Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32332d3233203d3e203532393233.roa
File:                     3137372e3138342e3137362e302f32332d3233203d3e203532393233.roa (raw, json)
Hash identifier:          DkCiEKStfIHgO43kbu74AownWatynYXbVIvlhTlEHb0=
Subject key identifier:   2E:FB:78:64:1B:8C:26:01:41:6F:C8:8A:3E:37:6E:1D:9C:26:E8:EB
Certificate issuer:       /CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
Certificate serial:       0CE75181A79C73185469CBFB5CDAA9B62A5529DF
Authority key identifier: 62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32332d3233203d3e203532393233.roa
Signing time:             Mon 29 Sep 2025 17:26:24 +0000
ROA not before:           Mon 29 Sep 2025 17:21:24 +0000
ROA not after:            Mon 28 Sep 2026 17:26:24 +0000
asID:                     52923
IP address blocks:        177.184.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e7:51:81:a7:9c:73:18:54:69:cb:fb:5c:da:a9:b6:2a:55:29:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
        Validity
            Not Before: Sep 29 17:21:24 2025 GMT
            Not After : Sep 28 17:26:24 2026 GMT
        Subject: CN=2EFB78641B8C2601416FC88A3E376E1D9C26E8EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:2b:20:e2:87:de:2c:9a:fb:12:8d:cd:45:
                    da:11:a8:82:4a:03:d0:21:a5:d8:a8:57:8b:4f:55:
                    9d:d3:7f:fd:ca:bf:55:20:6a:66:31:92:35:d1:7b:
                    1e:fb:3e:7a:5d:0a:1e:f2:70:e0:55:f8:2a:2e:94:
                    a9:03:7c:1f:a2:09:60:64:1c:97:75:b4:18:19:fd:
                    a7:ab:fb:55:8b:7e:dd:69:c0:3a:b2:6d:da:fb:f7:
                    f0:8d:3e:36:9e:3b:00:34:27:68:b6:c6:85:00:c1:
                    5c:4c:db:db:fe:9c:17:c4:b9:fe:7d:6e:e9:0b:02:
                    0c:8d:d3:d2:b4:6e:8b:46:af:94:e8:cd:86:77:d9:
                    4f:b5:db:21:09:f0:be:f9:c3:4e:34:99:e6:6a:3f:
                    e6:7d:cd:64:7c:96:d0:72:41:2c:05:a0:47:1e:bf:
                    bf:8e:a7:02:07:66:72:86:3d:37:0a:65:db:74:93:
                    25:06:dc:45:98:1c:d2:3b:75:1a:a5:d6:e3:50:ea:
                    5a:82:36:36:3f:73:e3:b2:cf:dd:cb:06:24:c8:7d:
                    8f:e8:1b:76:9e:3d:2c:22:a8:1f:b6:c1:d4:cf:7e:
                    4e:53:9b:8f:75:1f:86:e1:8b:f5:b8:20:b7:3a:35:
                    50:c3:42:47:48:a1:a4:af:ed:82:f7:68:00:3d:57:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FB:78:64:1B:8C:26:01:41:6F:C8:8A:3E:37:6E:1D:9C:26:E8:EB
            X509v3 Authority Key Identifier:
                keyid:62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3137362e302f32332d3233203d3e203532393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:f7:81:f2:df:f0:ac:c1:50:62:b8:31:8c:07:02:82:94:fd:
         0c:77:a5:30:d4:e5:9a:36:a5:de:c3:fd:ce:5b:45:e4:ca:5f:
         b4:13:46:bb:00:ea:19:02:3a:1e:2b:e5:03:ef:fd:8f:4b:ea:
         f1:4a:85:bb:39:3b:c6:6e:07:af:47:93:ca:c4:1c:d1:0a:3b:
         18:f2:86:97:75:e0:ff:70:01:96:3c:c1:9b:8c:f2:08:19:a1:
         ad:db:f7:42:2a:ec:a0:91:51:c5:44:4a:55:23:38:9f:b2:3a:
         6f:83:5f:38:42:63:74:2e:38:4a:d7:8b:5b:42:1c:95:34:53:
         d1:98:cf:36:48:f9:30:a3:d9:43:70:35:78:ad:3d:59:96:a0:
         59:5f:50:25:1f:e9:f5:f7:c6:d8:bd:06:a3:8a:df:1f:cf:c2:
         f2:b3:1c:e4:f0:a9:23:7a:1f:6d:99:d1:99:15:42:aa:75:12:
         e9:58:8c:0c:1b:a9:ec:f7:f0:2c:cb:40:ea:63:ae:cd:f8:ff:
         60:81:55:42:4a:30:af:69:40:84:ba:72:28:4c:fd:87:b1:56:
         2a:4c:21:3e:b0:fd:70:b6:19:67:51:3e:9d:8e:be:bb:50:2b:
         08:fa:11:c3:a9:4a:0a:cc:c2:a8:6d:27:70:0d:d0:ad:54:c5:
         fd:19:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:06:17 2025 by rpki-client