Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133382e302f32332d3233203d3e20323730393137.roa
File:                     3137372e3230302e3133382e302f32332d3233203d3e20323730393137.roa (raw, json)
Hash identifier:          MEtliYa/GIYkuEyect5wVyxfkFJweY3/acjCu0wqGgU=
Subject key identifier:   E9:7C:06:F9:D0:61:7C:03:9A:63:BC:B8:31:68:09:1B:20:C5:2D:BF
Certificate issuer:       /CN=F5A50CCC294040F07C9C735FE2A2A8031034D7F3
Certificate serial:       538A4D57CC226B56103E6AE40D77B1E6E252AEA3
Authority key identifier: F5:A5:0C:CC:29:40:40:F0:7C:9C:73:5F:E2:A2:A8:03:10:34:D7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133382e302f32332d3233203d3e20323730393137.roa
Signing time:             Tue 07 Oct 2025 15:05:37 +0000
ROA not before:           Tue 07 Oct 2025 15:00:37 +0000
ROA not after:            Tue 06 Oct 2026 15:05:37 +0000
asID:                     270917
IP address blocks:        177.200.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.crl
                          rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8a:4d:57:cc:22:6b:56:10:3e:6a:e4:0d:77:b1:e6:e2:52:ae:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A50CCC294040F07C9C735FE2A2A8031034D7F3
        Validity
            Not Before: Oct  7 15:00:37 2025 GMT
            Not After : Oct  6 15:05:37 2026 GMT
        Subject: CN=E97C06F9D0617C039A63BCB83168091B20C52DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:cb:1c:68:7c:bc:18:40:2d:26:6a:98:6c:
                    6b:fd:6c:54:da:16:86:57:f0:11:24:0a:79:7b:f3:
                    6e:c5:3c:91:56:5c:37:70:f3:4b:f1:0f:e6:4b:6d:
                    41:86:b3:b6:03:3d:91:9c:de:7d:b3:70:8d:92:8f:
                    b4:22:1e:c1:08:d4:41:a2:4a:3d:eb:e7:57:a7:02:
                    71:ac:28:d4:74:97:60:bf:e3:af:22:d5:59:fc:b5:
                    1d:78:2d:7b:7b:18:11:28:67:8f:6c:e4:32:bd:7b:
                    4a:ee:25:8e:65:ef:a5:4e:bf:81:94:0d:11:8a:6f:
                    a0:af:47:e6:a9:f5:40:9e:9a:44:62:42:01:58:f1:
                    51:20:ff:10:9d:dc:96:f8:cd:95:6f:49:77:50:f0:
                    54:de:48:7e:a9:21:b6:51:5c:6c:fd:0c:1f:92:cf:
                    5f:04:de:31:a0:87:a0:a6:d3:46:8d:a3:01:fb:de:
                    3c:b8:5d:17:66:d4:6b:3c:5c:7f:0c:3c:86:4e:d7:
                    0e:6f:21:ed:8c:e2:2d:5b:b6:7d:4d:48:f0:20:b0:
                    a9:a0:f8:d0:56:b9:03:8b:d1:aa:f0:54:55:c2:e2:
                    e8:66:34:eb:9d:c2:a6:49:a4:91:4d:31:6a:f0:12:
                    e3:4d:44:16:70:cd:f8:9b:93:71:13:2c:83:7a:b6:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7C:06:F9:D0:61:7C:03:9A:63:BC:B8:31:68:09:1B:20:C5:2D:BF
            X509v3 Authority Key Identifier:
                keyid:F5:A5:0C:CC:29:40:40:F0:7C:9C:73:5F:E2:A2:A8:03:10:34:D7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A50CCC294040F07C9C735FE2A2A8031034D7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133382e302f32332d3233203d3e20323730393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:73:94:0a:06:8b:6c:26:cf:b7:68:80:5e:e7:6d:cf:13:7a:
         99:0e:87:44:e6:e4:ed:c0:35:96:1d:0f:72:ff:00:cd:94:37:
         12:d7:bd:98:52:ed:04:0f:c7:54:1c:80:60:db:43:24:bf:24:
         44:8d:9f:37:50:83:dd:0b:19:8e:88:f0:d1:80:6a:69:e6:9f:
         03:f4:2d:c7:0c:28:32:4f:51:e3:19:f8:5a:db:5b:11:46:12:
         ec:b7:43:95:81:b2:f6:0f:46:d9:08:f0:fc:65:1f:ee:9a:e5:
         2a:e5:fa:ba:90:e5:43:11:29:00:58:55:4b:4d:ad:67:fe:3d:
         85:36:48:14:fd:d7:00:5e:d3:39:44:73:12:ee:82:3b:d4:6d:
         95:dc:25:ad:b0:81:c6:5d:26:5d:3a:f5:52:ab:df:90:79:ca:
         d7:89:6a:95:04:b0:1c:38:c8:5c:b3:0f:e3:62:44:b0:36:74:
         32:4e:ae:c9:88:8c:d2:21:88:03:11:dc:6a:38:34:db:bd:49:
         8f:b6:8b:da:63:df:a3:23:db:5d:50:55:74:00:10:42:fd:ec:
         ad:84:a6:0f:a9:6c:16:70:23:43:f7:d0:6a:f6:83:9d:8b:6e:
         76:00:8d:17:69:49:43:e7:46:6f:41:2d:c3:fc:28:7c:62:4c:
         c9:00:bb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:24:45 2025 by rpki-client