Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa
File:                     3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa (raw, json)
Hash identifier:          6EotP9RyGs6g/BR63lIOHe3Ct4kjTAiprzrk8K5hlmA=
Subject key identifier:   3A:A2:DA:6A:5D:9A:EC:39:1A:87:AD:B6:61:95:3F:93:F4:12:4B:76
Certificate issuer:       /CN=A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA
Certificate serial:       1D2E1C3054B278CBDD1171FA0F4E75D4D264E944
Authority key identifier: A0:C8:F9:AB:C5:5A:6B:F1:28:36:EC:23:29:88:FD:9A:1A:C6:AE:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa
Signing time:             Mon 28 Jul 2025 14:49:56 +0000
ROA not before:           Mon 28 Jul 2025 14:44:56 +0000
ROA not after:            Mon 27 Jul 2026 14:49:56 +0000
asID:                     270541
IP address blocks:        177.124.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.crl
                          rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2e:1c:30:54:b2:78:cb:dd:11:71:fa:0f:4e:75:d4:d2:64:e9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA
        Validity
            Not Before: Jul 28 14:44:56 2025 GMT
            Not After : Jul 27 14:49:56 2026 GMT
        Subject: CN=3AA2DA6A5D9AEC391A87ADB661953F93F4124B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:06:ca:96:b3:9c:26:dc:4d:c1:d3:ea:68:61:
                    ae:f5:f9:7b:35:fc:46:09:df:34:db:d1:35:bd:44:
                    70:17:42:9c:d4:48:27:25:48:01:5a:51:69:bd:95:
                    9f:3f:55:60:8e:03:f7:f9:76:bf:98:bc:6c:f4:8a:
                    f7:6e:91:99:6c:b5:79:8b:7e:75:c6:19:90:72:b4:
                    71:0b:de:f9:df:d5:38:4b:4e:6f:26:24:88:6c:9e:
                    ed:3b:06:95:44:9a:80:9e:98:5f:43:06:2b:e3:a4:
                    02:d8:ac:61:4e:12:e3:0a:5e:5f:f4:6f:11:18:45:
                    12:6f:d4:16:08:ab:2a:9e:26:b1:e3:f5:c2:0e:02:
                    fc:86:70:26:5c:63:b6:d1:77:dc:c2:35:a6:93:e9:
                    34:e0:12:95:de:33:4d:e2:1a:82:1a:c0:65:25:62:
                    5e:9b:24:7d:44:4e:06:71:f7:27:84:b8:99:e2:3a:
                    6a:c5:6e:ae:e1:21:ad:e2:bb:ef:90:54:21:23:1f:
                    93:34:c1:e7:d3:26:71:9a:20:96:8a:db:0a:3d:b0:
                    e0:b8:be:f8:94:e9:e4:59:9c:86:cb:c1:b6:7d:c5:
                    a2:dd:e4:0d:32:f4:3e:91:88:f6:2d:85:60:cc:d2:
                    66:47:8a:0a:07:e9:71:9d:0c:46:fa:d6:76:ac:aa:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A2:DA:6A:5D:9A:EC:39:1A:87:AD:B6:61:95:3F:93:F4:12:4B:76
            X509v3 Authority Key Identifier:
                keyid:A0:C8:F9:AB:C5:5A:6B:F1:28:36:EC:23:29:88:FD:9A:1A:C6:AE:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:f8:96:7f:a0:4f:5c:e4:6a:de:0a:5a:66:d0:b8:9f:5d:83:
         af:08:7d:20:b8:23:43:a4:ca:d7:9e:41:8c:06:6e:00:dc:d7:
         c8:30:dd:5c:58:6b:ff:92:7d:0b:93:2a:c6:12:b9:39:0a:e1:
         58:c6:5b:54:ad:2c:cb:2b:3a:d6:76:b1:b7:d2:c7:4f:38:45:
         a2:da:ee:f1:f5:88:0c:a7:fb:ed:ea:6e:df:3a:fc:45:bc:7d:
         12:da:c8:d4:9e:72:9b:02:f9:53:cc:80:ab:d7:1c:68:d6:2d:
         61:91:06:7f:85:55:72:ea:1a:c4:f8:22:91:d4:13:93:3d:c8:
         56:54:11:7a:83:7d:24:7b:4e:e2:ca:82:5f:7f:e7:81:74:c7:
         74:ab:f0:5c:52:db:0d:0b:50:48:ce:ab:ef:7a:35:95:2a:7d:
         bf:39:0d:f5:bb:8a:d9:73:80:3f:b0:bf:8b:98:4f:27:f9:3a:
         c2:c5:0a:a8:33:3e:0c:87:0f:13:b3:70:13:8d:3c:f1:a6:a7:
         1e:2f:4d:c5:d1:73:2b:59:bb:96:29:7c:c0:ca:ea:c1:37:82:
         c6:ba:23:b1:68:bd:91:98:b4:72:42:67:42:97:cb:1b:a3:70:
         77:0a:fd:62:b8:d0:64:97:a0:bd:9c:f8:95:47:82:c8:6e:38:
         51:dc:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:16:30 2025 by rpki-client