Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39322e302f32322d3232203d3e20323633363237.roa
File:                     3137372e31322e39322e302f32322d3232203d3e20323633363237.roa (raw, json)
Hash identifier:          PC+G4ZphuzI2cZ1xwu+1yyS2+IXKsAb88ISBZ8fAm1U=
Subject key identifier:   32:02:E9:D8:56:56:88:AE:81:82:78:D8:54:2A:73:DC:51:81:D9:D9
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       13E64B94046670834C8BEDE26535515B3814F8CC
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39322e302f32322d3232203d3e20323633363237.roa
Signing time:             Wed 06 Aug 2025 14:20:16 +0000
ROA not before:           Wed 06 Aug 2025 14:15:16 +0000
ROA not after:            Wed 05 Aug 2026 14:20:16 +0000
asID:                     263627
IP address blocks:        177.12.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 20:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e6:4b:94:04:66:70:83:4c:8b:ed:e2:65:35:51:5b:38:14:f8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Aug  6 14:15:16 2025 GMT
            Not After : Aug  5 14:20:16 2026 GMT
        Subject: CN=3202E9D8565688AE818278D8542A73DC5181D9D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:08:48:f1:7b:96:26:45:b1:ba:ac:b2:af:ca:
                    aa:2f:33:e2:aa:04:77:c2:2b:e4:01:ae:be:aa:88:
                    36:80:6a:44:c8:d9:68:b3:2b:ae:2e:17:0b:2a:8e:
                    22:13:8f:7e:c0:a5:fa:ed:40:a4:e3:68:bd:d2:b1:
                    5f:72:00:a6:50:60:30:4e:d9:7c:8a:73:ce:e3:f8:
                    c8:cd:c8:bd:c6:fd:6f:da:07:38:f7:27:5d:7f:98:
                    28:db:a1:ac:fd:c8:b4:5b:53:59:2e:7c:b3:3a:68:
                    9c:84:2b:97:03:a8:dc:dc:18:e2:4d:32:59:4e:c5:
                    81:c3:7a:75:13:9a:7d:a5:f9:63:ef:94:75:c0:d4:
                    e3:16:1e:a2:35:20:70:3d:77:16:92:67:a4:8f:2a:
                    02:0f:56:ad:60:96:51:d9:26:95:78:a4:de:e0:4a:
                    36:88:9f:39:86:70:d5:78:51:3a:9c:39:e1:da:d7:
                    99:a1:ee:b7:1b:35:af:e6:20:cb:09:ce:41:7a:8f:
                    62:12:87:ad:72:6f:42:70:1f:38:29:f8:ba:d8:a0:
                    3e:eb:a6:2b:9d:95:08:7f:87:dc:16:ab:00:06:04:
                    16:57:de:7f:42:93:b7:17:00:06:23:e9:ce:2d:a3:
                    ab:99:85:5d:33:8f:fd:bc:9e:1c:10:1a:fd:de:95:
                    91:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:02:E9:D8:56:56:88:AE:81:82:78:D8:54:2A:73:DC:51:81:D9:D9
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39322e302f32322d3232203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:8f:d7:9b:9c:60:55:d6:ca:ff:bb:a8:d7:82:5b:56:3a:d7:
         65:00:f0:d9:56:38:6e:15:8d:81:24:f8:a5:74:e9:49:ff:e3:
         38:a4:d7:97:df:36:64:a7:c5:ef:cd:8b:b8:26:c6:bf:c0:a8:
         bd:60:76:b7:29:15:35:cb:25:08:56:f2:8e:81:b4:03:c4:0d:
         bd:f2:98:d6:d9:04:d1:b7:ee:01:04:96:4f:55:19:67:f2:72:
         58:bd:19:04:f9:2d:ef:f0:7e:55:5b:d2:e9:6d:83:0e:9b:9b:
         c5:ab:f9:b9:12:ae:25:56:74:78:d9:1a:dc:6d:fd:09:58:59:
         bf:fb:36:d5:1c:ef:39:94:f6:bc:49:d6:9f:5a:dd:eb:4e:ba:
         95:48:f6:d5:69:db:22:4f:18:26:45:e2:5f:72:c0:37:89:a4:
         a0:58:7a:b7:23:ed:45:e4:d6:73:af:ad:e4:5a:31:9a:20:2c:
         33:82:da:bc:f2:fe:18:7e:8f:65:b2:4b:14:77:29:bb:c2:ac:
         e3:eb:86:b4:2a:c6:0d:3b:09:96:a9:98:9a:ca:fe:30:94:46:
         2e:70:c7:a6:1e:94:db:ea:86:f4:71:8c:7d:b8:62:c4:e3:de:
         7a:87:ff:be:71:c8:b0:97:cc:4b:2b:45:7d:20:f4:34:0d:be:
         38:86:4a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:48:40 2025 by rpki-client