Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32322d3234203d3e20323730353936.roa
File:                     3138372e31372e3133362e302f32322d3234203d3e20323730353936.roa (raw, json)
Hash identifier:          81QbIdPb4GCXsMw1GsYHIJ3+61fHca0xKGdkwzxLbP4=
Subject key identifier:   D7:03:EC:49:3D:68:55:93:4F:41:0C:2F:67:49:19:C9:0D:34:C8:63
Certificate issuer:       /CN=7F46E725B7708034062721804237B31B8C88616E
Certificate serial:       29FAE99B3D9BE452E9346BE2884A8D786476C8B6
Authority key identifier: 7F:46:E7:25:B7:70:80:34:06:27:21:80:42:37:B3:1B:8C:88:61:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F46E725B7708034062721804237B31B8C88616E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32322d3234203d3e20323730353936.roa
Signing time:             Mon 28 Jul 2025 16:46:33 +0000
ROA not before:           Mon 28 Jul 2025 16:41:33 +0000
ROA not after:            Mon 27 Jul 2026 16:46:33 +0000
asID:                     270596
IP address blocks:        187.17.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/7F46E725B7708034062721804237B31B8C88616E.crl
                          rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/7F46E725B7708034062721804237B31B8C88616E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F46E725B7708034062721804237B31B8C88616E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 03:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:fa:e9:9b:3d:9b:e4:52:e9:34:6b:e2:88:4a:8d:78:64:76:c8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F46E725B7708034062721804237B31B8C88616E
        Validity
            Not Before: Jul 28 16:41:33 2025 GMT
            Not After : Jul 27 16:46:33 2026 GMT
        Subject: CN=D703EC493D6855934F410C2F674919C90D34C863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:75:62:18:b5:da:6d:3d:63:48:45:70:c1:ed:
                    1e:48:6a:b8:f8:50:93:2a:21:dd:77:dd:ba:48:7d:
                    cb:96:60:af:ee:ae:84:34:15:5f:65:e0:1e:9c:83:
                    73:70:ba:3f:80:fa:da:d1:f1:10:0d:74:25:06:eb:
                    72:c7:17:bc:e6:92:ad:60:2f:19:60:13:65:bf:d9:
                    e7:72:b4:16:26:6e:1f:c2:d6:5a:90:58:6c:54:b4:
                    e6:d2:d0:77:95:c3:37:28:83:22:68:72:c2:19:20:
                    59:7e:54:e1:50:96:dd:df:cf:d9:01:74:0f:3b:44:
                    a5:a8:84:d3:e1:c7:bb:25:b8:9b:b6:ba:e6:02:9e:
                    b4:20:d7:00:35:54:a7:a2:29:20:4d:ff:73:cd:0c:
                    f6:9a:05:5c:6f:f1:8a:00:33:a0:2b:ec:28:86:57:
                    35:56:35:c6:f5:1d:b8:e4:ae:94:6c:a1:2c:87:b1:
                    6d:ba:69:39:07:d6:b6:14:8d:43:55:e9:1f:ca:35:
                    8c:73:ac:5c:06:fe:51:9e:43:14:2d:90:87:14:5f:
                    7f:a8:21:cd:f7:77:97:57:90:a0:44:cf:5b:7c:19:
                    bf:c2:2a:7d:15:ce:3f:7f:7a:c3:be:6d:04:1d:d0:
                    ec:e3:e4:01:d0:b5:10:5c:a9:84:ba:1d:3d:b5:b7:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:03:EC:49:3D:68:55:93:4F:41:0C:2F:67:49:19:C9:0D:34:C8:63
            X509v3 Authority Key Identifier:
                keyid:7F:46:E7:25:B7:70:80:34:06:27:21:80:42:37:B3:1B:8C:88:61:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/7F46E725B7708034062721804237B31B8C88616E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F46E725B7708034062721804237B31B8C88616E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32322d3234203d3e20323730353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:c7:b1:2e:6a:11:7b:ba:6f:7a:93:cb:8d:97:d5:90:ce:35:
         56:18:2e:c6:be:a9:91:b9:f1:1f:fe:56:1c:fe:22:1e:0b:53:
         fd:88:99:c5:85:ad:4d:2f:b8:91:f8:e3:95:e8:3b:eb:20:59:
         be:cb:cd:ca:39:57:be:23:88:94:e1:42:50:3f:62:80:fc:34:
         49:4c:f5:38:88:bb:1b:78:a9:e0:15:d3:a4:84:27:11:09:17:
         b3:ae:b6:ce:14:7d:50:35:1b:2c:a5:52:ec:f3:bb:80:4b:f7:
         65:c8:10:f2:2a:06:40:b5:a4:b9:43:8d:c6:41:06:a5:56:f9:
         d8:f2:36:ba:57:c0:b1:31:1c:7f:cd:a4:c5:fc:89:3d:10:fb:
         80:77:58:ff:e1:4c:c0:27:f4:08:54:c5:d5:3f:5c:7c:3d:4a:
         18:8a:6c:d3:0c:f0:ed:1b:c8:fe:f2:eb:c7:e6:08:7f:f8:9f:
         c9:ca:74:7a:83:44:bf:76:3b:2e:23:d2:d5:a9:a7:dd:56:32:
         53:45:8f:f2:52:10:e8:e6:08:f7:01:5c:25:29:ef:8a:71:66:
         ab:e7:0e:2c:59:5f:95:c4:f9:7b:fa:26:94:a0:38:fb:62:bb:
         a3:41:71:6f:7a:d8:1f:8a:6c:bf:cb:39:59:59:6b:f7:ed:b3:
         7f:3c:a2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:08 2025 by rpki-client