Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133382e302f32342d3234203d3e20323731303830.roa
File:                     3137372e38362e3133382e302f32342d3234203d3e20323731303830.roa (raw, json)
Hash identifier:          dcznwJMQJDayzP0SGQCIQXvMFChtjblOPDZ9s1NEhzg=
Subject key identifier:   7C:BA:1A:DB:BD:E3:82:E4:27:13:E3:65:7B:6B:36:61:FB:DA:B0:FC
Certificate issuer:       /CN=F095D44C76209CF9CE1E9A4114216F65933BFAFC
Certificate serial:       266E6D46769EEB5092E8F3AD4A38EAB2F4FFEBBA
Authority key identifier: F0:95:D4:4C:76:20:9C:F9:CE:1E:9A:41:14:21:6F:65:93:3B:FA:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F095D44C76209CF9CE1E9A4114216F65933BFAFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133382e302f32342d3234203d3e20323731303830.roa
Signing time:             Mon 04 Aug 2025 14:26:26 +0000
ROA not before:           Mon 04 Aug 2025 14:21:26 +0000
ROA not after:            Mon 03 Aug 2026 14:26:26 +0000
asID:                     271080
IP address blocks:        177.86.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/F095D44C76209CF9CE1E9A4114216F65933BFAFC.crl
                          rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/F095D44C76209CF9CE1E9A4114216F65933BFAFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F095D44C76209CF9CE1E9A4114216F65933BFAFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 11:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6e:6d:46:76:9e:eb:50:92:e8:f3:ad:4a:38:ea:b2:f4:ff:eb:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F095D44C76209CF9CE1E9A4114216F65933BFAFC
        Validity
            Not Before: Aug  4 14:21:26 2025 GMT
            Not After : Aug  3 14:26:26 2026 GMT
        Subject: CN=7CBA1ADBBDE382E42713E3657B6B3661FBDAB0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:f2:3d:22:65:98:63:08:53:5b:81:69:44:
                    01:62:a4:55:75:cb:8e:28:7b:5d:fc:af:88:7a:41:
                    65:3a:5b:bb:1d:8c:86:bd:7d:86:b2:bf:fc:2c:4e:
                    82:fa:4d:14:78:c1:d9:3b:39:35:68:c0:04:fb:be:
                    b0:a3:2c:70:05:e2:41:6a:cf:38:49:5a:e0:e6:bf:
                    78:db:e0:1c:f0:61:5a:d6:df:30:eb:a9:1c:34:7f:
                    3b:f2:e3:a4:eb:50:47:0a:77:a2:18:9f:09:4f:bb:
                    b8:82:ca:79:f6:3a:c1:74:25:db:03:62:1f:64:84:
                    00:ea:59:af:f2:09:7c:fd:d9:29:4d:54:ec:a3:84:
                    a9:29:28:18:4d:c6:52:00:ab:5c:74:e7:5c:46:67:
                    79:f7:5d:99:22:c9:f3:e8:a2:5f:58:a6:a8:a9:2a:
                    17:e2:ab:00:85:31:2b:f1:7b:00:5f:01:1f:c5:5f:
                    ac:60:d1:3c:a4:0d:69:e2:07:fd:66:da:33:1b:a0:
                    7e:79:45:1d:5a:ec:1c:fe:9e:ab:94:5b:3e:c4:24:
                    ae:11:f2:0c:b8:c2:89:8b:c9:1a:5c:73:98:c2:74:
                    20:ae:d1:e3:b2:9b:3b:77:3a:1b:7e:21:f7:72:89:
                    c5:58:b8:08:fb:e1:01:2b:85:51:c7:80:34:0f:16:
                    19:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BA:1A:DB:BD:E3:82:E4:27:13:E3:65:7B:6B:36:61:FB:DA:B0:FC
            X509v3 Authority Key Identifier:
                keyid:F0:95:D4:4C:76:20:9C:F9:CE:1E:9A:41:14:21:6F:65:93:3B:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/F095D44C76209CF9CE1E9A4114216F65933BFAFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F095D44C76209CF9CE1E9A4114216F65933BFAFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133382e302f32342d3234203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:0f:74:ee:dc:bb:b5:e8:14:96:76:0d:a3:99:d0:0f:8b:ef:
         9e:06:86:bc:2f:cd:4d:0f:43:e7:63:9f:67:ab:04:f8:83:1d:
         60:04:af:65:21:25:3c:0d:b3:c5:a1:70:aa:38:d4:32:09:c6:
         80:42:59:e3:58:7b:5a:df:8b:fa:34:8c:67:99:fd:06:8e:90:
         af:50:2d:7d:82:41:2f:39:38:f5:05:07:db:4f:43:51:fd:a0:
         f2:6b:1a:7c:d0:ee:e8:e5:5c:3f:65:dd:5c:82:50:14:ea:1a:
         6e:a3:ff:e0:81:d7:44:47:54:3e:c7:ad:8c:b0:a1:4b:26:ff:
         4d:7a:b5:67:ce:39:e6:1b:f7:52:69:89:c3:97:e9:75:35:77:
         57:a7:cd:2f:35:60:40:7d:5a:22:c3:df:f5:9e:66:31:0c:35:
         d8:e8:db:f4:a4:29:0b:50:94:e6:56:26:3f:76:d3:3f:6c:fd:
         38:a9:2a:c9:4f:a1:ae:e7:6e:92:b5:44:0c:b1:22:7c:b4:fc:
         9d:b8:21:06:1b:33:fd:c2:54:83:d3:89:a2:0a:d0:48:6f:82:
         a6:6a:fb:b2:93:df:fb:19:27:67:5c:d1:d1:04:b5:28:08:01:
         4f:fb:7a:ea:4a:35:c1:41:0f:80:cd:c6:7f:12:80:47:bf:c4:
         71:7c:6c:d4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJm5tRnae61CS6POtSjjqsvT/67owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA5NUQ0NEM3NjIwOUNGOUNFMUU5QTQxMTQyMTZGNjU5
MzNCRkFGQzAeFw0yNTA4MDQxNDIxMjZaFw0yNjA4MDMxNDI2MjZaMDMxMTAvBgNV
BAMTKDdDQkExQURCQkRFMzgyRTQyNzEzRTM2NTdCNkIzNjYxRkJEQUIwRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjDfI9ImWYYwhTW4FpRAFipFV1
y44oe138r4h6QWU6W7sdjIa9fYayv/wsToL6TRR4wdk7OTVowAT7vrCjLHAF4kFq
zzhJWuDmv3jb4BzwYVrW3zDrqRw0fzvy46TrUEcKd6IYnwlPu7iCynn2OsF0JdsD
Yh9khADqWa/yCXz92SlNVOyjhKkpKBhNxlIAq1x051xGZ3n3XZkiyfPool9Ypqip
KhfiqwCFMSvxewBfAR/FX6xg0TykDWniB/1m2jMboH55RR1a7Bz+nquUWz7EJK4R
8gy4womLyRpcc5jCdCCu0eOymzt3Oht+IfdyicVYuAj74QErhVHHgDQPFhmtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfLoa273jguQnE+Nle2s2YfvasPwwHwYDVR0j
BBgwFoAU8JXUTHYgnPnOHppBFCFvZZM7+vwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2tRazJ6NGJzRjVzWUp6YjkxekI2NUU4dFZzSFFBUXVnaFp3TTI0TWI1
Z1EvMC9GMDk1RDQ0Qzc2MjA5Q0Y5Q0UxRTlBNDExNDIxNkY2NTkzM0JGQUZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwOTVENDRDNzYyMDlDRjlD
RTFFOUE0MTE0MjE2RjY1OTMzQkZBRkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0drUWsyejRic0Y1c1lKemI5MXpCNjVFOHRWc0hRQVF1Z2had00yNE1iNWdRLzAv
MzEzNzM3MmUzODM2MmUzMTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMDM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxVoowDQYJKoZIhvcNAQELBQADggEBAGQPdO7c
u7XoFJZ2DaOZ0A+L754GhrwvzU0PQ+djn2erBPiDHWAEr2UhJTwNs8WhcKo41DIJ
xoBCWeNYe1rfi/o0jGeZ/QaOkK9QLX2CQS85OPUFB9tPQ1H9oPJrGnzQ7ujlXD9l
3VyCUBTqGm6j/+CB10RHVD7HrYywoUsm/016tWfOOeYb91JpicOX6XU1d1enzS81
YEB9WiLD3/WeZjEMNdjo2/SkKQtQlOZWJj920z9s/TipKslPoa7nbpK1RAyxIny0
/J24IQYbM/3CVIPTiaIK0EhvgqZq+7KT3/sZJ2dc0dEEtSgIAU/7eupKNcFBD4DN
xn8SgEe/xHF8bNQ=
-----END CERTIFICATE-----
Generated at Tue Aug 12 14:04:18 2025 by rpki-client