Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133362e302f32322d3232203d3e20323730393137.roa
File:                     3137372e3230302e3133362e302f32322d3232203d3e20323730393137.roa (raw, json)
Hash identifier:          mVqqG3xMPk6fuUYAfJxVYl5VfU0znHEFwFPWN59H1jk=
Subject key identifier:   F9:FC:DE:8D:B6:51:E0:75:32:0B:7F:A9:C9:FC:07:72:87:C4:C2:98
Certificate issuer:       /CN=F5A50CCC294040F07C9C735FE2A2A8031034D7F3
Certificate serial:       6DC37B4F2BC54681E970ACD58F0AD0144AA46CDF
Authority key identifier: F5:A5:0C:CC:29:40:40:F0:7C:9C:73:5F:E2:A2:A8:03:10:34:D7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133362e302f32322d3232203d3e20323730393137.roa
Signing time:             Tue 07 Oct 2025 15:05:39 +0000
ROA not before:           Tue 07 Oct 2025 15:00:39 +0000
ROA not after:            Tue 06 Oct 2026 15:05:39 +0000
asID:                     270917
IP address blocks:        177.200.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.crl
                          rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c3:7b:4f:2b:c5:46:81:e9:70:ac:d5:8f:0a:d0:14:4a:a4:6c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A50CCC294040F07C9C735FE2A2A8031034D7F3
        Validity
            Not Before: Oct  7 15:00:39 2025 GMT
            Not After : Oct  6 15:05:39 2026 GMT
        Subject: CN=F9FCDE8DB651E075320B7FA9C9FC077287C4C298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:84:e1:d1:f9:d3:0d:fa:20:6a:31:81:76:
                    3d:da:c2:ed:88:c7:cc:ff:08:54:be:ba:4f:b0:6b:
                    4f:87:d6:76:ae:25:8b:6f:df:df:08:56:83:ee:81:
                    e0:e8:e0:c6:88:3d:66:73:eb:5b:d6:ec:08:89:31:
                    98:52:ff:31:a6:2c:3f:81:20:30:e1:ec:8b:b2:ed:
                    37:a7:7c:66:b7:b3:e1:28:32:44:c3:12:36:8c:e4:
                    55:bc:8f:83:b3:1a:73:24:4d:bc:e1:54:b8:62:ac:
                    75:5b:65:08:b2:a9:0e:af:f0:a8:6f:f5:16:05:e7:
                    5f:60:d7:a0:14:64:b9:92:37:a1:d9:ac:f7:08:81:
                    75:7e:5a:e9:45:da:e1:d4:f8:d4:b3:a8:2c:f9:79:
                    1b:83:f1:4e:63:ea:ae:b8:8b:34:31:5f:71:c1:4e:
                    e5:77:83:cc:92:97:cf:11:a6:fc:8d:24:41:1e:dd:
                    64:87:b4:dc:fb:31:ab:61:ae:0f:c5:21:f4:a7:49:
                    b9:af:23:d6:86:0b:87:63:2f:2a:ad:59:30:bc:ab:
                    2d:5e:62:29:6d:23:f7:fa:ca:2f:5e:08:75:b2:4c:
                    46:79:d0:8e:54:55:89:06:19:57:a0:2f:f7:7e:5b:
                    a0:e8:e1:bc:5e:f7:db:0d:32:8f:9d:ab:22:dc:66:
                    0b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FC:DE:8D:B6:51:E0:75:32:0B:7F:A9:C9:FC:07:72:87:C4:C2:98
            X509v3 Authority Key Identifier:
                keyid:F5:A5:0C:CC:29:40:40:F0:7C:9C:73:5F:E2:A2:A8:03:10:34:D7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133362e302f32322d3232203d3e20323730393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:73:2d:d8:bd:0f:d8:14:0f:b4:b6:76:2f:7d:8f:b9:ec:69:
         7b:bb:8c:41:e7:bf:ee:d7:75:fe:3c:4c:65:49:c1:44:3c:3e:
         fe:05:0c:3d:fe:45:f4:48:25:55:7b:58:10:5e:d4:b3:f8:4f:
         77:86:08:b8:fe:4c:ba:c3:ca:8a:03:60:29:1e:0e:23:c5:2e:
         f4:f3:fc:6c:02:53:f5:54:2d:7e:5a:0b:f3:5a:69:81:f9:c3:
         c7:38:65:00:14:67:31:1a:ce:75:f9:5a:fa:d5:ee:fe:53:ac:
         4b:68:1d:49:81:c0:56:88:b9:46:3d:fd:e9:82:fa:8f:aa:1f:
         b7:7a:ae:f2:66:21:95:11:2c:92:b3:ca:fc:47:01:ee:13:bd:
         f9:4b:55:83:6d:1d:3e:a4:c9:08:37:08:3a:e8:51:26:d6:13:
         43:3c:42:32:98:30:32:55:22:36:de:01:20:a0:a7:c3:0f:2a:
         bb:ad:f1:e1:83:bf:31:ee:8d:f0:62:bc:81:94:b4:92:f3:8e:
         24:ca:2b:ed:74:2b:58:1f:3d:ac:ef:e1:a6:df:6d:9c:c8:5f:
         90:f2:4b:6b:6f:de:a5:64:0c:de:95:43:de:0e:1f:87:63:94:
         41:a2:d6:8d:2f:7f:92:11:29:c2:9d:90:5f:73:50:d6:a2:68:
         90:2d:5f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:24:54 2025 by rpki-client