Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138312e302f32342d3234203d3e203532393233.roa
File:                     3137372e3138342e3138312e302f32342d3234203d3e203532393233.roa (raw, json)
Hash identifier:          8ouyOu5AlqqUp8kyJf415n6Iz+l4DoX0MRJdS3PNWuo=
Subject key identifier:   24:E0:F0:D6:02:18:16:3A:41:48:F1:AE:73:D4:A0:41:EC:E9:06:10
Certificate issuer:       /CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
Certificate serial:       3C72367A84309FB528C7303F090A54DC5B28663E
Authority key identifier: 62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138312e302f32342d3234203d3e203532393233.roa
Signing time:             Mon 29 Sep 2025 17:26:25 +0000
ROA not before:           Mon 29 Sep 2025 17:21:25 +0000
ROA not after:            Mon 28 Sep 2026 17:26:25 +0000
asID:                     52923
IP address blocks:        177.184.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:72:36:7a:84:30:9f:b5:28:c7:30:3f:09:0a:54:dc:5b:28:66:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
        Validity
            Not Before: Sep 29 17:21:25 2025 GMT
            Not After : Sep 28 17:26:25 2026 GMT
        Subject: CN=24E0F0D60218163A4148F1AE73D4A041ECE90610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c4:01:a3:e1:6e:a7:c1:c3:d8:67:91:da:83:
                    b9:c0:17:25:34:bd:5c:05:27:00:9d:a8:6a:92:47:
                    b1:03:84:f6:42:c3:3f:56:8e:96:8f:6b:cb:7c:ef:
                    4e:02:56:a9:e5:8c:1d:44:5e:2f:88:55:41:78:55:
                    9f:54:29:70:3b:8f:23:5c:26:85:5c:04:10:ba:f8:
                    b6:bc:8b:99:35:36:39:d4:33:36:d9:5f:21:cf:56:
                    d3:6b:cd:97:4f:b3:57:da:89:57:65:3d:f8:be:df:
                    9b:d1:d0:0d:60:b9:67:9c:b5:61:6b:7d:df:d2:75:
                    01:29:1c:19:14:43:9e:e2:0b:94:02:4e:d1:1b:fe:
                    e6:ff:3c:bc:af:c6:31:28:a6:83:f8:9a:82:44:55:
                    0c:dc:77:1c:bd:8e:37:75:7a:a6:7f:6f:a5:6f:67:
                    97:da:58:c2:64:be:77:52:f7:6c:fa:14:3c:20:0d:
                    d9:32:0f:93:2f:2e:1b:15:b4:c7:8b:72:68:b6:d2:
                    91:53:d2:f2:a5:5f:21:12:9e:0f:a0:c6:5b:c7:b0:
                    65:50:af:ea:4d:a1:20:23:1a:86:c4:9d:a3:fe:54:
                    4c:9f:af:bc:2a:63:1a:82:32:b6:8c:b5:dc:9b:48:
                    7f:93:2f:9c:2a:ad:48:67:da:ce:e7:01:75:4c:2d:
                    1f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E0:F0:D6:02:18:16:3A:41:48:F1:AE:73:D4:A0:41:EC:E9:06:10
            X509v3 Authority Key Identifier:
                keyid:62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3138312e302f32342d3234203d3e203532393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:f1:7f:08:21:24:9f:a4:77:9e:84:5b:59:a7:35:f6:3d:07:
         5d:07:f2:a2:e0:c1:5e:91:8e:33:50:f5:f3:ce:09:9a:fa:b3:
         6d:3f:44:23:d1:1d:a3:4e:79:42:65:dc:6a:57:12:08:c9:16:
         0c:60:76:ce:a9:3f:1f:9d:62:90:f3:46:55:69:e6:36:71:63:
         a1:a0:11:1a:d4:4e:6f:a6:98:1a:e8:e6:11:1b:b7:b2:c4:7f:
         83:0b:4a:fb:23:c8:da:46:0b:cc:ad:a7:fb:8a:4c:2b:43:a7:
         0e:d2:97:d6:b8:4d:64:9e:24:3b:a9:75:0a:8f:e4:62:93:23:
         46:6c:b7:57:ce:3d:a0:0e:cc:d6:d9:68:2b:8a:6e:ad:df:30:
         4d:b5:96:83:ca:89:f4:32:0d:9d:6f:24:5b:cb:e9:47:85:bc:
         50:85:e5:45:d7:a7:f4:c9:75:7a:11:4b:be:78:81:94:a7:19:
         f9:f8:ec:c5:e5:f3:79:53:64:24:53:98:29:ab:79:31:e8:f2:
         58:14:e3:07:b3:72:70:b2:42:28:4d:f1:a5:7d:80:8c:9a:d4:
         4b:5d:db:72:c5:77:e5:31:39:ab:ee:3b:8b:5f:66:7e:d1:bf:
         e7:7b:cf:90:38:30:5a:9b:20:b3:15:a9:e3:c9:e0:21:61:d9:
         ea:cd:d9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:06:10 2025 by rpki-client