Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e302e302f31372d3234203d3e203533323339.roa
File:                     3137372e32302e302e302f31372d3234203d3e203533323339.roa (raw, json)
Hash identifier:          Gpsl/G24ftWkuanQfA50DDI06fUcSMukG2uf7nE4GCs=
Subject key identifier:   2B:73:5D:65:11:21:32:E2:74:91:32:78:EF:0E:F8:77:F4:5B:A2:31
Certificate issuer:       /CN=0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384
Certificate serial:       2290A563AFC4B589C9CDDBD63C145C6BF856087F
Authority key identifier: 0B:D6:FA:DA:5B:9D:4A:CC:75:21:C6:41:3D:70:0E:E9:DC:D4:E3:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e302e302f31372d3234203d3e203533323339.roa
Signing time:             Wed 17 Sep 2025 22:25:38 +0000
ROA not before:           Wed 17 Sep 2025 22:20:38 +0000
ROA not after:            Wed 16 Sep 2026 22:25:38 +0000
asID:                     53239
IP address blocks:        177.20.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.crl
                          rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:90:a5:63:af:c4:b5:89:c9:cd:db:d6:3c:14:5c:6b:f8:56:08:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384
        Validity
            Not Before: Sep 17 22:20:38 2025 GMT
            Not After : Sep 16 22:25:38 2026 GMT
        Subject: CN=2B735D65112132E274913278EF0EF877F45BA231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:c5:57:89:90:b3:5d:27:db:d3:74:7c:e0:
                    11:e0:93:62:2b:7e:dd:ed:1b:6d:70:c3:74:87:4f:
                    13:9b:8f:93:8f:9c:75:f3:19:38:2a:ea:45:34:f3:
                    2a:43:f3:6a:ec:80:da:5e:cb:dc:15:cc:f0:3b:4e:
                    d5:4a:86:61:ec:bc:04:9a:96:2d:c9:c7:1f:59:8c:
                    41:78:cf:4d:2c:1c:e7:62:b0:e2:c0:f5:fb:b1:91:
                    45:cd:b7:16:b2:ba:7f:f9:eb:ec:05:41:76:7c:74:
                    92:a3:a4:e6:ce:58:56:6a:8a:ba:d1:58:21:4e:56:
                    d3:d0:df:d6:b6:92:17:10:e9:3a:2b:a3:6a:39:6b:
                    b7:07:91:b6:a6:b8:28:b2:35:b4:84:b3:18:c4:7c:
                    bd:2a:21:ab:6f:73:29:44:e5:a6:e1:65:d0:e4:e8:
                    ee:52:56:7c:e6:eb:bf:5d:91:e5:74:0e:da:2f:c6:
                    7f:d3:f2:18:89:60:e9:7f:cf:e1:fd:c6:37:36:36:
                    32:fa:5a:3b:23:29:3f:19:65:1e:04:bf:89:5a:a3:
                    9a:cc:74:6a:03:a1:09:ac:fd:84:f8:21:c1:41:f1:
                    1c:2b:fd:fa:81:22:5c:99:ad:3a:ea:ab:dd:9b:82:
                    50:0a:cd:c9:0b:77:6f:08:1b:3c:bd:97:f1:81:09:
                    11:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:73:5D:65:11:21:32:E2:74:91:32:78:EF:0E:F8:77:F4:5B:A2:31
            X509v3 Authority Key Identifier:
                keyid:0B:D6:FA:DA:5B:9D:4A:CC:75:21:C6:41:3D:70:0E:E9:DC:D4:E3:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e302e302f31372d3234203d3e203533323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         71:d7:47:8b:2f:47:7d:2a:b6:59:6d:2a:b2:60:43:de:72:3a:
         c9:dc:f7:98:83:aa:fb:28:bf:21:d8:62:22:97:03:4a:1f:a4:
         31:27:cf:32:8d:9b:6e:a1:52:4a:c9:13:15:d0:05:1e:06:5c:
         ab:e3:c9:66:d1:d5:82:93:9c:1f:52:a7:9d:6e:0a:43:da:70:
         dc:aa:d0:2e:ba:0b:87:ea:7b:d6:3d:32:f9:04:3e:48:f3:7e:
         05:82:7b:e8:7f:fc:15:a1:6d:15:74:37:c9:62:18:16:8c:49:
         87:ef:0e:c4:c9:63:aa:12:68:a4:bd:2f:9f:63:0f:e5:ab:68:
         da:ed:a1:b4:e2:5d:e5:38:13:f8:6c:bc:89:0f:6a:ac:9b:18:
         01:eb:06:29:5a:d1:66:f0:75:79:ec:7c:b4:2d:41:76:66:58:
         d6:d5:db:0c:87:d2:6f:69:84:14:8e:98:85:c5:e6:61:22:e1:
         10:a0:7c:27:9e:83:ef:b5:fa:b1:d7:c0:3b:2d:fb:c5:93:d2:
         4b:a8:61:aa:31:45:a8:2b:f2:09:e9:c3:65:0a:9b:27:d8:6b:
         d9:1e:36:10:be:40:4a:b1:ce:da:c8:cc:1f:da:1c:81:f6:91:
         5a:9c:55:18:e5:09:a5:bf:d1:5c:68:02:1c:2b:e6:b1:fe:46:
         3b:a8:c4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:53 2025 by rpki-client