Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3137372e3232312e3132302e302f32312d3234203d3e20323635393733.roa
File:                     3137372e3232312e3132302e302f32312d3234203d3e20323635393733.roa (raw, json)
Hash identifier:          +8PwIDDgH37vYrSW+QvLSv7+k5hMeJCAiqKkD8Ko1/M=
Subject key identifier:   D9:DB:6E:16:B8:9B:36:BB:57:FC:A1:B6:FF:26:38:17:5A:C1:9A:68
Certificate issuer:       /CN=57DB3581E707C22BBA17B8AD12B81942965761D7
Certificate serial:       6BA9250ABEAD998DB8995D8057E14A38E5B0FD64
Authority key identifier: 57:DB:35:81:E7:07:C2:2B:BA:17:B8:AD:12:B8:19:42:96:57:61:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3137372e3232312e3132302e302f32312d3234203d3e20323635393733.roa
Signing time:             Wed 30 Jul 2025 14:04:05 +0000
ROA not before:           Wed 30 Jul 2025 13:59:05 +0000
ROA not after:            Wed 29 Jul 2026 14:04:05 +0000
asID:                     265973
IP address blocks:        177.221.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.crl
                          rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 13:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a9:25:0a:be:ad:99:8d:b8:99:5d:80:57:e1:4a:38:e5:b0:fd:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57DB3581E707C22BBA17B8AD12B81942965761D7
        Validity
            Not Before: Jul 30 13:59:05 2025 GMT
            Not After : Jul 29 14:04:05 2026 GMT
        Subject: CN=D9DB6E16B89B36BB57FCA1B6FF2638175AC19A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:96:08:57:ae:85:cd:2e:3a:7a:48:94:f7:
                    0b:9e:74:64:54:87:b5:81:a6:90:f9:09:2b:7b:4e:
                    4c:13:eb:5a:b6:89:ee:b0:4e:c0:85:70:49:ea:cd:
                    54:43:a9:12:38:7a:4d:a6:5b:51:4e:07:a3:59:0b:
                    f6:b0:8e:d3:ad:af:b9:11:4e:e7:94:6c:5a:79:b6:
                    b1:20:87:2e:6b:91:fd:37:3a:dc:28:d5:fb:be:7c:
                    b3:bb:14:89:ff:14:0d:10:11:e2:49:3d:c3:f0:00:
                    57:e6:1c:ab:ce:ac:5a:5c:0e:3f:39:cf:7d:04:bd:
                    02:e7:50:d3:34:95:5d:66:9e:08:4c:bb:98:17:10:
                    8d:d7:f5:33:11:98:25:28:f0:f6:ab:b7:39:38:21:
                    37:ae:00:13:52:59:a3:54:71:29:ef:e2:d2:f9:8d:
                    c6:99:90:64:95:42:9a:c2:65:f4:26:3d:55:9c:b3:
                    4c:65:61:ff:02:ed:a1:b9:70:82:a2:c8:76:b0:b6:
                    f1:66:4d:6b:00:84:25:cd:d8:d7:75:f7:23:26:b6:
                    37:87:9d:aa:6b:8c:bb:05:6e:b9:57:ab:70:8c:59:
                    ed:24:a6:f5:86:2f:ae:17:4b:da:db:fc:b5:62:c5:
                    c1:f6:ca:75:12:ac:f3:a1:cb:73:9d:d9:86:d4:6e:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DB:6E:16:B8:9B:36:BB:57:FC:A1:B6:FF:26:38:17:5A:C1:9A:68
            X509v3 Authority Key Identifier:
                keyid:57:DB:35:81:E7:07:C2:2B:BA:17:B8:AD:12:B8:19:42:96:57:61:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3137372e3232312e3132302e302f32312d3234203d3e20323635393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:1a:ce:f7:5a:f8:2c:d2:ed:2a:cb:cd:40:5a:da:f7:26:9e:
         3c:ee:01:a0:85:ca:e8:4f:5f:b9:e9:2e:83:71:aa:42:6f:60:
         d0:07:c5:53:cc:22:46:11:ec:09:fc:9e:5f:3e:9d:61:de:e8:
         3a:44:34:54:d2:c9:8d:89:cd:5c:7f:85:fd:2b:5f:8c:59:5d:
         f1:d0:f8:ca:a9:e0:12:b9:0e:6b:ce:11:e2:1a:2a:86:02:77:
         5c:52:38:1e:4d:3b:97:27:80:ba:0c:0f:fb:1a:40:89:e4:65:
         23:4a:e0:9d:b2:3d:5b:53:09:6b:20:e0:2c:bd:b0:ea:34:62:
         ea:89:54:10:40:27:3a:e3:6e:74:51:1e:fe:b9:61:7f:57:6c:
         8c:59:8f:3e:32:4e:1d:72:d4:a3:7c:83:a6:bc:14:65:f3:f8:
         4b:42:cd:45:1e:4e:a0:f2:c9:81:55:2b:4c:71:8a:2c:74:cc:
         f2:a0:dc:95:d7:c7:3c:c3:f6:ba:b2:f2:48:e9:0a:6f:e0:1f:
         e6:92:ac:a6:6a:83:ef:e6:4b:17:bb:2a:8a:1f:36:de:d0:59:
         bf:e2:6a:ed:e8:82:aa:1a:23:bf:b7:4e:72:2d:04:80:cf:d2:
         8c:13:f6:1c:17:68:8d:a2:19:47:e4:f3:29:79:58:da:da:c4:
         4c:60:52:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:38:52 2025 by rpki-client