Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e32302e3136302e302f32302d3234203d3e20323730383134.roa
File:                     3137372e32302e3136302e302f32302d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          ToIakVpfhav5C4BTdwTxY90wH83lIE6QUXgbKG0lIvc=
Subject key identifier:   BE:30:87:60:6F:75:DA:2E:E7:6F:46:9A:A3:7C:71:7F:81:ED:2E:6B
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       2F0DD0B0565D9DF151969B34E7D566CB16074EC3
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e32302e3136302e302f32302d3234203d3e20323730383134.roa
Signing time:             Mon 27 Oct 2025 17:06:41 +0000
ROA not before:           Mon 27 Oct 2025 17:01:41 +0000
ROA not after:            Mon 26 Oct 2026 17:06:41 +0000
asID:                     270814
IP address blocks:        177.20.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0d:d0:b0:56:5d:9d:f1:51:96:9b:34:e7:d5:66:cb:16:07:4e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Oct 27 17:01:41 2025 GMT
            Not After : Oct 26 17:06:41 2026 GMT
        Subject: CN=BE3087606F75DA2EE76F469AA37C717F81ED2E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7a:c8:f4:b2:b6:e0:c6:dd:58:2c:8f:07:24:
                    e7:57:dc:ab:ff:70:8d:30:ac:42:df:52:a4:34:ab:
                    6c:33:ac:2a:46:3b:5f:c1:b2:7e:9c:fb:d1:64:95:
                    95:0a:95:93:8a:e8:9f:3e:05:15:ce:f7:09:bf:bc:
                    db:fc:45:a4:8d:c0:15:56:80:b2:16:5f:ae:61:3d:
                    f3:7b:e2:18:c9:1d:c0:11:ad:87:bd:fe:82:74:df:
                    1b:d4:b8:be:18:76:99:8b:31:84:89:2c:54:a4:af:
                    f5:bb:b8:e0:10:35:ac:57:19:45:73:8b:5c:5a:30:
                    3f:e0:47:85:1e:35:c1:2f:a3:dc:0a:ee:66:8d:0f:
                    ac:2f:78:87:79:1e:86:cf:76:69:e1:42:63:ef:52:
                    5d:e2:88:8d:44:e0:ae:01:3a:78:3a:fe:42:dd:ff:
                    5a:4b:b5:08:19:28:2d:11:93:0a:38:3f:91:26:fa:
                    9a:c1:62:ef:1c:f8:60:5b:39:f2:f8:3a:24:54:52:
                    22:15:f2:8c:58:68:c7:d1:ea:68:ed:da:72:7a:c6:
                    6d:b8:22:c4:5c:2e:2e:ac:0b:ed:28:88:ac:5e:fe:
                    bc:83:8e:97:2e:e5:25:1b:01:cb:1a:f4:d2:28:13:
                    8e:27:4a:77:18:4b:3f:97:7f:4b:d7:1f:e9:8b:22:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:30:87:60:6F:75:DA:2E:E7:6F:46:9A:A3:7C:71:7F:81:ED:2E:6B
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e32302e3136302e302f32302d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:ad:ba:2d:9d:5f:03:e6:fd:c3:84:f5:c0:a3:ba:8f:71:2b:
         56:c6:5b:e5:53:30:01:34:aa:b8:49:2e:b2:61:f0:db:15:73:
         c1:67:1f:46:6c:94:2e:04:33:35:09:19:94:4c:fa:85:1d:4c:
         a2:44:ba:f5:d3:7b:c0:66:d8:2b:0f:63:7e:1c:7c:a4:91:2e:
         fc:10:e3:18:48:c2:50:17:fa:7c:2b:b2:f6:e2:1c:fe:08:44:
         75:d6:56:f6:bb:5c:1b:1a:65:74:59:83:1c:fc:5a:b6:46:92:
         d9:7a:eb:27:2c:bf:d0:75:51:56:ea:89:8d:10:79:6a:9e:9b:
         ca:d2:87:fc:58:47:93:92:e9:79:be:eb:40:7d:b8:9b:fc:8b:
         39:94:17:2a:58:da:f0:89:4f:46:52:92:73:4b:6f:76:2f:72:
         32:6c:67:73:86:9b:bc:fc:e4:2b:42:65:b9:4d:79:fa:e9:bd:
         7c:b3:70:2e:1a:a8:66:aa:19:cb:22:7a:a6:5a:cb:8b:25:1f:
         44:ae:98:e8:d4:23:9f:9e:a2:18:13:c0:2d:4f:c9:f0:67:bf:
         07:64:f5:da:08:af:2f:1d:b9:ed:0e:9d:cc:66:95:92:9b:65:
         82:e1:b2:ed:0d:ec:93:d7:a6:9c:eb:19:16:7c:3c:d3:bb:4d:
         95:c0:32:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:31:58 2025 by rpki-client