Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137372e34372e3139362e302f32332d3233203d3e20323632343730.roa
File:                     3137372e34372e3139362e302f32332d3233203d3e20323632343730.roa (raw, json)
Hash identifier:          Rob7kNHHgB/pdNkk5o2iEpsm+EQv+F0Gy4cJlAsBcDg=
Subject key identifier:   BF:32:9E:26:31:38:A5:DD:11:2C:95:2B:E9:F2:BF:0A:F9:37:48:7D
Certificate issuer:       /CN=970837BD94B7C2456C803FB74190973C3A36E88E
Certificate serial:       1AC9C388E1C7946C1D5608E506F59F028536B072
Authority key identifier: 97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137372e34372e3139362e302f32332d3233203d3e20323632343730.roa
Signing time:             Sat 26 Jul 2025 10:33:47 +0000
ROA not before:           Sat 26 Jul 2025 10:28:47 +0000
ROA not after:            Sat 25 Jul 2026 10:33:47 +0000
asID:                     262470
IP address blocks:        177.47.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl
                          rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 21:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c9:c3:88:e1:c7:94:6c:1d:56:08:e5:06:f5:9f:02:85:36:b0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970837BD94B7C2456C803FB74190973C3A36E88E
        Validity
            Not Before: Jul 26 10:28:47 2025 GMT
            Not After : Jul 25 10:33:47 2026 GMT
        Subject: CN=BF329E263138A5DD112C952BE9F2BF0AF937487D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:97:68:ba:27:81:cc:a4:97:7d:4f:59:8f:
                    f4:29:ef:2c:ec:86:f4:2d:0c:d7:b4:cd:88:77:23:
                    52:f0:62:6e:0a:8b:88:1e:29:89:99:13:05:7c:5f:
                    11:e7:02:00:fb:19:fc:46:41:99:d8:eb:80:08:70:
                    b6:a2:cc:18:01:d1:d3:4f:92:57:88:c9:f1:be:4b:
                    fb:0b:e1:31:d0:70:b1:c9:c0:c0:01:31:f5:cc:be:
                    4c:4e:d4:47:7b:f3:45:42:80:48:8e:f8:45:25:e8:
                    e4:4b:14:2b:6f:37:5a:b9:07:8b:1c:8e:97:47:69:
                    6a:14:c2:ff:72:8c:0d:8a:98:61:89:1b:3f:fb:86:
                    da:c8:20:e4:bd:ed:01:50:7c:b7:c4:97:f9:55:58:
                    98:9d:f8:b7:b6:77:91:d0:95:8e:f1:18:39:d8:1c:
                    60:92:f5:a5:a4:16:e5:5e:fd:15:37:b3:5b:03:1a:
                    8f:b4:2b:6d:ce:f6:20:2e:1c:8f:68:3a:bd:98:7b:
                    05:16:f6:e8:53:6c:c5:3e:30:a7:f1:a6:df:f5:17:
                    c7:fe:39:28:6e:6b:64:e7:12:f1:5d:f6:df:5c:a7:
                    5b:cb:70:c7:12:f8:8f:7f:0d:f5:69:04:fe:d2:2b:
                    b6:44:50:73:52:1c:cb:db:09:b2:c1:88:22:5a:09:
                    be:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:32:9E:26:31:38:A5:DD:11:2C:95:2B:E9:F2:BF:0A:F9:37:48:7D
            X509v3 Authority Key Identifier:
                keyid:97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137372e34372e3139362e302f32332d3233203d3e20323632343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:48:b6:d8:a9:eb:86:b6:e9:db:fc:cf:e6:3a:73:34:23:85:
         f4:3a:96:b2:18:4e:82:b1:86:b4:0e:43:68:6a:2d:d9:96:c1:
         78:d9:1e:f0:8d:3f:aa:cd:a4:0a:f7:75:f8:ac:bd:4a:14:ec:
         c7:c4:3e:63:4c:d0:72:26:f6:61:20:5d:ad:05:64:8f:1e:ac:
         8b:b1:d6:10:a0:1a:80:51:d8:6c:88:12:79:a8:5a:e4:94:f7:
         c0:a9:c2:da:ad:cf:fe:24:a4:1f:cd:73:a7:06:8d:b6:d3:29:
         06:bd:e0:4b:2f:b1:71:73:e6:98:43:c6:bd:68:e8:45:12:c0:
         03:fe:b7:21:a5:d2:7c:41:d3:4a:d9:d8:45:14:e0:7b:30:a3:
         63:97:11:a9:25:05:e4:5e:28:5a:63:70:c2:86:24:10:31:9d:
         6f:91:f8:e0:6d:c0:dd:c1:66:3d:17:c8:31:7b:37:21:a1:07:
         29:83:05:43:10:b6:fb:a2:eb:27:72:5f:e7:ea:74:d0:fa:7c:
         02:86:36:d9:fb:e7:ec:80:40:56:5a:1b:9a:0a:d1:87:9e:58:
         5d:f5:53:13:62:5f:0d:73:bb:3d:9b:d5:06:e9:0e:1f:df:ba:
         3a:92:71:b9:56:76:14:04:88:40:ee:43:ec:64:91:a2:3e:f5:
         37:62:4c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:02:43 2025 by rpki-client