Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/3137372e31312e34302e302f32312d3234203d3e20323632323738.roa
File:                     3137372e31312e34302e302f32312d3234203d3e20323632323738.roa (raw, json)
Hash identifier:          KoU3eFALSjPGICMVCP1BxYv2pGWfiANI/PeIwmXTw7c=
Subject key identifier:   1A:9F:C5:54:04:AD:C7:5D:9E:7E:23:30:59:72:40:63:AC:06:CE:5D
Certificate issuer:       /CN=28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7
Certificate serial:       54B31DDD04E3ACA23EBBF73044091159B9C00BF7
Authority key identifier: 28:A1:4F:B4:8D:8F:61:99:B0:F3:C2:B5:E7:98:05:C2:8F:7C:FB:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/3137372e31312e34302e302f32312d3234203d3e20323632323738.roa
Signing time:             Thu 07 Aug 2025 15:16:25 +0000
ROA not before:           Thu 07 Aug 2025 15:11:25 +0000
ROA not after:            Thu 06 Aug 2026 15:16:25 +0000
asID:                     262278
IP address blocks:        177.11.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.crl
                          rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 14:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b3:1d:dd:04:e3:ac:a2:3e:bb:f7:30:44:09:11:59:b9:c0:0b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7
        Validity
            Not Before: Aug  7 15:11:25 2025 GMT
            Not After : Aug  6 15:16:25 2026 GMT
        Subject: CN=1A9FC55404ADC75D9E7E233059724063AC06CE5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:68:cd:91:e5:16:b1:19:0c:02:17:44:df:38:
                    bd:7e:bc:f4:64:cd:39:6e:e7:da:8a:a6:46:73:07:
                    a5:fb:3d:c0:31:32:54:f6:94:4b:d0:d8:50:ea:5c:
                    ae:98:f7:1c:21:77:98:81:52:07:1c:f5:20:c6:c4:
                    99:3d:47:6a:12:2a:47:e3:12:d4:1d:c0:b0:2d:0a:
                    e7:7d:43:bf:c6:92:44:02:bd:4b:f4:6f:1f:a0:65:
                    21:91:86:94:a8:78:45:5b:45:4d:74:66:15:ed:9d:
                    56:87:5b:81:d7:5b:f2:bc:9e:b4:d6:f7:ae:b5:17:
                    10:1c:04:2b:ad:61:9f:9d:28:61:d4:54:de:61:a4:
                    1d:85:9d:4b:b3:ff:0b:37:b7:a0:10:9b:13:0b:03:
                    b1:ce:4b:38:4f:8a:b9:7d:91:65:08:37:09:dc:b2:
                    0c:81:a5:1e:b1:cb:78:01:13:ac:ae:9f:5b:76:92:
                    2e:f1:31:5c:01:56:c4:49:41:a3:2c:e3:c0:cf:19:
                    5f:a6:b1:89:df:9b:c0:ca:62:46:46:6c:51:a7:ee:
                    d4:e9:0f:93:63:9d:cc:96:35:1b:52:43:06:0d:ff:
                    e2:35:7a:86:60:f0:b7:17:d3:26:b4:a2:c2:2c:88:
                    90:78:1d:26:a8:28:96:1f:d8:76:63:b6:50:9c:43:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9F:C5:54:04:AD:C7:5D:9E:7E:23:30:59:72:40:63:AC:06:CE:5D
            X509v3 Authority Key Identifier:
                keyid:28:A1:4F:B4:8D:8F:61:99:B0:F3:C2:B5:E7:98:05:C2:8F:7C:FB:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28A14FB48D8F6199B0F3C2B5E79805C28F7CFBC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gPDYjMDSV4zgy5cmLTykDRzxbvogLdyo5K6HdrTs7DF/0/3137372e31312e34302e302f32312d3234203d3e20323632323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:ae:08:5a:66:52:66:89:59:da:44:63:ac:70:8b:7b:13:10:
         53:84:c7:80:53:b7:1d:86:0e:b3:69:cb:cb:df:a6:1e:22:4d:
         64:bf:78:6b:f5:d6:81:94:b3:27:b5:47:e3:53:d8:27:c5:8a:
         27:b1:6c:34:eb:45:8e:cb:48:25:4c:19:f6:64:07:89:37:8c:
         95:99:c1:8e:33:12:e8:0c:2d:d2:6a:ff:8c:08:85:0b:9c:fc:
         4f:15:41:45:3d:ae:a4:80:1a:e9:eb:84:73:2a:cb:6a:1b:b0:
         3b:ad:af:b2:0b:69:7f:08:40:62:3a:05:97:07:9b:1e:db:74:
         ab:62:32:6c:23:ef:ad:1e:74:bf:bb:9f:e1:28:98:56:ee:36:
         53:2d:55:72:50:56:d1:67:39:77:28:95:e0:88:f4:2c:fd:a5:
         ba:2b:e5:34:ee:06:26:42:34:c7:82:dd:33:bb:9d:65:68:32:
         31:53:f0:4d:46:b5:70:71:d0:9d:44:4a:2d:40:d6:5c:eb:68:
         b1:2b:c7:ad:cb:44:a1:5c:85:7c:00:d2:8e:78:1f:de:10:33:
         57:4b:cd:a2:4a:72:e0:cb:f7:21:70:79:f2:b3:b4:f4:23:7e:
         a9:72:34:39:aa:1f:42:ab:b8:66:78:b7:e2:d4:84:46:bb:b2:
         0b:d1:19:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:31 2025 by rpki-client