Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234332e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3139302e3234332e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          tcQCzZMH3OwqnOaypvNNpGtPXsj4yJb/6a9IfKKYeA0=
Subject key identifier:   11:5B:8A:90:0B:AB:5C:5B:BE:DB:94:55:BD:45:63:B6:B0:0C:D0:EF
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       73A55D4D4050C834DA0CCEA19D1EA0A512263AE3
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234332e302f32342d3234203d3e20323632333933.roa
Signing time:             Sat 26 Jul 2025 19:12:40 +0000
ROA not before:           Sat 26 Jul 2025 19:07:40 +0000
ROA not after:            Sat 25 Jul 2026 19:12:40 +0000
asID:                     262393
IP address blocks:        177.190.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 12:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a5:5d:4d:40:50:c8:34:da:0c:ce:a1:9d:1e:a0:a5:12:26:3a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Jul 26 19:07:40 2025 GMT
            Not After : Jul 25 19:12:40 2026 GMT
        Subject: CN=115B8A900BAB5C5BBEDB9455BD4563B6B00CD0EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:35:2a:ec:1e:31:72:d0:4d:0d:05:e3:f3:d9:
                    51:b3:1d:6c:89:9c:bc:b2:fd:70:b1:67:be:9e:fb:
                    53:2a:93:dd:ec:6a:f6:22:4d:3b:45:72:fc:44:c5:
                    da:95:d0:15:42:0b:2b:8a:31:14:20:09:68:f6:10:
                    df:d9:d6:95:19:5d:ac:ff:5a:bb:75:ec:70:33:e1:
                    69:b7:02:59:72:e4:2a:cf:17:61:f3:ca:a1:7c:f2:
                    9a:32:eb:f2:e2:90:02:13:61:c9:db:63:58:d7:46:
                    b5:08:f9:44:17:dc:28:cb:6a:a5:3b:0d:0c:ef:ba:
                    f2:e3:c2:9f:81:cd:0c:13:5e:42:10:10:d0:38:cd:
                    23:26:93:a0:ba:27:03:7c:0b:6c:82:1e:b5:31:6c:
                    32:5d:ac:18:63:7a:49:d4:01:19:2a:61:f8:57:79:
                    5c:45:55:f9:5b:4d:9c:cc:80:8f:9b:05:89:fc:9d:
                    3e:ee:ce:fb:58:b5:3e:6c:a8:da:45:03:1a:61:8a:
                    c1:75:5d:cb:69:1b:dd:a7:11:26:8f:33:32:fc:42:
                    db:0a:55:e9:ee:05:b5:34:5b:e1:0f:08:35:d5:6c:
                    82:7b:cd:0d:40:b4:1c:05:a5:49:3d:71:3c:69:e7:
                    96:b1:93:eb:b3:8d:39:07:98:7b:8e:20:b4:97:a3:
                    d5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5B:8A:90:0B:AB:5C:5B:BE:DB:94:55:BD:45:63:B6:B0:0C:D0:EF
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234332e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:01:42:26:d6:91:5f:d8:54:ac:ef:12:b4:c5:a8:09:71:8c:
         a9:e2:9e:20:23:7d:58:cc:5d:05:9c:35:53:a4:38:3a:f7:f3:
         a1:98:24:5e:d2:f3:23:54:4f:18:20:9e:56:63:34:24:8b:16:
         91:19:8a:1f:ec:36:bf:53:51:a6:a0:f3:d5:bf:ff:8f:b3:1d:
         cf:a5:5e:cb:1d:e4:88:bd:05:93:b4:f2:e6:ce:07:78:64:87:
         5a:5e:cd:16:94:14:cb:71:99:59:e2:fe:f1:1d:53:dd:d8:9e:
         b0:1f:a0:0e:a8:44:d2:5f:fa:b9:f5:8a:16:e5:9b:05:74:ed:
         ff:4e:6b:4e:a9:46:c6:17:ff:8b:3c:b9:0b:5f:e1:37:98:61:
         84:b1:fc:d2:59:f9:ee:2b:80:95:0a:ba:87:fe:4d:b4:9a:69:
         71:34:63:17:f5:26:2b:6b:b3:a5:3e:b3:6b:f2:08:2e:49:b4:
         12:a0:06:ea:f9:fa:71:f6:38:e2:4c:24:f1:13:69:d6:46:4a:
         f9:95:50:a5:38:28:56:9c:d6:f7:16:b5:3d:b9:f9:11:bc:ab:
         9e:d7:ae:20:1f:9b:ab:d9:81:59:cd:71:28:6b:ca:7b:d7:d0:
         e3:7c:8d:c9:4e:a7:5f:0e:28:28:bd:eb:36:db:1d:61:24:e8:
         d3:b8:77:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:43:55 2025 by rpki-client