Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e3139322e302f32312d3332203d3e20323632373733.roa
File:                     3137372e38362e3139322e302f32312d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          zG+dYZL1stzSiiPXJ0MOU/pkHqPxEieD3VyGLVXsH5o=
Subject key identifier:   9B:8E:3F:29:14:65:4A:04:B4:2C:70:6C:6E:39:5D:6A:6C:C7:C1:0C
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       5DFA255CACCC5391E088B5FCEEEC12C6C3257524
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e3139322e302f32312d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:46:58 +0000
ROA not before:           Mon 11 Aug 2025 15:41:58 +0000
ROA not after:            Mon 10 Aug 2026 15:46:58 +0000
asID:                     262773
IP address blocks:        177.86.192.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 02:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fa:25:5c:ac:cc:53:91:e0:88:b5:fc:ee:ec:12:c6:c3:25:75:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:41:58 2025 GMT
            Not After : Aug 10 15:46:58 2026 GMT
        Subject: CN=9B8E3F2914654A04B42C706C6E395D6A6CC7C10C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c8:f1:af:29:9f:be:e5:1c:0f:7f:57:0f:8d:
                    e5:fd:8c:97:6a:53:28:c9:0b:25:7d:58:49:76:fb:
                    4d:45:cf:41:dc:cf:41:a2:97:36:2e:0a:44:60:a9:
                    c6:5e:5e:2a:dd:78:a9:5f:b7:13:53:18:15:fc:9c:
                    3e:6a:97:b7:c9:ea:e8:bb:ac:62:f5:02:22:b5:a0:
                    7e:65:bf:96:36:78:a4:70:d3:b8:35:35:69:4b:6b:
                    12:00:aa:58:c3:96:d4:11:9e:32:41:a1:ae:50:c9:
                    9e:88:c7:b8:70:b9:96:5d:53:ca:56:24:44:6f:c8:
                    fe:30:fd:a4:71:f2:19:b2:6e:e7:35:8e:4c:5d:d2:
                    3f:1c:43:87:cf:29:84:32:e8:88:3b:ca:e0:2a:12:
                    23:c5:3e:03:8a:b6:93:d9:9d:08:ef:95:91:6c:7e:
                    4d:0c:9d:96:fa:16:b5:e1:75:f1:9b:ea:51:40:9b:
                    f6:85:65:da:eb:42:73:4a:74:44:0f:43:8c:b5:f4:
                    b8:23:46:08:b5:1b:cf:8c:1d:f5:58:5f:50:fa:17:
                    5c:e0:62:41:e6:c7:75:49:c6:80:f6:0e:fd:ac:15:
                    5b:3e:f5:7b:e5:46:e2:c3:f7:c6:c4:3a:05:ac:4f:
                    e7:66:41:27:a6:89:db:56:7f:ae:0f:1d:46:a8:1e:
                    b0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8E:3F:29:14:65:4A:04:B4:2C:70:6C:6E:39:5D:6A:6C:C7:C1:0C
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e3139322e302f32312d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b5:24:26:d4:89:40:16:bd:28:ea:3d:2c:e7:e6:cd:25:d3:00:
         e8:47:44:2e:6f:80:c7:aa:d6:6e:a7:9c:9c:55:1a:aa:17:4e:
         e8:d8:ef:58:7a:7c:32:26:71:a3:a1:f9:74:b4:22:7e:0b:43:
         46:fb:d2:30:a4:3c:2f:83:e2:95:17:24:69:95:de:8c:85:ec:
         f2:65:44:45:43:19:9a:dc:df:c9:47:85:0b:7d:9a:4b:ee:f6:
         f9:e8:8b:e8:ec:ea:ae:c6:41:c8:29:e1:7d:34:0c:18:80:9e:
         46:73:1c:62:74:f0:37:fb:85:8f:79:07:cc:c8:0f:b8:90:68:
         b9:dc:c5:3e:9d:2f:77:f1:ab:4e:40:bc:a9:e3:65:16:90:6a:
         16:89:e0:29:ba:ad:6b:fd:7e:8d:8a:69:57:9f:5d:cb:f6:dd:
         07:cd:fa:42:eb:76:57:e2:40:9b:36:d6:1f:b3:7e:ff:1a:44:
         ed:e5:c5:cb:13:9f:80:5f:a5:79:d2:97:7b:13:d6:08:a8:e9:
         dd:f8:56:27:3a:f4:4d:6f:51:8e:4c:8e:0a:ba:fd:28:e8:7e:
         cd:eb:ad:55:02:c0:35:df:60:b7:17:19:09:03:44:7e:b5:23:
         bf:af:fa:58:b6:02:76:b9:1a:e7:f7:2d:7e:11:90:a2:fd:94:
         a9:2f:e5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:23:33 2025 by rpki-client