Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa
File:                     3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          j6IkZYuAvVFL+X+WM7bkcmf3ibb7//jLpeJpSwb0uOI=
Subject key identifier:   31:FA:D7:15:5E:FC:9A:5B:96:75:BC:FC:0D:8D:5E:1C:5F:36:52:E9
Certificate issuer:       /CN=AE237DC7B299A0FDCDF8225D9403B0A582305290
Certificate serial:       47AA745D52F5378698BFDECFAD3E6F39E0B88C43
Authority key identifier: AE:23:7D:C7:B2:99:A0:FD:CD:F8:22:5D:94:03:B0:A5:82:30:52:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE237DC7B299A0FDCDF8225D9403B0A582305290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa
Signing time:             Mon 11 Aug 2025 19:05:04 +0000
ROA not before:           Mon 11 Aug 2025 19:00:04 +0000
ROA not after:            Mon 10 Aug 2026 19:05:04 +0000
asID:                     263584
IP address blocks:        177.129.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/AE237DC7B299A0FDCDF8225D9403B0A582305290.crl
                          rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/AE237DC7B299A0FDCDF8225D9403B0A582305290.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE237DC7B299A0FDCDF8225D9403B0A582305290.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:aa:74:5d:52:f5:37:86:98:bf:de:cf:ad:3e:6f:39:e0:b8:8c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE237DC7B299A0FDCDF8225D9403B0A582305290
        Validity
            Not Before: Aug 11 19:00:04 2025 GMT
            Not After : Aug 10 19:05:04 2026 GMT
        Subject: CN=31FAD7155EFC9A5B9675BCFC0D8D5E1C5F3652E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:1c:6c:f9:eb:0b:9a:77:c0:4f:d8:2e:23:
                    61:f9:cc:96:1e:c7:ab:1a:bc:e8:6d:a2:94:8b:09:
                    0d:a7:2d:93:84:b9:53:c8:be:d4:4e:99:eb:5b:13:
                    5b:03:66:09:3a:65:d3:e2:02:5e:69:bb:21:47:ae:
                    60:2f:37:2f:17:73:4a:35:9b:d4:7b:ff:22:a0:d4:
                    d4:79:ca:23:73:65:99:73:9a:e8:b1:f4:c9:15:99:
                    fa:ae:38:f3:2b:6f:89:34:14:4b:46:b7:65:03:af:
                    b7:83:17:76:15:93:50:41:32:66:a6:0b:5e:cd:30:
                    f7:8c:70:9d:1a:70:15:94:2c:7b:47:3a:aa:9d:6b:
                    58:a7:fa:7f:33:e4:71:0a:06:9f:94:45:df:08:fb:
                    53:87:88:0c:34:55:52:22:95:d0:0c:de:88:48:be:
                    f2:d9:be:3f:72:d0:b0:6c:17:77:0d:06:1d:5f:44:
                    86:4e:02:2d:eb:47:dd:19:86:f2:95:fb:13:7e:1c:
                    d5:da:3f:28:ee:ce:6b:ce:3d:95:d8:91:f0:8c:93:
                    38:1e:fe:64:94:c2:15:6c:d4:86:8d:3f:b0:b3:40:
                    20:4a:0f:c3:18:56:21:0d:ba:0a:15:33:b2:2d:78:
                    a8:18:75:f3:af:e7:f4:53:71:d6:f1:47:73:b0:38:
                    68:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FA:D7:15:5E:FC:9A:5B:96:75:BC:FC:0D:8D:5E:1C:5F:36:52:E9
            X509v3 Authority Key Identifier:
                keyid:AE:23:7D:C7:B2:99:A0:FD:CD:F8:22:5D:94:03:B0:A5:82:30:52:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/AE237DC7B299A0FDCDF8225D9403B0A582305290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE237DC7B299A0FDCDF8225D9403B0A582305290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:e9:df:3e:17:c2:76:4e:00:6b:68:89:dc:05:f6:ca:43:a0:
         be:6a:29:12:6c:fa:ed:b7:8f:81:5a:74:eb:85:2f:04:a9:d3:
         d2:4a:92:bc:e5:05:d5:dc:23:f6:1a:d7:34:18:2b:90:6f:2b:
         b3:c1:fc:49:d1:fb:03:ee:3a:a4:cd:6f:76:cc:7a:3e:fc:0d:
         0b:f2:c0:37:41:f3:d7:68:86:e9:e6:5d:66:20:57:47:6b:5c:
         56:f6:a5:cf:cd:03:85:03:62:52:a0:23:e4:80:f3:9e:9d:77:
         15:d7:23:20:7b:a3:6c:82:fb:84:51:43:1b:9c:d1:cc:10:d4:
         17:c9:17:b6:bf:bf:ba:08:5b:17:5f:5b:40:d0:36:b2:62:27:
         90:30:b3:98:3e:71:4c:6c:0e:86:66:5d:64:a7:02:7f:74:ab:
         a5:aa:b9:93:3b:58:f3:2b:c9:1e:98:41:55:b6:16:a4:ba:f5:
         0c:76:15:1f:2c:3a:9e:dc:20:b8:d3:8f:f9:73:16:34:e3:9f:
         0f:78:d1:1a:50:ee:1e:2b:6f:f9:6e:5e:dd:84:99:f8:75:f2:
         99:10:f0:ab:f3:d7:e7:bc:d3:36:39:cf:bd:03:8c:9a:97:10:
         93:27:0e:c1:ca:79:e5:9a:a8:b3:fd:eb:67:84:7c:23:fc:a6:
         d0:24:b1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:18:05 2025 by rpki-client