Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32302d3230203d3e203532393233.roa
File:                     3137372e3138342e3137362e302f32302d3230203d3e203532393233.roa (raw, json)
Hash identifier:          8ZFUoxLgSZ1DxrIPi+lxbHhqxY86uVD8wJvTxZNSkxc=
Subject key identifier:   09:68:F8:EE:E7:9C:E1:B9:63:EA:1A:1B:F6:0A:DE:65:39:4B:60:41
Certificate issuer:       /CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
Certificate serial:       6409D61BA8A5B3564D483CBD7B937F495481DBE5
Authority key identifier: 62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32302d3230203d3e203532393233.roa
Signing time:             Mon 29 Sep 2025 17:26:25 +0000
ROA not before:           Mon 29 Sep 2025 17:21:25 +0000
ROA not after:            Mon 28 Sep 2026 17:26:25 +0000
asID:                     52923
IP address blocks:        177.184.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:09:d6:1b:a8:a5:b3:56:4d:48:3c:bd:7b:93:7f:49:54:81:db:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
        Validity
            Not Before: Sep 29 17:21:25 2025 GMT
            Not After : Sep 28 17:26:25 2026 GMT
        Subject: CN=0968F8EEE79CE1B963EA1A1BF60ADE65394B6041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:e5:64:00:cc:51:63:44:67:17:5d:ff:3b:
                    28:ad:1e:3f:38:a5:f4:bf:ad:a6:a0:aa:89:2c:3b:
                    0f:db:31:85:35:b0:14:06:f5:c6:54:67:6b:84:60:
                    16:07:4c:93:c9:bc:1a:93:4a:52:0d:e6:ea:e3:e0:
                    99:64:4b:3a:44:8a:31:e5:d2:bb:19:b8:2a:d5:32:
                    7f:89:0f:58:7d:49:25:32:5e:3e:17:ac:15:92:02:
                    04:da:1c:f5:bf:5a:98:5f:b7:31:62:59:74:e7:96:
                    60:a9:52:7e:9a:48:e5:b8:d2:f0:a2:a7:92:fd:c9:
                    a3:f8:8c:0f:9f:42:47:64:93:bb:40:b5:03:87:8e:
                    a7:e2:0b:ff:04:32:69:dc:c3:f5:19:fa:cf:c2:e1:
                    6e:a0:b5:d0:6e:16:76:3b:d3:ca:d0:1c:e6:56:7f:
                    4f:77:6a:c3:eb:58:08:d8:13:e1:92:0f:cc:42:23:
                    48:6a:35:e9:1e:c5:33:d6:f3:bb:38:43:88:c5:27:
                    10:cd:bd:ff:82:20:c8:40:ab:e9:cb:08:85:9a:59:
                    ab:53:2f:78:d8:a9:5e:20:02:84:7e:62:b3:88:36:
                    f2:9a:85:8d:24:7a:92:1d:01:50:91:34:d6:72:aa:
                    22:80:d4:69:be:95:3f:c5:cf:da:4f:8e:e4:27:6a:
                    0d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:68:F8:EE:E7:9C:E1:B9:63:EA:1A:1B:F6:0A:DE:65:39:4B:60:41
            X509v3 Authority Key Identifier:
                keyid:62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32302d3230203d3e203532393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:22:a8:27:5f:ce:75:40:fe:b6:14:65:f2:a9:48:84:bb:c1:
         83:08:70:76:14:a0:34:62:66:45:7f:ce:ea:bd:43:ca:ad:08:
         0d:92:5e:db:2b:f7:f6:39:14:64:d1:cd:f1:f4:dc:b1:06:96:
         89:58:d9:c5:3b:4b:58:26:eb:6a:05:93:a0:73:8a:0e:30:dc:
         05:5f:8f:0a:a1:de:3a:32:ff:8d:0a:7f:11:3a:b7:fd:11:1c:
         82:ee:08:bd:8f:a9:6a:c5:b3:76:3d:d3:d3:e5:63:ba:77:d4:
         3b:c4:03:81:39:cf:ad:18:23:09:ca:56:e8:4d:5d:95:4d:61:
         fd:dd:29:ed:5c:d6:be:81:6b:78:f6:32:91:b8:86:c1:83:f7:
         94:bb:a7:5e:68:d1:40:97:2a:84:9b:65:b8:67:ca:51:bb:43:
         2b:e3:5b:6a:8c:1a:35:cd:7d:3c:df:7b:6b:e5:6c:24:4e:f8:
         f0:e4:d4:cb:3c:c4:6f:39:f8:53:80:ad:38:9e:da:5f:b9:da:
         54:36:e0:68:a6:88:a9:71:2c:1e:03:0d:26:2e:db:56:d5:69:
         9b:1e:9c:c5:9c:28:53:3a:41:5c:6f:54:6c:0e:8b:c9:90:e5:
         6e:c4:ae:55:8c:30:fa:37:bf:db:2d:b0:ec:ae:6c:b1:6c:13:
         f4:22:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:53:22 2025 by rpki-client