Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3137372e38342e35362e302f32322d3234203d3e203532373039.roa
File:                     3137372e38342e35362e302f32322d3234203d3e203532373039.roa (raw, json)
Hash identifier:          BQhNZvD2xvF512zSOr/9IusChgMMIEI8iT2QiKfGj/4=
Subject key identifier:   B5:BD:0D:A4:A9:E4:17:67:AD:33:5E:DC:AA:4F:81:9D:9D:17:5F:51
Certificate issuer:       /CN=A6B1108ECD2DFB7C776BD017BE207938671C1907
Certificate serial:       181EB8858FD6456BE39CA9F4A98E354EB6456A88
Authority key identifier: A6:B1:10:8E:CD:2D:FB:7C:77:6B:D0:17:BE:20:79:38:67:1C:19:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1108ECD2DFB7C776BD017BE207938671C1907.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3137372e38342e35362e302f32322d3234203d3e203532373039.roa
Signing time:             Fri 26 Sep 2025 14:40:10 +0000
ROA not before:           Fri 26 Sep 2025 14:35:10 +0000
ROA not after:            Fri 25 Sep 2026 14:40:10 +0000
asID:                     52709
IP address blocks:        177.84.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/A6B1108ECD2DFB7C776BD017BE207938671C1907.crl
                          rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/A6B1108ECD2DFB7C776BD017BE207938671C1907.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1108ECD2DFB7C776BD017BE207938671C1907.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1e:b8:85:8f:d6:45:6b:e3:9c:a9:f4:a9:8e:35:4e:b6:45:6a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6B1108ECD2DFB7C776BD017BE207938671C1907
        Validity
            Not Before: Sep 26 14:35:10 2025 GMT
            Not After : Sep 25 14:40:10 2026 GMT
        Subject: CN=B5BD0DA4A9E41767AD335EDCAA4F819D9D175F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:90:b6:1d:4b:04:9b:b9:83:a8:54:20:27:
                    ca:3e:b6:06:9c:ed:f9:f8:d1:2b:aa:00:3a:a1:e9:
                    c3:1b:65:87:05:a8:d2:d9:7d:16:86:75:25:0a:48:
                    f2:d6:a8:fb:ed:9c:af:42:2f:4d:0c:6d:43:14:fc:
                    cc:21:e3:0f:e1:49:e0:b6:7e:06:58:b8:03:99:65:
                    62:89:8f:f5:ef:c6:a7:3a:09:b5:58:1d:aa:4b:38:
                    69:6e:56:1a:ea:f9:f0:b5:0f:70:34:c0:6b:60:ab:
                    e0:5c:1d:30:7c:aa:f0:f4:f7:80:cb:62:e0:d1:22:
                    73:e7:49:02:12:14:7f:4a:35:cf:fb:e6:87:27:f3:
                    d8:ae:10:6e:5e:96:c1:8a:95:ef:d8:3a:dd:25:05:
                    4f:1f:fd:b2:79:99:6c:92:4e:9e:15:c7:a4:0a:86:
                    30:c0:3e:07:8c:eb:f5:7d:06:bf:59:aa:a3:85:61:
                    af:bb:53:7c:79:05:3e:22:52:55:bc:01:26:f1:1d:
                    5f:ad:7f:91:09:22:be:63:32:5a:46:38:ac:94:cd:
                    81:09:fb:d3:a4:24:44:73:8c:3c:71:ec:32:6b:e9:
                    01:40:9c:b5:64:ce:22:52:67:a6:67:1f:bb:75:13:
                    74:bb:5d:0d:5c:02:dd:57:89:91:8f:f7:48:3a:f9:
                    40:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BD:0D:A4:A9:E4:17:67:AD:33:5E:DC:AA:4F:81:9D:9D:17:5F:51
            X509v3 Authority Key Identifier:
                keyid:A6:B1:10:8E:CD:2D:FB:7C:77:6B:D0:17:BE:20:79:38:67:1C:19:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/A6B1108ECD2DFB7C776BD017BE207938671C1907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6B1108ECD2DFB7C776BD017BE207938671C1907.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3137372e38342e35362e302f32322d3234203d3e203532373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:2d:f0:62:81:6a:20:44:03:b5:6f:ba:21:e8:5b:73:d2:7c:
         e0:9f:68:fa:a1:57:8a:09:7d:0f:14:08:93:a6:b0:bb:a7:b9:
         c2:42:da:75:8d:28:82:c4:0d:12:6e:94:02:99:ac:5b:1f:6a:
         c2:99:a9:01:31:96:50:5c:c7:33:30:1a:00:fe:74:42:91:fa:
         5c:68:f7:43:d9:c2:d1:1b:c4:27:3e:90:ac:56:f3:3e:bb:b9:
         4e:88:30:76:25:27:0f:71:bb:57:44:05:92:f9:84:24:70:aa:
         28:0a:65:d4:e5:98:75:55:2f:71:b5:d0:49:ee:30:fb:a0:b9:
         17:45:70:ac:f7:0c:cb:4a:cc:26:ae:a1:3c:21:bf:77:f9:be:
         20:c1:67:ac:a7:c7:97:60:f8:02:fd:c8:4b:a3:72:d0:4b:0a:
         41:83:54:64:9e:5a:5f:cd:09:4d:27:67:cb:71:0e:83:4b:c9:
         2a:95:fb:d8:23:4a:f0:30:c2:7e:5a:91:cb:4c:75:8e:22:95:
         37:47:5c:5f:66:ca:f2:9b:04:d2:85:1c:f2:5c:a9:14:44:03:
         00:d3:fc:35:cc:d1:4b:c7:f1:a5:bc:6d:7a:c1:07:01:31:a3:
         25:ae:36:72:43:9e:c0:6c:ec:f9:76:67:7b:99:10:37:1d:97:
         b0:af:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:23 2025 by rpki-client