Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234322e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3139302e3234322e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          7wxYt9ygikKP9PZSdWrnUf2+El2/ik2bYxtE0EzlIaw=
Subject key identifier:   6D:C2:F7:57:17:50:34:D1:7E:68:A5:9A:41:14:F8:0B:79:0D:11:62
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       7EEC2B4866932372317401605771AECC4F08C8FA
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234322e302f32342d3234203d3e20323632333933.roa
Signing time:             Sat 26 Jul 2025 20:12:41 +0000
ROA not before:           Sat 26 Jul 2025 20:07:41 +0000
ROA not after:            Sat 25 Jul 2026 20:12:41 +0000
asID:                     262393
IP address blocks:        177.190.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 01:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ec:2b:48:66:93:23:72:31:74:01:60:57:71:ae:cc:4f:08:c8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Jul 26 20:07:41 2025 GMT
            Not After : Jul 25 20:12:41 2026 GMT
        Subject: CN=6DC2F757175034D17E68A59A4114F80B790D1162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:5f:a7:f4:c5:4e:09:f1:0a:18:37:8c:31:
                    bd:75:a3:cf:67:a0:5a:95:19:a9:60:52:e3:f8:96:
                    31:b7:99:63:36:8f:8e:76:b1:4a:7b:4c:58:2b:d5:
                    c4:c7:93:6f:69:c8:cc:e2:99:f4:e2:fc:7c:ee:e9:
                    bf:c3:a9:c9:db:01:56:16:26:dd:e3:f8:ac:a9:1d:
                    b8:a3:ed:d6:5d:99:93:15:4a:ad:46:f4:ed:ac:72:
                    5c:6f:cb:77:d8:c8:f3:40:1a:a4:f9:cd:fe:77:59:
                    4d:35:57:e1:fd:a2:67:63:5a:04:ad:aa:7a:d8:8a:
                    97:63:a5:53:82:07:29:9f:eb:0a:7e:bb:fb:d3:fa:
                    52:b1:8c:e5:0f:c3:5b:7b:e2:f3:4b:97:cb:92:7c:
                    a3:c7:af:39:36:37:28:8f:64:6a:3d:e2:d5:c4:e6:
                    0b:37:ff:89:26:f6:d7:83:bf:74:8a:8a:c9:0a:2e:
                    a8:42:30:23:5f:ea:5c:60:66:b8:ed:58:bd:56:53:
                    ab:17:de:5d:79:cb:db:5b:7e:63:43:2d:17:93:db:
                    0a:33:eb:79:9f:bd:8f:f6:77:ca:9d:13:b6:68:6d:
                    73:22:d3:b4:86:8a:12:96:8d:72:aa:49:db:4d:d4:
                    09:df:39:fc:6a:01:a3:92:e4:de:3c:e9:85:3a:73:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C2:F7:57:17:50:34:D1:7E:68:A5:9A:41:14:F8:0B:79:0D:11:62
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234322e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:07:e6:97:6a:55:17:74:df:01:f1:90:cc:ac:63:27:79:82:
         3e:f3:a7:86:06:ad:0b:50:b9:56:35:64:3d:b0:ad:84:81:6f:
         46:86:d8:68:67:2f:ca:2c:f4:33:79:a9:6e:26:44:79:c8:45:
         4a:f3:9f:4f:c3:c9:a7:e3:4f:0f:ff:56:5e:82:cb:05:91:c5:
         9a:48:7b:9d:95:76:74:99:a5:08:6c:ee:e9:07:d0:df:a7:e0:
         33:69:c2:78:12:90:b2:e4:3a:f9:52:3a:cd:e1:d5:d6:84:3f:
         93:f7:d1:2a:3c:67:7c:20:23:17:a6:d4:68:4e:df:0f:5c:0a:
         46:da:6a:87:00:6a:15:0a:22:d9:9f:c5:1f:78:0d:5c:71:88:
         fa:53:0e:24:fc:0e:2e:cc:e5:81:dc:1d:a9:34:74:6e:8a:e1:
         43:73:27:fc:89:1b:91:74:df:7e:71:30:dd:8b:ae:bb:2c:96:
         87:3b:59:75:bc:71:de:aa:c9:b7:6d:bc:db:92:46:77:a4:80:
         2a:36:89:67:56:e2:2a:3e:df:dd:9e:0c:3c:48:d1:f9:d7:d1:
         fa:5a:66:9d:53:1e:3b:78:fd:eb:3f:7f:8e:36:58:fc:7d:1a:
         7a:9e:0f:94:c7:d9:98:f0:a5:56:df:2d:0f:9f:f7:f6:ea:c7:
         12:27:14:bc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfuwrSGaTI3IxdAFgV3GuzE8IyPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNTA3MjYyMDA3NDFaFw0yNjA3MjUyMDEyNDFaMDMxMTAvBgNV
BAMTKDZEQzJGNzU3MTc1MDM0RDE3RTY4QTU5QTQxMTRGODBCNzkwRDExNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwwl+n9MVOCfEKGDeMMb11o89n
oFqVGalgUuP4ljG3mWM2j452sUp7TFgr1cTHk29pyMzimfTi/Hzu6b/DqcnbAVYW
Jt3j+KypHbij7dZdmZMVSq1G9O2sclxvy3fYyPNAGqT5zf53WU01V+H9omdjWgSt
qnrYipdjpVOCBymf6wp+u/vT+lKxjOUPw1t74vNLl8uSfKPHrzk2NyiPZGo94tXE
5gs3/4km9teDv3SKiskKLqhCMCNf6lxgZrjtWL1WU6sX3l15y9tbfmNDLReT2woz
63mfvY/2d8qdE7ZobXMi07SGihKWjXKqSdtN1AnfOfxqAaOS5N486YU6cyDPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbcL3VxdQNNF+aKWaQRT4C3kNEWIwHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzEzNzM3MmUzMTM5MzAyZTMyMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALG+8jANBgkqhkiG9w0BAQsFAAOCAQEAgQfm
l2pVF3TfAfGQzKxjJ3mCPvOnhgatC1C5VjVkPbCthIFvRobYaGcvyiz0M3mpbiZE
echFSvOfT8PJp+NPD/9WXoLLBZHFmkh7nZV2dJmlCGzu6QfQ36fgM2nCeBKQsuQ6
+VI6zeHV1oQ/k/fRKjxnfCAjF6bUaE7fD1wKRtpqhwBqFQoi2Z/FH3gNXHGI+lMO
JPwOLszlgdwdqTR0borhQ3Mn/IkbkXTffnEw3YuuuyyWhztZdbxx3qrJt22825JG
d6SAKjaJZ1biKj7f3Z4MPEjR+dfR+lpmnVMeO3j96z9/jjZY/H0aep4PlMfZmPCl
Vt8tD5/39urHEicUvA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:49:20 2025 by rpki-client