Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e382e302f32312d3234203d3e20323634303936.roa
File:                     3230312e37372e382e302f32312d3234203d3e20323634303936.roa (raw, json)
Hash identifier:          HcLU1lYtLb6gZn1vYMYdpDlISJABdv++fZtgvCVuuf0=
Subject key identifier:   4E:31:12:9D:1B:D3:8B:FF:33:28:B6:DF:D7:FB:8F:5E:19:8A:F2:D7
Certificate issuer:       /CN=5DEB186CF64388E2EA129428AD0F6E42ED1F27D3
Certificate serial:       04ABEF877273AEAB244CBD72E1005398CC3A72EF
Authority key identifier: 5D:EB:18:6C:F6:43:88:E2:EA:12:94:28:AD:0F:6E:42:ED:1F:27:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DEB186CF64388E2EA129428AD0F6E42ED1F27D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e382e302f32312d3234203d3e20323634303936.roa
Signing time:             Thu 24 Jul 2025 11:53:44 +0000
ROA not before:           Thu 24 Jul 2025 11:48:44 +0000
ROA not after:            Thu 23 Jul 2026 11:53:44 +0000
asID:                     264096
IP address blocks:        201.77.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/5DEB186CF64388E2EA129428AD0F6E42ED1F27D3.crl
                          rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/5DEB186CF64388E2EA129428AD0F6E42ED1F27D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DEB186CF64388E2EA129428AD0F6E42ED1F27D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 20:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ab:ef:87:72:73:ae:ab:24:4c:bd:72:e1:00:53:98:cc:3a:72:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DEB186CF64388E2EA129428AD0F6E42ED1F27D3
        Validity
            Not Before: Jul 24 11:48:44 2025 GMT
            Not After : Jul 23 11:53:44 2026 GMT
        Subject: CN=4E31129D1BD38BFF3328B6DFD7FB8F5E198AF2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2b:52:e0:7d:e0:47:03:e0:fe:f3:f0:3f:8b:
                    fb:a9:bb:c9:c3:9f:f1:00:68:1e:e7:99:d1:e8:ef:
                    12:2a:9d:f0:33:e7:e0:9a:e1:e8:f6:34:7c:87:2d:
                    a4:26:37:7d:15:6f:14:84:16:b8:28:d1:9d:44:27:
                    42:96:98:ec:14:00:d9:c3:02:df:2c:a4:89:d9:f0:
                    b3:31:8b:ac:e9:2b:d9:82:0b:df:5c:6e:30:e1:e4:
                    75:ea:e5:22:7e:82:a5:d6:d6:27:9b:ee:34:7d:d9:
                    b4:c4:40:8c:cf:8d:d9:2e:c5:14:ed:4d:85:36:17:
                    7a:b8:16:f5:a7:52:db:7d:d2:be:9d:1e:dd:6e:65:
                    91:8c:2a:15:e2:28:57:b9:6c:38:dd:c5:5b:f1:6c:
                    de:a9:fe:a7:00:c7:3b:b4:56:95:c7:b2:88:eb:7a:
                    2d:07:33:af:fb:59:9d:a4:71:e9:44:03:e7:bb:d0:
                    96:e9:73:53:82:45:71:5a:e4:54:23:1b:04:e9:87:
                    3c:4a:e9:5c:e4:28:03:a1:be:d5:67:fc:92:bb:84:
                    ea:24:69:0f:97:02:8f:d6:f9:71:89:f0:73:8c:95:
                    d2:f0:5b:28:de:18:c1:eb:e8:16:99:5d:80:d3:a3:
                    d6:78:22:6e:95:7a:d8:91:ef:1c:6d:a3:ed:8a:85:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:31:12:9D:1B:D3:8B:FF:33:28:B6:DF:D7:FB:8F:5E:19:8A:F2:D7
            X509v3 Authority Key Identifier:
                keyid:5D:EB:18:6C:F6:43:88:E2:EA:12:94:28:AD:0F:6E:42:ED:1F:27:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/5DEB186CF64388E2EA129428AD0F6E42ED1F27D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DEB186CF64388E2EA129428AD0F6E42ED1F27D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/3230312e37372e382e302f32312d3234203d3e20323634303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:a7:14:ba:09:8b:af:aa:15:ef:17:85:42:88:9c:17:36:ea:
         fb:f5:d2:b2:5a:a1:37:50:f4:52:16:2a:df:0a:ac:4a:dc:26:
         30:8b:22:67:58:e9:a9:20:3b:87:b7:5b:23:5c:fd:5b:6f:fb:
         48:33:ed:b2:5e:f4:6e:9c:32:e6:44:d1:0d:06:bf:84:3c:90:
         46:f3:d4:30:7f:52:3a:9a:5a:da:f9:68:f3:56:d7:7c:9d:6e:
         9e:cf:4a:3c:1a:5a:df:10:92:8f:70:8e:e7:fb:c3:0b:67:48:
         79:29:64:06:3d:2c:1c:8d:e5:17:be:49:ae:e5:a1:31:d6:62:
         12:a6:88:f2:5a:18:46:8c:f8:3e:a6:a4:18:51:2e:07:fc:50:
         20:db:4a:dc:56:ec:0c:fa:1b:7b:ed:40:7d:a7:c6:af:9a:4a:
         93:98:d4:93:ee:a8:53:95:38:06:f1:e9:cd:1d:81:d7:d4:10:
         26:4b:ca:d2:f9:c3:31:1e:e4:5f:40:88:83:a7:c7:75:69:36:
         24:12:c5:85:e8:b9:2e:1c:c7:eb:41:38:55:be:ad:07:ff:e9:
         d7:1b:ea:f3:21:ea:af:13:7b:06:13:82:03:75:4f:8d:e3:da:
         66:bd:ae:19:a2:dd:a7:c7:e4:68:80:45:75:ab:06:26:2d:1b:
         60:d9:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:39:31 2025 by rpki-client