Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133332e302f32342d3234203d3e20323730373832.roa
File:                     3137372e3133312e3133332e302f32342d3234203d3e20323730373832.roa (raw, json)
Hash identifier:          2DJEjNIa5j5mGmHKAliSU8/d5MzSI3E3gBgkL/2hXhU=
Subject key identifier:   DE:DA:54:39:53:D0:A9:53:D3:D2:FA:1E:EF:BB:A5:CA:76:1B:05:4B
Certificate issuer:       /CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
Certificate serial:       30064184A25E4177F3EF8F435EF162CABD0F2093
Authority key identifier: B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133332e302f32342d3234203d3e20323730373832.roa
Signing time:             Tue 26 Aug 2025 18:09:29 +0000
ROA not before:           Tue 26 Aug 2025 18:04:29 +0000
ROA not after:            Tue 25 Aug 2026 18:09:29 +0000
asID:                     270782
IP address blocks:        177.131.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl
                          rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:06:41:84:a2:5e:41:77:f3:ef:8f:43:5e:f1:62:ca:bd:0f:20:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
        Validity
            Not Before: Aug 26 18:04:29 2025 GMT
            Not After : Aug 25 18:09:29 2026 GMT
        Subject: CN=DEDA543953D0A953D3D2FA1EEFBBA5CA761B054B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c5:aa:5b:e6:33:c2:d1:2c:bb:40:64:0d:7c:
                    20:a6:ce:b2:f3:50:8c:3f:ce:1a:33:4c:07:ec:5c:
                    d5:9c:01:2e:9b:2b:85:c9:1c:38:d6:30:35:7b:38:
                    48:ed:86:39:0a:a9:85:14:19:51:b0:09:94:73:96:
                    86:31:33:20:68:b5:96:cf:72:b2:d0:d0:b2:3f:7e:
                    c1:31:9f:98:e1:57:25:93:8b:0c:e5:23:38:f6:4e:
                    e1:2a:f9:58:8f:1f:52:07:4c:1a:25:ae:f5:a0:03:
                    4c:5f:6d:61:93:5e:08:d6:eb:c2:18:50:00:b3:6d:
                    6a:4b:ed:67:be:7c:06:a7:e9:ec:81:c9:d3:f3:3b:
                    9c:b7:6d:54:a4:54:52:43:3d:dd:88:b8:ee:a5:b4:
                    e3:68:e7:f5:f9:a0:9d:4b:30:f1:e8:df:05:95:89:
                    30:81:13:f2:46:5c:25:f1:4d:c2:2c:e8:d5:d5:27:
                    f8:22:e1:69:2b:0e:2d:94:d6:91:f3:1f:35:05:5b:
                    78:33:64:d0:ef:d1:f2:c3:9e:22:5d:9c:2e:4a:e6:
                    e3:8a:2f:a1:2e:47:40:8a:d4:00:d9:b3:2b:9a:bd:
                    3f:7b:a7:5e:1f:50:8f:6e:d5:01:b6:d0:7c:d0:05:
                    cb:2d:8c:48:3e:44:71:a7:30:7c:b8:49:7b:a5:8c:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DA:54:39:53:D0:A9:53:D3:D2:FA:1E:EF:BB:A5:CA:76:1B:05:4B
            X509v3 Authority Key Identifier:
                keyid:B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133332e302f32342d3234203d3e20323730373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:f0:2a:67:8b:db:bd:6a:b8:8a:52:4b:26:e3:b4:12:99:e9:
         68:72:89:af:5c:d3:b8:69:8a:db:da:c2:78:02:04:ce:62:4a:
         78:24:36:38:ab:bc:8a:3b:aa:5d:dc:bb:71:ad:3a:77:1a:9c:
         5a:a3:5a:e0:00:10:9f:03:7d:59:03:05:46:d5:07:21:32:6a:
         c9:32:33:38:ac:0e:0e:eb:6b:11:2d:fd:e5:1f:e4:49:a2:e6:
         46:d4:52:35:ed:cf:29:a3:19:31:f6:d4:b8:fc:5b:cc:d1:ed:
         19:89:ea:d0:35:7c:5b:e8:a5:f1:cd:f8:de:14:e3:20:22:66:
         0e:00:89:1a:b1:ed:db:ff:9b:84:54:b5:cc:8d:d7:98:b4:b4:
         36:e5:80:c6:1d:15:60:2d:81:7b:ac:00:31:dc:91:0e:2a:ae:
         2d:e4:de:aa:96:90:26:4c:61:12:95:31:39:41:47:df:de:f6:
         57:8f:72:65:48:41:6c:35:ed:13:ee:6e:3e:4c:cf:23:c3:bc:
         68:ed:a9:ef:fe:91:2f:0f:c5:4c:b4:7c:98:7d:72:56:55:a4:
         f6:a8:d0:4b:cb:9f:80:ee:cf:51:d6:ab:59:92:8b:fb:20:a6:
         6f:67:1e:ee:7c:78:82:a5:f7:3d:e9:a9:36:78:4b:e8:4d:bf:
         9b:ba:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:46:32 2025 by rpki-client