Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32332e302f32342d3234203d3e203532363132.roa
File:                     3137372e3132342e32332e302f32342d3234203d3e203532363132.roa (raw, json)
Hash identifier:          w43pkjnYvMvmIbr/nyq8OQaqp2nDN+cVaHxhqXqDsJs=
Subject key identifier:   C3:1D:EA:AE:E6:D2:4C:CF:AA:8A:9F:B1:10:FF:D4:02:2A:75:05:D3
Certificate issuer:       /CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
Certificate serial:       0BDBA3EC2C4C481E868E35A1D3A60B7CDCC0255D
Authority key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32332e302f32342d3234203d3e203532363132.roa
Signing time:             Tue 07 Oct 2025 16:01:11 +0000
ROA not before:           Tue 07 Oct 2025 15:56:11 +0000
ROA not after:            Tue 06 Oct 2026 16:01:11 +0000
asID:                     52612
IP address blocks:        177.124.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl
                          rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 02:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:db:a3:ec:2c:4c:48:1e:86:8e:35:a1:d3:a6:0b:7c:dc:c0:25:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
        Validity
            Not Before: Oct  7 15:56:11 2025 GMT
            Not After : Oct  6 16:01:11 2026 GMT
        Subject: CN=C31DEAAEE6D24CCFAA8A9FB110FFD4022A7505D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:48:3c:43:26:66:4b:b4:37:6b:f1:59:e9:
                    f5:52:df:53:8b:09:99:09:7e:35:ab:bb:4f:07:b7:
                    ff:06:e5:69:4b:2e:b5:0b:9e:71:25:cb:f7:a4:a1:
                    06:41:68:39:4b:f8:56:2c:60:c5:06:9a:a9:0c:ca:
                    37:fa:35:d6:9e:8c:ec:e9:59:da:c8:12:2e:77:07:
                    98:8e:65:8c:24:26:88:29:74:31:c7:3f:e4:68:b8:
                    44:85:f3:f9:7e:18:46:a5:27:21:2c:1c:0e:6f:d9:
                    2b:c4:59:18:38:09:59:a8:cc:ac:19:73:e4:de:91:
                    42:be:d0:d0:24:1c:ac:0f:43:e6:27:d9:fa:8e:8c:
                    f7:1e:52:b3:85:8d:19:da:6b:5c:01:ca:5f:12:ff:
                    b2:b5:78:bb:48:86:0c:b1:aa:3f:7a:1e:87:16:2c:
                    99:ef:e3:04:2a:f4:7d:32:24:13:5d:9b:bf:67:3c:
                    cc:ec:ba:8b:24:04:40:88:03:0d:fb:9a:3b:ad:90:
                    02:6a:3e:9b:85:c6:b3:a8:b8:d3:d5:72:3f:3d:99:
                    59:03:14:c2:16:8f:c3:ef:53:59:9f:f0:dd:f1:70:
                    51:99:fb:0c:98:c6:28:56:21:c8:39:c4:a1:d7:1a:
                    d7:44:95:3f:03:19:7d:4b:ba:63:60:c8:77:bc:49:
                    33:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1D:EA:AE:E6:D2:4C:CF:AA:8A:9F:B1:10:FF:D4:02:2A:75:05:D3
            X509v3 Authority Key Identifier:
                keyid:D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32332e302f32342d3234203d3e203532363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f9:30:f5:60:c4:96:f0:d3:c7:01:8c:09:e0:bf:f9:4b:41:
         bd:5b:88:bd:cf:67:3d:33:a5:59:ea:cc:da:28:90:c7:99:0b:
         22:65:a5:7f:14:f3:a3:34:a0:c9:9c:9c:7b:6f:32:07:69:9c:
         e6:6c:ef:4e:34:4e:0f:e1:9d:dc:01:c9:30:dc:ea:23:85:b5:
         2c:6f:10:05:52:1e:b2:09:c3:4c:85:2a:5d:e6:1c:d6:e9:f7:
         8b:81:44:4c:24:ed:33:53:3a:35:96:0e:2c:d3:e5:ec:2a:e9:
         61:3b:c1:46:21:91:b9:15:43:11:25:1b:b5:de:6b:9c:27:81:
         10:50:57:f0:5c:7f:dc:c6:7d:9e:38:07:5f:1a:3e:9c:87:3f:
         c5:0e:39:da:30:4e:60:ee:b0:5a:de:dc:91:75:e4:24:44:d4:
         7e:cf:b3:22:91:10:d8:df:21:e9:7b:93:20:26:43:f0:23:2d:
         16:4f:a6:be:0b:d2:b2:7f:f5:71:42:b1:9e:69:7b:d0:24:51:
         2b:29:16:5c:b6:92:33:ab:9c:55:d9:a5:f6:6d:83:63:69:0e:
         ee:b1:e2:3f:9c:f7:25:ef:59:ae:35:88:a0:8a:a6:79:67:e7:
         37:b9:11:3d:f9:fc:98:2e:23:1b:aa:29:4d:36:7e:6f:86:e4:
         43:0a:90:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:01:26 2025 by rpki-client