSIb3DQEBCwUAA4IBAQDTEIKPCO+F
00q3zc3YhWUJCqHju1mHfK+TxT0JHotZUSAUewkBDOwjX5St4u7ffGmf0PEcZ3+F
rb2ovoK5+lrgazzDKABNda3OHi8bw0oWalwCSUgiwSr+e7zeOmmJHoXNHxZzYHbV
c/3olapOd1RqW5AK7TWPCR49IwLX7W8bP2LjO2Z27QfIW1gsyP3fMezAL4/GAUiY
E8N700uiAmStbQJLj4BGAnOOiR/hjWuxTMZi/uOWO6zDxJOHjQVqZko15Ale/WKP
0akA+NVPdd3dn5NXhKoSoeYIK0r6pEGz9pmcZDQrmqbu1g4Nh2O3JDWSudFqMUuY
6D6K8rBaQldj
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:49 2025 by rpki-client