Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133362e302f32332d3233203d3e20323731303830.roa
File:                     3137372e38362e3133362e302f32332d3233203d3e20323731303830.roa (raw, json)
Hash identifier:          uN0YTxOnhWyEHHz4h8BkRhrZCxdzweiJL5r5uZ/SGjI=
Subject key identifier:   28:10:6B:99:D8:53:75:69:11:ED:6D:89:43:A6:8E:C5:AB:52:F5:FE
Certificate issuer:       /CN=F095D44C76209CF9CE1E9A4114216F65933BFAFC
Certificate serial:       958AF1CD3C87C72A1616DE5C2D6C4D82DD2560
Authority key identifier: F0:95:D4:4C:76:20:9C:F9:CE:1E:9A:41:14:21:6F:65:93:3B:FA:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F095D44C76209CF9CE1E9A4114216F65933BFAFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133362e302f32332d3233203d3e20323731303830.roa
Signing time:             Mon 04 Aug 2025 14:26:27 +0000
ROA not before:           Mon 04 Aug 2025 14:21:27 +0000
ROA not after:            Mon 03 Aug 2026 14:26:27 +0000
asID:                     271080
IP address blocks:        177.86.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/F095D44C76209CF9CE1E9A4114216F65933BFAFC.crl
                          rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/F095D44C76209CF9CE1E9A4114216F65933BFAFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F095D44C76209CF9CE1E9A4114216F65933BFAFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 11:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            95:8a:f1:cd:3c:87:c7:2a:16:16:de:5c:2d:6c:4d:82:dd:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F095D44C76209CF9CE1E9A4114216F65933BFAFC
        Validity
            Not Before: Aug  4 14:21:27 2025 GMT
            Not After : Aug  3 14:26:27 2026 GMT
        Subject: CN=28106B99D853756911ED6D8943A68EC5AB52F5FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:fa:b8:3c:08:88:82:f9:f7:89:c8:7b:e5:
                    ce:65:57:b3:85:d4:75:70:3e:83:b9:1a:03:e3:36:
                    f6:b5:10:f8:a3:22:ff:14:1f:c1:1f:0a:a8:f6:9f:
                    dc:eb:a7:08:25:dc:df:36:08:fe:10:56:57:e4:1c:
                    ec:9e:da:ee:84:e9:d6:a7:e0:0f:83:f5:45:7e:b2:
                    76:d0:72:a8:ac:2b:f7:07:8a:41:a3:b6:ee:4e:c3:
                    61:28:b1:e6:03:9e:64:1f:a6:06:84:0a:9a:e7:9d:
                    96:a6:1f:bf:a0:50:97:30:44:fa:5d:e6:39:af:87:
                    52:c0:ab:fc:e6:a9:e5:09:62:26:7f:a5:2d:73:4f:
                    21:bb:9b:f5:6b:51:66:4f:e6:d4:c2:ba:02:da:e6:
                    d6:0b:24:3b:25:01:5f:6c:96:71:69:55:c8:47:09:
                    b7:5d:13:d9:4e:7e:ab:4e:46:cd:85:59:22:18:0f:
                    55:16:ea:83:c2:d9:e8:d5:12:2c:c5:05:51:24:8a:
                    91:87:12:7d:60:72:9c:74:fa:59:f2:13:9a:27:a0:
                    69:4c:78:72:12:7c:1a:3f:db:31:b9:c9:55:ea:79:
                    30:8c:9c:54:7a:95:e8:a2:31:03:24:51:22:8e:28:
                    ac:50:70:ed:b7:10:36:cb:45:b2:3a:06:bb:9e:d5:
                    42:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:10:6B:99:D8:53:75:69:11:ED:6D:89:43:A6:8E:C5:AB:52:F5:FE
            X509v3 Authority Key Identifier:
                keyid:F0:95:D4:4C:76:20:9C:F9:CE:1E:9A:41:14:21:6F:65:93:3B:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/F095D44C76209CF9CE1E9A4114216F65933BFAFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F095D44C76209CF9CE1E9A4114216F65933BFAFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133362e302f32332d3233203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:df:09:78:81:d1:04:36:31:3d:5a:1d:7c:6f:8f:44:99:02:
         87:90:2d:17:83:53:bd:38:ae:c0:01:f6:da:a8:1e:ca:2c:08:
         6e:f6:b1:94:77:da:b8:dc:c0:f9:c6:ac:eb:5b:0a:e0:27:7b:
         0b:0f:7d:62:27:a3:8b:b7:1a:4c:c0:0b:24:cc:6e:c4:9a:e9:
         d1:32:0e:4e:d3:f9:83:e2:f5:a8:44:30:04:c2:01:e4:ac:23:
         bb:2d:07:7e:9b:38:3f:1c:47:02:35:0c:3b:a9:8a:d2:91:64:
         0f:e0:71:db:b3:04:33:7b:61:dd:71:c9:49:b0:2f:58:b3:d3:
         47:46:1e:13:f9:f4:7c:88:71:2a:4c:54:d9:75:87:58:67:5c:
         29:58:d9:7b:d7:9b:03:9e:c0:e2:55:b4:45:82:3c:0d:20:3f:
         8b:62:e5:08:19:63:de:d7:ee:6c:ad:c5:75:ab:d0:35:11:2f:
         c0:ac:f1:ed:45:f8:49:b4:14:cf:68:7b:f2:a4:77:dd:f8:66:
         d1:44:57:b2:9e:45:ab:bc:09:b1:cc:11:b8:3b:20:b6:95:98:
         f7:2f:23:f1:dd:04:30:55:08:1e:c7:dc:e7:62:b8:a2:c4:8a:
         84:b5:23:41:d7:fe:bd:25:3b:b3:ad:d6:9e:87:ac:33:4e:33:
         84:36:38:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:02:14 2025 by rpki-client