Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3132382e3232302e302f32322d3332203d3e20323632373733.roa
File:                     3137372e3132382e3232302e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          r9iCeXHf0z4S9iDwr3lizhmu/unvtciyZieBNaQipCI=
Subject key identifier:   DB:03:E4:FF:B7:13:A0:25:09:AB:2D:66:EF:CD:14:64:8B:26:64:C2
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       210D067415479AB30C1E83C4F02F4C8C0FCCD5B4
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3132382e3232302e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:47:00 +0000
ROA not before:           Mon 11 Aug 2025 15:42:00 +0000
ROA not after:            Mon 10 Aug 2026 15:47:00 +0000
asID:                     262773
IP address blocks:        177.128.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 02:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0d:06:74:15:47:9a:b3:0c:1e:83:c4:f0:2f:4c:8c:0f:cc:d5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:42:00 2025 GMT
            Not After : Aug 10 15:47:00 2026 GMT
        Subject: CN=DB03E4FFB713A02509AB2D66EFCD14648B2664C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:0e:2f:c6:81:72:e3:33:f8:eb:c8:d2:86:
                    db:fc:de:e4:21:5b:55:16:98:92:73:23:34:1c:7e:
                    f9:97:27:3e:be:ba:d2:28:0e:94:03:37:91:15:34:
                    38:39:39:59:5b:18:31:6b:dc:98:1a:a6:9d:cb:43:
                    17:52:11:c6:dd:d2:18:4b:bf:99:8d:b7:77:0a:71:
                    6e:b8:e0:54:34:88:cd:a0:11:cc:52:1a:c1:e1:f9:
                    cd:01:a1:90:b2:d7:b8:e3:ff:53:8a:ad:0b:dc:43:
                    c7:dc:81:a4:ac:3e:28:5e:2f:53:d2:3a:3a:85:d9:
                    bb:2b:e9:6e:65:6e:94:5f:44:89:28:44:41:03:0a:
                    5a:0d:fc:70:3b:94:35:7e:f8:73:81:a4:15:1e:3a:
                    cf:bb:11:91:e5:bd:d6:d6:a3:9c:b5:85:16:9e:96:
                    e8:ba:eb:e1:39:e6:e8:0f:f8:49:8e:3e:3d:de:f1:
                    e5:72:5f:6c:0f:8a:89:b7:3d:8f:0c:8f:ac:f6:9b:
                    d7:43:ed:48:d1:00:3f:c3:1e:e7:12:58:21:dd:7c:
                    ca:cb:71:6b:86:fc:ff:8e:07:90:14:a4:9e:07:19:
                    d0:6b:4e:cc:a2:32:57:75:2d:e7:d5:a4:b6:9a:fb:
                    37:3d:e8:c0:21:c8:dc:30:8b:c3:1e:1b:1b:90:f0:
                    78:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:03:E4:FF:B7:13:A0:25:09:AB:2D:66:EF:CD:14:64:8B:26:64:C2
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3132382e3232302e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:ec:52:02:cb:e2:5a:af:fa:08:76:87:47:49:1a:b4:3d:47:
         ea:52:4c:dd:d5:cd:d5:b5:49:1f:42:5a:d0:af:9d:d4:2a:dd:
         16:e8:59:05:b6:23:0c:d6:3f:52:c6:5a:ad:6a:8e:2d:02:1e:
         35:f1:24:ab:4d:5c:3d:38:b9:33:b9:a3:3e:97:5c:d9:67:54:
         fe:73:10:22:a7:f1:dc:2e:6e:92:a9:cf:cb:aa:3f:27:e9:1f:
         b1:0d:28:6f:12:5f:15:41:43:a9:0f:9a:52:aa:a1:ee:bd:39:
         68:be:1d:00:6c:49:cc:41:6d:fa:15:97:81:61:f6:df:2f:71:
         d1:f8:e6:5d:3e:19:bb:dc:16:e9:e1:e4:d5:7e:d0:37:9f:e7:
         0f:5c:f9:3f:f5:3d:72:ff:b4:ce:3e:f7:e6:59:5d:21:bf:48:
         36:fe:f3:90:e7:e2:fa:81:f5:0a:ca:83:6e:56:ff:4d:0c:da:
         2e:39:6b:7b:cb:9a:b5:ff:b6:52:79:33:68:d4:de:3d:08:d8:
         59:ac:07:f3:6e:60:df:3a:9b:07:4a:96:75:94:ee:a4:6a:40:
         2c:36:36:15:07:43:9c:e4:0c:23:20:70:fb:69:c0:a9:3b:7e:
         2a:af:79:b9:26:11:39:fa:dd:42:5a:23:c7:a9:5e:e4:2b:c7:
         47:1c:fe:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:28:28 2025 by rpki-client