Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137372e34372e3230302e302f32332d3233203d3e20323632343730.roa
File:                     3137372e34372e3230302e302f32332d3233203d3e20323632343730.roa (raw, json)
Hash identifier:          eKi+FDbyr4RXRXQLVGpQp/Dp7/rwgJmQg6DLnPnWL28=
Subject key identifier:   3E:FC:E7:2C:C1:B3:1B:3D:E3:F4:25:85:09:07:1C:26:54:D7:BF:D7
Certificate issuer:       /CN=970837BD94B7C2456C803FB74190973C3A36E88E
Certificate serial:       75CC7BCE0E04ABA3BE77E2B5296E811839B1F4BE
Authority key identifier: 97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137372e34372e3230302e302f32332d3233203d3e20323632343730.roa
Signing time:             Sat 26 Jul 2025 10:34:02 +0000
ROA not before:           Sat 26 Jul 2025 10:29:02 +0000
ROA not after:            Sat 25 Jul 2026 10:34:02 +0000
asID:                     262470
IP address blocks:        177.47.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl
                          rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 21:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cc:7b:ce:0e:04:ab:a3:be:77:e2:b5:29:6e:81:18:39:b1:f4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970837BD94B7C2456C803FB74190973C3A36E88E
        Validity
            Not Before: Jul 26 10:29:02 2025 GMT
            Not After : Jul 25 10:34:02 2026 GMT
        Subject: CN=3EFCE72CC1B31B3DE3F4258509071C2654D7BFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:11:8d:d8:b8:7d:04:68:40:71:a2:01:92:
                    e7:92:7e:ca:40:6a:48:24:65:8c:e7:1a:2f:5e:53:
                    e5:69:fa:cc:2e:af:e7:37:26:3e:c2:98:9b:5d:b3:
                    b9:7e:42:18:c1:ae:97:93:0b:7b:67:71:75:55:54:
                    7c:51:c0:ad:33:c6:48:0f:f9:29:1e:6c:03:d3:56:
                    b6:5f:70:cb:21:a3:e3:5d:7d:34:71:ce:4e:30:af:
                    7b:f1:e9:21:52:8b:3c:0b:2b:ff:11:dd:29:36:65:
                    aa:68:d6:09:28:5a:18:e0:11:da:7a:ef:70:b0:c1:
                    50:1a:6f:93:b8:ea:c0:23:80:33:6f:2d:50:71:80:
                    34:82:4d:4e:18:5e:95:6b:f9:61:28:b1:29:64:0c:
                    c8:99:90:d6:72:30:12:56:01:50:35:38:07:c7:32:
                    68:b5:d8:3c:a3:70:e7:17:26:25:2e:da:20:29:ff:
                    2e:7e:ae:06:f4:8e:f7:92:c9:1f:f2:56:84:61:0a:
                    b9:e0:89:05:a9:0a:ac:f3:74:07:6c:cc:5a:ff:94:
                    d5:f4:04:33:8a:ac:0e:a6:07:a1:4c:a8:f8:6e:48:
                    df:2b:1c:7a:ac:5d:bb:3a:f9:9e:72:77:75:c0:42:
                    7b:86:a4:fc:8c:ac:80:56:7d:02:4a:f9:e6:bf:69:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FC:E7:2C:C1:B3:1B:3D:E3:F4:25:85:09:07:1C:26:54:D7:BF:D7
            X509v3 Authority Key Identifier:
                keyid:97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137372e34372e3230302e302f32332d3233203d3e20323632343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:dd:ec:3f:0f:4c:6a:28:86:f4:6e:de:78:bf:c2:36:27:f3:
         e1:6e:7d:8b:c7:8f:f1:50:93:31:8e:7f:8e:1a:cc:19:ab:d0:
         52:2f:ea:3c:e6:4f:8a:3c:1b:2f:1b:df:bb:4c:01:9d:d0:52:
         51:c6:82:c6:84:50:78:5d:68:fb:16:20:63:aa:4b:06:c4:b4:
         3a:24:f4:47:a9:a7:31:5b:80:e0:ba:0c:05:31:0a:c6:9b:28:
         e9:79:14:21:b3:a6:d9:63:f5:40:3a:af:50:bc:8d:46:6f:e9:
         8a:b6:dd:b2:45:8d:0f:b1:58:eb:af:c4:34:09:fc:b3:a9:dc:
         a3:10:90:80:0f:67:ea:63:ec:9d:1e:f0:ae:20:f6:3d:a0:8b:
         45:e6:35:bb:3c:31:c9:e9:09:c1:0b:ec:8a:12:92:95:8d:6e:
         b0:c9:19:cb:51:db:b8:56:54:e4:7b:d5:7d:7c:85:df:ea:24:
         bf:bc:82:0a:46:23:d4:16:b8:db:46:8b:50:19:0d:61:0e:7c:
         9f:d6:10:c0:a5:8f:2a:40:66:8c:6a:01:e9:25:76:4a:72:af:
         38:04:be:fe:8d:d4:a6:f7:0c:d9:05:76:8d:cb:66:6e:13:65:
         f8:41:66:c9:c4:a5:7e:31:4a:cc:a9:2a:ad:28:9d:53:a5:d1:
         e0:93:a8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:51:06 2025 by rpki-client