Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133322e302f32322d3232203d3e20323730373832.roa
File:                     3137372e3133312e3133322e302f32322d3232203d3e20323730373832.roa (raw, json)
Hash identifier:          WqSGx384wlTq8xa0rvJTJxJcQrsSIEVTPmT0ulFLur8=
Subject key identifier:   07:37:69:FB:3B:3C:4A:C3:9D:5D:7D:3D:60:92:6D:04:B3:AA:AA:58
Certificate issuer:       /CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
Certificate serial:       2AB7D72747BB93D5C7329985344BFD39D81F6746
Authority key identifier: B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133322e302f32322d3232203d3e20323730373832.roa
Signing time:             Tue 26 Aug 2025 18:09:29 +0000
ROA not before:           Tue 26 Aug 2025 18:04:29 +0000
ROA not after:            Tue 25 Aug 2026 18:09:29 +0000
asID:                     270782
IP address blocks:        177.131.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl
                          rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b7:d7:27:47:bb:93:d5:c7:32:99:85:34:4b:fd:39:d8:1f:67:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
        Validity
            Not Before: Aug 26 18:04:29 2025 GMT
            Not After : Aug 25 18:09:29 2026 GMT
        Subject: CN=073769FB3B3C4AC39D5D7D3D60926D04B3AAAA58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:aa:12:a2:ba:74:57:4e:a7:5f:a6:74:8a:
                    65:79:5d:ef:9a:54:ab:91:b3:ce:bf:62:4b:c2:92:
                    1c:25:82:3e:79:48:fc:ab:c4:ac:1b:48:5e:a7:02:
                    10:72:11:89:0d:c7:2a:bb:4d:34:8d:c3:31:91:bf:
                    ff:52:4f:4c:32:b3:68:4a:33:fe:40:bf:86:d5:18:
                    55:cf:86:81:39:29:e0:f5:ca:82:8c:93:5c:65:75:
                    2d:8e:e4:79:aa:46:7d:7d:d5:b9:38:40:7d:ba:a3:
                    73:2d:a3:1f:6e:02:b3:9a:ec:8a:3d:0a:78:b3:df:
                    6d:07:47:64:06:6c:8f:ab:fa:6c:5a:f0:c1:e4:0f:
                    33:64:15:49:c1:1e:43:fb:99:6b:18:68:c9:90:a2:
                    cc:5b:1a:28:1c:03:7b:7e:38:cf:b5:56:f8:00:8b:
                    6b:d8:a5:22:bc:6d:16:af:57:ee:07:8f:f9:56:bd:
                    35:67:66:6e:11:e4:ce:de:d6:58:76:bf:91:15:63:
                    34:d0:99:8d:1f:03:0d:be:f3:4a:dc:a8:62:1c:a8:
                    41:f0:d8:7e:2d:ed:2d:1a:48:1f:62:bb:71:83:b2:
                    90:b2:d8:f5:3e:36:de:c4:04:2c:88:3b:b2:db:78:
                    ed:19:68:51:71:0a:32:e1:9c:d5:38:1e:08:1e:da:
                    e9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:37:69:FB:3B:3C:4A:C3:9D:5D:7D:3D:60:92:6D:04:B3:AA:AA:58
            X509v3 Authority Key Identifier:
                keyid:B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133322e302f32322d3232203d3e20323730373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:66:e5:2a:1c:59:07:5f:fc:bd:e9:af:54:ed:ac:1c:6b:
         f5:27:42:31:78:ef:12:fb:e5:a1:69:46:b4:f9:48:3d:ea:41:
         2b:a9:5e:d9:55:e0:9d:a8:c9:73:94:4e:7b:1c:7b:55:27:f7:
         3b:e6:02:10:05:46:59:23:e6:58:d5:9c:cf:b6:80:be:5d:17:
         4d:60:93:38:ae:3c:6d:93:90:62:14:71:ce:6c:a9:73:04:b2:
         86:ee:6c:23:f0:69:8d:96:c1:39:ab:3f:ce:8c:8c:91:61:4a:
         48:f3:3e:c8:5e:2a:d9:66:92:51:67:cd:eb:f0:32:89:a5:77:
         9e:5f:08:5d:fb:0b:43:12:c8:82:2c:d9:29:87:39:64:ad:c1:
         81:b4:0b:4d:7f:4d:e3:1a:fd:36:ee:a4:28:be:74:9d:45:8a:
         75:13:4f:08:58:b1:3b:df:68:f4:08:95:d3:a7:2a:9a:59:1c:
         f6:2b:0b:af:51:47:32:c1:20:50:04:db:76:b4:66:76:b2:a7:
         13:0e:55:02:c8:71:04:33:4e:97:4d:e5:9b:51:70:d6:85:d9:
         01:51:0f:ec:ad:58:91:1e:3f:79:2e:d4:06:9e:82:91:f6:e3:
         c6:15:7c:b9:79:ad:da:b0:4c:40:7c:ea:1a:e2:d2:97:4b:4e:
         13:83:91:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:47:16 2025 by rpki-client