Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/3137372e3130372e3131322e302f32302d3332203d3e203533303635.roa
File:                     3137372e3130372e3131322e302f32302d3332203d3e203533303635.roa (raw, json)
Hash identifier:          GY/U3kJuZcdFxP1k5IJVUuuBm0LT2kryYJAmlWYiRYA=
Subject key identifier:   DF:1C:FF:5D:00:83:62:DA:1D:4A:44:5A:86:7B:D2:A3:5F:4A:90:AD
Certificate issuer:       /CN=4C774192AB5886D743BDEAE813B49508256649E8
Certificate serial:       752D91CBE9122E9C3886C3A4E40B1AD05F8C4F34
Authority key identifier: 4C:77:41:92:AB:58:86:D7:43:BD:EA:E8:13:B4:95:08:25:66:49:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/3137372e3130372e3131322e302f32302d3332203d3e203533303635.roa
Signing time:             Wed 01 Oct 2025 20:25:34 +0000
ROA not before:           Wed 01 Oct 2025 20:20:34 +0000
ROA not after:            Wed 30 Sep 2026 20:25:34 +0000
asID:                     53065
IP address blocks:        177.107.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.crl
                          rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2d:91:cb:e9:12:2e:9c:38:86:c3:a4:e4:0b:1a:d0:5f:8c:4f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C774192AB5886D743BDEAE813B49508256649E8
        Validity
            Not Before: Oct  1 20:20:34 2025 GMT
            Not After : Sep 30 20:25:34 2026 GMT
        Subject: CN=DF1CFF5D008362DA1D4A445A867BD2A35F4A90AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:35:1f:2b:42:d6:8a:ac:e4:92:12:45:fe:7c:
                    94:83:51:0c:42:c3:e0:82:a9:a3:28:d3:1f:b9:3a:
                    aa:33:7f:78:db:53:fb:ed:fe:28:41:a0:33:36:9a:
                    fe:dc:37:4b:7b:fb:1e:7b:0c:bf:4e:e0:64:95:f1:
                    19:9b:2f:31:69:b5:8a:6e:75:69:ed:b3:46:88:3d:
                    80:90:e9:f8:d8:32:e5:d9:04:a8:3c:d8:e5:e1:a1:
                    cf:0e:ae:00:e9:02:24:6d:11:4d:33:8c:3c:71:e5:
                    d2:8b:9b:41:c4:63:80:61:23:73:1e:39:8a:d5:c2:
                    33:30:89:05:da:6e:da:3c:f1:c0:b5:d4:b1:2b:65:
                    ee:ff:6f:0d:1a:09:2d:79:2b:3c:74:6b:56:e2:66:
                    66:b3:ff:aa:d5:fa:12:ed:6e:1e:1e:01:3d:33:d9:
                    aa:24:67:83:7a:5b:b2:07:ea:b9:db:55:70:e9:e9:
                    9f:e0:16:20:e6:2f:c5:dc:5b:27:ff:44:f3:1a:70:
                    1f:63:95:b9:84:5b:34:b9:c5:a6:a6:96:d8:b3:30:
                    87:e4:8e:fa:d9:fc:db:d9:f7:d1:3c:3e:95:70:56:
                    cb:13:1a:d4:60:ef:5d:d1:5a:24:4c:f4:0d:45:0c:
                    67:66:d7:36:51:a8:48:c6:a0:dc:a4:0c:40:d8:d3:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1C:FF:5D:00:83:62:DA:1D:4A:44:5A:86:7B:D2:A3:5F:4A:90:AD
            X509v3 Authority Key Identifier:
                keyid:4C:77:41:92:AB:58:86:D7:43:BD:EA:E8:13:B4:95:08:25:66:49:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/4C774192AB5886D743BDEAE813B49508256649E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C774192AB5886D743BDEAE813B49508256649E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFyH9rQEqoJTdY2tXYW3NUXi1su3BuAnyggKMyajA7Uc/0/3137372e3130372e3131322e302f32302d3332203d3e203533303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:5f:bc:13:84:03:c1:19:80:13:1b:2c:ec:8c:ca:66:ee:fa:
         89:6b:80:62:e1:56:e7:31:d5:fd:92:78:6a:47:a0:82:8d:da:
         3e:c4:61:4f:8d:3c:16:de:e6:7a:a1:53:94:ee:16:a5:dc:80:
         d6:cf:4a:b0:aa:db:3a:e6:b8:3e:71:84:fb:74:69:c3:5c:c8:
         3a:82:2b:ac:6e:de:f2:36:62:12:57:32:d1:35:80:7d:57:de:
         95:71:53:45:2b:ea:db:6e:8a:9a:38:cb:54:04:ce:c1:97:dc:
         1e:b5:18:21:a2:cd:d3:49:99:9f:8a:1b:78:ce:90:8a:5c:8e:
         d9:d3:f8:e1:b5:ec:e4:e6:95:7d:76:ff:79:7e:da:76:d9:a3:
         37:27:0f:02:68:99:f6:a8:54:aa:1d:38:b8:98:a4:f3:40:bd:
         68:d5:ca:8e:a6:1f:6a:8c:7c:da:3e:61:99:9a:0f:c7:f2:00:
         c8:ed:fb:0c:da:cc:51:1f:a9:0e:ff:13:26:54:3b:2b:91:cb:
         af:37:cc:f3:46:0b:5c:31:5c:24:1b:89:41:47:96:fb:fe:e0:
         d6:32:ec:f9:b4:d4:d3:9a:e5:99:94:8c:ec:78:da:f2:5a:e5:
         f7:f8:91:b8:38:2b:55:9e:5c:bb:50:40:ae:94:88:82:24:de:
         e9:2f:80:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:51 2025 by rpki-client