Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137372e34372e3139362e302f32322d3232203d3e20323632343730.roa
File:                     3137372e34372e3139362e302f32322d3232203d3e20323632343730.roa (raw, json)
Hash identifier:          KDtmTPgX22TLsMXSs7Lo+TVUOniTxbxx57UtG9HbdTs=
Subject key identifier:   C4:94:EE:E5:A5:9E:03:53:70:87:1C:D1:6D:8C:65:1C:96:1D:3C:9E
Certificate issuer:       /CN=970837BD94B7C2456C803FB74190973C3A36E88E
Certificate serial:       064B12E26730727E1D6E751D0D55E9CBDB41F0B4
Authority key identifier: 97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137372e34372e3139362e302f32322d3232203d3e20323632343730.roa
Signing time:             Sat 26 Jul 2025 10:41:33 +0000
ROA not before:           Sat 26 Jul 2025 10:36:33 +0000
ROA not after:            Sat 25 Jul 2026 10:41:33 +0000
asID:                     262470
IP address blocks:        177.47.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl
                          rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 21:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4b:12:e2:67:30:72:7e:1d:6e:75:1d:0d:55:e9:cb:db:41:f0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970837BD94B7C2456C803FB74190973C3A36E88E
        Validity
            Not Before: Jul 26 10:36:33 2025 GMT
            Not After : Jul 25 10:41:33 2026 GMT
        Subject: CN=C494EEE5A59E035370871CD16D8C651C961D3C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:53:dc:82:bb:7c:c9:75:00:47:45:da:d2:65:
                    2c:31:e6:75:f4:55:9a:e8:11:10:d2:b9:dc:ca:10:
                    5c:29:58:fd:87:93:36:9a:54:24:35:4b:97:15:d8:
                    46:67:67:7e:62:db:a7:87:33:bd:3c:0f:25:a4:8e:
                    94:f7:9a:f3:40:15:0d:8e:1b:43:61:be:ab:42:57:
                    c5:a1:c7:a9:93:b0:dd:71:87:8e:6d:0a:2c:c7:e8:
                    2a:0e:71:80:c1:62:8b:1b:3c:8c:de:3c:e8:05:8c:
                    42:fa:52:11:4d:79:a1:12:e7:a6:9a:87:c3:3b:f4:
                    a6:26:b9:7e:1d:e2:7e:4f:26:5a:44:65:7c:a4:90:
                    9e:15:97:8c:92:ea:19:1a:fd:46:30:db:39:21:f6:
                    93:8b:79:a2:78:f3:ec:b4:4b:f2:f4:b1:cf:5b:c9:
                    6b:35:41:98:4c:36:72:8f:e4:12:bc:6c:ec:84:f4:
                    24:4c:36:36:7a:bc:70:76:e5:40:84:42:2a:40:ac:
                    16:18:30:71:30:eb:50:ac:20:5b:7a:4b:96:f9:df:
                    ca:42:41:cf:bb:78:c1:64:5c:5e:cb:3a:bf:10:ce:
                    87:bf:5c:c4:09:58:26:29:7f:81:63:2a:93:69:94:
                    0b:30:1b:8d:f2:c6:ec:10:20:85:a8:33:c3:54:2a:
                    00:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:94:EE:E5:A5:9E:03:53:70:87:1C:D1:6D:8C:65:1C:96:1D:3C:9E
            X509v3 Authority Key Identifier:
                keyid:97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137372e34372e3139362e302f32322d3232203d3e20323632343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:4c:ac:71:37:ea:90:f4:f9:54:8f:86:2d:b6:2d:30:d1:54:
         74:f4:4e:c6:5e:a1:a7:a7:c3:73:41:f3:e2:03:60:0b:59:1f:
         38:85:a9:f3:d5:77:b2:7d:41:26:73:ca:2e:a3:59:7c:ed:a4:
         b2:a0:46:ba:0f:64:fb:59:db:3e:05:44:fa:bf:a0:ff:7f:44:
         ac:fa:40:fc:e8:5f:e7:7e:54:87:be:7c:fd:8a:1a:5a:01:e5:
         4d:56:9f:75:b5:17:77:c0:78:ef:e9:f3:24:b2:44:68:a6:12:
         06:68:71:3c:1c:93:0e:b1:58:10:64:f6:96:b0:71:65:07:2f:
         9b:16:a5:48:86:ed:de:62:32:57:11:b5:56:21:85:93:bc:3e:
         bc:7e:d1:95:a2:33:b4:09:4e:f5:de:27:22:2d:ee:35:38:74:
         fd:88:61:05:cc:0b:f4:6f:31:5e:9f:aa:d7:41:80:59:77:38:
         80:79:b8:8a:be:81:cc:fa:3d:f1:00:0d:46:fe:ba:6c:b8:5c:
         6e:b1:60:17:76:fa:1b:f2:84:89:f7:08:83:b4:e4:a2:4d:51:
         3b:27:f5:69:e3:61:f7:44:b6:f4:e3:ac:ea:98:1c:6d:f3:77:
         4c:8d:1a:12:7a:ef:02:68:0c:62:e9:2c:5c:da:b9:39:d1:7f:
         c3:0f:c2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:38:51 2025 by rpki-client