Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231302e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3231302e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          /sGI8f16iMViuErwpfUT6lqyzGtz+s6KCm8stjcRyMI=
Subject key identifier:   09:95:24:45:BE:47:BA:7D:BE:BB:2E:E1:99:11:D5:9D:99:6F:70:CC
Certificate issuer:       /CN=13A209790813EB704E8D837910B6D58314EFF4F9
Certificate serial:       7F6F45833AD1FD35D3FDDD2653818C207B61824B
Authority key identifier: 13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231302e302f32342d3234203d3e20323632363533.roa
Signing time:             Wed 09 Jul 2025 19:55:11 +0000
ROA not before:           Wed 09 Jul 2025 19:50:11 +0000
ROA not after:            Wed 08 Jul 2026 19:55:11 +0000
asID:                     262653
IP address blocks:        177.105.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6f:45:83:3a:d1:fd:35:d3:fd:dd:26:53:81:8c:20:7b:61:82:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A209790813EB704E8D837910B6D58314EFF4F9
        Validity
            Not Before: Jul  9 19:50:11 2025 GMT
            Not After : Jul  8 19:55:11 2026 GMT
        Subject: CN=09952445BE47BA7DBEBB2EE19911D59D996F70CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ac:38:59:c8:02:08:a5:f8:f9:68:ae:b2:9f:
                    14:b0:0e:26:19:d1:6d:08:c6:40:22:82:52:c1:5c:
                    15:2f:4f:ff:dc:37:17:eb:00:c2:9e:77:fd:4b:89:
                    8d:f6:5b:2d:82:33:69:30:45:f6:31:45:a5:25:78:
                    06:14:ff:f9:8e:bd:fe:c2:65:ad:54:f6:61:1a:2d:
                    98:6f:3a:d2:85:ea:d0:95:43:f2:75:49:93:52:b7:
                    d5:38:99:a8:20:d3:fa:36:98:75:ff:97:16:19:0e:
                    25:d8:c2:da:75:68:2c:cf:3d:f1:56:92:ac:39:84:
                    d0:3e:68:3d:55:d2:51:ac:88:f9:9e:0e:67:0f:53:
                    af:8c:68:fb:cf:2c:04:46:ce:3a:91:2a:4c:d1:b2:
                    2c:50:a0:ef:f5:38:59:d2:98:ac:6f:68:d1:b7:ab:
                    4e:06:b2:86:9a:d7:2a:78:d8:82:f7:4b:25:73:7f:
                    06:8a:39:5a:63:fa:b7:e9:05:db:12:d6:ba:29:82:
                    d4:41:84:d4:39:65:68:b3:d3:17:c9:df:52:15:48:
                    1f:b5:4a:2f:fd:79:36:fd:46:36:99:fa:7d:70:d6:
                    9b:57:05:92:bc:64:f4:58:2d:83:87:12:ce:c3:23:
                    13:d8:b8:a8:4d:ba:ee:8d:51:8b:7c:c9:17:43:6c:
                    30:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:95:24:45:BE:47:BA:7D:BE:BB:2E:E1:99:11:D5:9D:99:6F:70:CC
            X509v3 Authority Key Identifier:
                keyid:13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231302e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:3c:d6:79:8f:43:8c:c5:1b:7b:0a:33:42:ab:89:ab:ca:e7:
         ad:f5:ac:a6:1c:ad:0b:f3:75:09:4b:ac:0c:8b:c4:78:e2:76:
         ac:e1:87:c3:2c:6b:98:94:da:57:23:b2:50:d9:f8:c0:e5:d3:
         ad:86:d6:49:42:4b:51:75:3f:0c:77:c6:f7:70:1f:44:1c:5f:
         9e:29:24:30:6c:cc:8e:f5:f6:b5:37:16:f7:53:dc:1c:be:d9:
         70:75:94:ff:6c:20:4a:7b:ad:6a:16:7d:f3:8f:05:00:2b:89:
         4c:58:28:3b:5f:4d:7d:44:70:10:e3:07:c8:d5:24:33:96:80:
         58:80:10:ed:ae:8c:3a:9b:b0:0f:98:c8:6d:7c:3c:2d:99:c4:
         c0:cf:7d:01:1d:a8:c3:85:69:da:59:e9:62:52:39:c6:69:ee:
         8c:78:e7:f7:96:88:47:0f:02:d8:b8:ee:ae:83:2c:5d:46:9e:
         51:ff:24:2c:fe:b3:f4:7f:95:3d:f4:cd:06:09:9e:72:25:20:
         b8:e6:4a:e4:1d:3f:ae:08:6e:d3:84:89:86:09:fb:72:ea:a0:
         8f:5e:f1:d5:43:9c:c5:8f:a5:bb:0c:28:d2:c8:15:cd:e7:1e:
         17:58:79:13:16:1e:0c:c1:db:ef:b7:e7:ea:c9:7e:e4:3d:7c:
         0d:ff:df:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:51 2025 by rpki-client