Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3133362e3232342e302f31392d3234203d3e203533313037.roa
File:                     3137372e3133362e3232342e302f31392d3234203d3e203533313037.roa (raw, json)
Hash identifier:          VLMhvBLFXOMwNXvpOgxFyxVg/A5EMbOF2WNLdEbwXY8=
Subject key identifier:   89:44:7F:11:3E:94:3B:53:E8:91:FD:34:D1:A2:B3:2D:9C:26:D5:9E
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       2D2BDE54AF784ED2380DA7118801B8546F63989F
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3133362e3232342e302f31392d3234203d3e203533313037.roa
Signing time:             Wed 24 Sep 2025 22:36:31 +0000
ROA not before:           Wed 24 Sep 2025 22:31:31 +0000
ROA not after:            Wed 23 Sep 2026 22:36:31 +0000
asID:                     53107
IP address blocks:        177.136.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 19:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2b:de:54:af:78:4e:d2:38:0d:a7:11:88:01:b8:54:6f:63:98:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Sep 24 22:31:31 2025 GMT
            Not After : Sep 23 22:36:31 2026 GMT
        Subject: CN=89447F113E943B53E891FD34D1A2B32D9C26D59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c6:f2:83:df:62:4c:3e:ff:cc:e8:cd:05:c8:
                    cb:18:77:47:71:0f:e3:19:f4:c2:32:6c:16:a0:52:
                    0d:43:99:3b:53:c2:a4:bd:2e:34:4a:78:c0:e5:9d:
                    f3:10:ec:78:ba:ac:79:7d:05:45:57:12:ec:9b:6b:
                    bf:94:0b:4b:a2:80:ce:63:0d:2f:af:6a:74:81:90:
                    cd:4c:60:6a:8e:c0:a8:df:70:1c:2d:c2:90:96:90:
                    7f:0c:f4:27:c9:2d:b3:4a:7e:39:44:b7:bc:33:13:
                    80:b0:eb:2c:af:10:d6:7e:ed:7d:e4:82:ac:31:6d:
                    36:77:a2:4f:b8:e2:dc:1e:dd:2f:21:6a:3d:09:76:
                    8d:c3:bb:33:9a:7f:35:71:7b:b1:51:1f:d7:72:7e:
                    0a:34:16:3c:c0:b8:72:f0:25:0b:08:b2:46:c5:11:
                    e8:bc:e6:f7:7a:6e:cd:bd:30:4e:11:a4:71:a9:c1:
                    aa:76:4b:03:35:0e:44:11:b8:13:ae:f4:96:69:69:
                    0c:0b:ce:09:f2:9f:5f:5f:6d:ac:6d:2e:28:e9:06:
                    5f:b3:42:4a:fc:78:90:e5:70:8d:fe:bc:66:18:9e:
                    7e:4f:a4:7d:85:8f:74:1c:0d:44:f0:f8:1b:7f:38:
                    6c:a3:03:d9:c2:74:d2:fc:a1:fa:13:dc:e3:0b:d6:
                    18:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:44:7F:11:3E:94:3B:53:E8:91:FD:34:D1:A2:B3:2D:9C:26:D5:9E
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3133362e3232342e302f31392d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4c:9a:77:dc:79:f6:de:7b:1e:18:f5:b9:10:6c:78:e8:63:1e:
         d3:6c:60:40:5a:67:cf:5e:e1:81:9a:ef:6b:38:3b:b2:1e:d7:
         52:d8:73:fa:3a:a1:00:f1:8c:38:c0:83:33:4c:bb:fe:f8:ed:
         10:6b:9b:d5:6e:01:98:b0:ee:e7:22:93:3c:80:46:4f:32:4a:
         c5:90:bc:29:2c:31:a6:35:34:76:60:87:c1:c2:3d:cb:54:f6:
         e7:ea:60:09:9f:2d:b4:4b:57:3c:e8:0b:75:c7:a6:e9:f2:b2:
         7f:9e:21:89:1f:03:de:a8:76:ad:c9:e2:dd:52:f7:ed:66:92:
         b4:14:2b:dc:6c:9b:fc:bf:f5:a7:f4:84:54:44:45:94:2d:a4:
         c4:a0:f5:61:07:ee:26:5c:68:17:b7:e3:9a:8b:08:e8:34:d5:
         3d:c8:05:91:98:05:d5:04:46:c4:ef:23:13:fb:80:1e:73:5f:
         db:53:87:86:2c:e3:68:fc:f8:2b:d8:a9:d8:17:10:21:b6:1b:
         3d:76:d1:35:0c:b6:f6:a3:10:0e:7f:18:40:a9:19:52:0f:58:
         83:9e:38:09:da:30:4d:b2:40:f5:29:46:87:7f:46:9a:ee:c8:
         26:ac:e4:0b:5f:84:68:bf:b4:c8:a5:17:b2:e8:18:b0:1a:fc:
         07:d4:fb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:35:43 2025 by rpki-client