Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3139302e302f32342d3234203d3e203532393233.roa
File:                     3137372e3138342e3139302e302f32342d3234203d3e203532393233.roa (raw, json)
Hash identifier:          aGH0GbzEzquqiWX2pe5Gubj3h0eFkZ0vN/npQBFfTmI=
Subject key identifier:   5D:59:91:A0:0D:FB:1F:B3:6C:C0:48:E5:07:C4:A0:79:04:94:47:6F
Certificate issuer:       /CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
Certificate serial:       34EC6DBBCFFDCC29EDAE3493BA76A42E57BC41C2
Authority key identifier: 62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3139302e302f32342d3234203d3e203532393233.roa
Signing time:             Mon 29 Sep 2025 17:26:24 +0000
ROA not before:           Mon 29 Sep 2025 17:21:24 +0000
ROA not after:            Mon 28 Sep 2026 17:26:24 +0000
asID:                     52923
IP address blocks:        177.184.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ec:6d:bb:cf:fd:cc:29:ed:ae:34:93:ba:76:a4:2e:57:bc:41:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
        Validity
            Not Before: Sep 29 17:21:24 2025 GMT
            Not After : Sep 28 17:26:24 2026 GMT
        Subject: CN=5D5991A00DFB1FB36CC048E507C4A0790494476F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a7:56:05:ad:5a:db:c3:21:55:09:07:f3:1b:
                    59:f6:23:74:02:aa:a8:fd:f4:b4:bf:b5:b0:c9:ba:
                    de:76:15:00:20:dd:6e:29:e2:a3:23:0d:f6:5c:e1:
                    0d:53:22:8a:09:0b:ef:9e:be:7a:d4:44:4a:44:07:
                    68:46:d6:8f:11:ff:e5:cb:43:88:e6:3a:89:25:7e:
                    2d:2d:60:52:32:93:5b:55:d7:fe:a6:8a:46:94:e2:
                    48:6b:ad:da:13:95:27:bf:68:98:10:59:94:20:9e:
                    74:2c:d1:a3:a9:a0:19:b0:1d:f8:f9:67:3e:b8:b0:
                    15:0d:c8:5f:44:16:02:f1:25:9a:73:b0:da:60:f8:
                    62:cd:3d:48:05:70:58:08:a6:67:80:a3:66:ac:22:
                    eb:01:5f:66:cc:87:b3:c2:20:de:14:5a:42:dc:dd:
                    16:87:6f:0a:dc:fe:f6:13:0a:32:f9:56:c9:a3:2d:
                    f5:10:56:70:1e:6c:87:ae:4c:98:27:e6:31:2f:7a:
                    ec:4b:db:ef:96:62:2d:f8:a7:08:f4:8e:47:c4:cc:
                    63:e9:95:b3:d9:76:4a:ca:05:92:a5:e8:ba:ff:e4:
                    eb:36:13:6b:5f:ca:42:0e:47:9c:a7:db:c0:e3:9e:
                    52:91:93:2b:9e:9f:2c:9b:0b:b2:27:9e:51:13:db:
                    25:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:59:91:A0:0D:FB:1F:B3:6C:C0:48:E5:07:C4:A0:79:04:94:47:6F
            X509v3 Authority Key Identifier:
                keyid:62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/3137372e3138342e3139302e302f32342d3234203d3e203532393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:1b:f1:e5:f8:fd:0b:21:5b:5b:3b:ee:f6:48:ce:1b:18:b5:
         61:4b:1d:a1:79:cd:33:f2:c4:ac:28:20:33:61:63:d2:eb:40:
         d3:54:91:f3:9c:fa:09:53:2f:80:f4:10:6d:21:c6:b7:2d:24:
         b3:23:c9:b8:bb:5f:b5:84:62:a8:20:69:11:61:25:cb:c3:e8:
         25:f5:80:88:f3:00:c9:6c:fa:2e:1f:05:60:2c:bd:e4:a2:23:
         eb:8b:1b:2d:f6:07:bd:3d:69:1b:33:f2:1a:9e:da:ad:69:9c:
         07:8a:f6:f8:b3:1e:71:d0:c8:d0:39:4c:17:69:15:6d:c7:e5:
         9e:cc:18:d7:7d:84:47:7f:7a:68:91:eb:74:d5:5d:80:cc:c3:
         31:ff:13:31:96:4c:87:8c:d8:71:77:57:22:4a:ce:5a:de:8f:
         a4:b1:54:02:fc:3e:a8:bf:d6:5b:ff:53:70:b2:79:db:77:45:
         ba:aa:dd:8a:f2:47:c8:fe:fd:1a:63:83:b5:23:04:17:b2:75:
         96:f1:5b:18:f6:c4:4e:78:60:2f:e4:d7:12:f8:79:f2:35:1c:
         29:80:7d:4f:50:40:c9:0e:cd:a2:71:b7:43:e0:0f:2e:b7:5b:
         79:81:52:d8:94:58:cc:db:9a:1b:3b:d0:a4:1d:66:a8:a1:b7:
         13:19:ed:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:53:40 2025 by rpki-client