Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230362e302f32332d3234203d3e203532373830.roa
File:                     3137372e33392e3230362e302f32332d3234203d3e203532373830.roa (raw, json)
Hash identifier:          ZhQUZ8JiaSn/FayBTPG0IoS5a1EjxfGwj7ciJT7mgkY=
Subject key identifier:   4A:0A:DD:22:0C:F2:CC:3D:07:0B:0A:DA:98:7A:54:B2:BB:AB:15:22
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       08D6C51A623BB7FE6657531C39F27C8541216E6B
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230362e302f32332d3234203d3e203532373830.roa
Signing time:             Thu 31 Jul 2025 13:40:33 +0000
ROA not before:           Thu 31 Jul 2025 13:35:33 +0000
ROA not after:            Thu 30 Jul 2026 13:40:33 +0000
asID:                     52780
IP address blocks:        177.39.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 08:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d6:c5:1a:62:3b:b7:fe:66:57:53:1c:39:f2:7c:85:41:21:6e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Jul 31 13:35:33 2025 GMT
            Not After : Jul 30 13:40:33 2026 GMT
        Subject: CN=4A0ADD220CF2CC3D070B0ADA987A54B2BBAB1522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:37:a2:25:47:cd:e9:c9:6a:03:21:da:f3:
                    af:74:26:61:da:5c:c0:98:10:c1:64:5c:68:8d:44:
                    81:32:90:79:7a:d1:c5:dd:05:81:35:21:42:a3:e5:
                    33:8d:a4:30:a2:f6:08:4d:a1:8c:b6:cb:ea:7e:b7:
                    d9:5f:9e:2e:e7:81:a7:69:27:5d:5c:cd:f7:e0:4b:
                    94:b1:e7:7c:2a:9d:5b:df:f8:19:49:dd:97:9e:aa:
                    9b:26:fc:50:56:d1:29:8b:b3:f7:f1:3b:cf:13:28:
                    96:27:8f:ac:f3:54:30:65:4e:13:9e:5d:1a:c9:7c:
                    da:cc:21:4f:18:7c:91:5b:c2:26:a3:d0:4b:22:c6:
                    ab:42:13:fe:b7:09:d4:1b:bd:ca:3a:71:b0:52:97:
                    65:38:86:9a:79:c8:01:a0:7d:6e:d7:87:be:d7:99:
                    aa:72:fd:42:b6:31:59:b4:dd:68:8e:bd:a8:35:dc:
                    e8:b2:f8:70:55:be:65:0f:3b:58:2e:8e:4f:53:f1:
                    13:a7:86:b7:c3:ad:bf:7f:43:02:99:d1:aa:71:16:
                    58:a0:f6:6e:d3:40:ef:ed:c6:71:da:1d:f8:6d:f9:
                    a7:cf:29:fc:59:72:25:3f:8f:d3:6b:f6:70:b9:50:
                    29:a9:c6:64:79:39:fe:c3:02:8b:be:02:8c:d7:9e:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0A:DD:22:0C:F2:CC:3D:07:0B:0A:DA:98:7A:54:B2:BB:AB:15:22
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230362e302f32332d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:e7:77:8b:0e:51:c8:f4:16:c3:18:04:db:8c:c7:20:d8:d1:
         b5:56:56:6a:58:10:f6:62:c9:84:b6:f8:f1:4e:cd:86:f6:86:
         f8:ba:1c:5f:83:78:bb:f2:31:5b:3c:58:51:cd:ee:b1:0a:d5:
         12:60:dd:3f:a8:54:ef:26:73:da:dd:bc:fd:f5:ce:e5:07:a9:
         8d:60:c7:bb:40:3f:d6:da:61:fc:2e:38:4b:7c:e8:be:8a:1a:
         dd:2c:0a:60:03:c8:f4:09:81:a4:eb:73:8e:c1:76:49:42:e0:
         1d:c1:84:e2:26:ff:d2:ff:44:f8:3e:32:97:84:7b:94:16:07:
         aa:6c:ce:e1:f6:01:cd:c5:ba:73:39:5f:ed:89:01:5b:15:1e:
         74:16:ad:fe:6d:5f:03:76:d4:7a:24:fa:06:1b:56:6c:55:21:
         75:fd:df:13:d2:52:fd:c4:55:1d:72:29:76:ec:c7:46:70:f4:
         db:91:9a:44:fc:2a:46:6a:3c:dc:1a:05:fc:69:6b:fb:bb:08:
         2c:bb:c5:2f:67:06:1e:6a:71:51:c6:ac:0a:6f:a3:09:b8:b3:
         09:6b:ce:db:a8:0a:5d:3e:5e:8a:c3:d9:12:df:be:e3:d5:87:
         25:b9:c1:8f:18:77:cb:65:cd:4d:b9:ea:00:45:bd:84:92:61:
         11:15:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:15:40 2025 by rpki-client