Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231322e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3231322e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          i6UtdzM+EuDO3kmTZ7klqXhMXa3E6nV6j4x2VKGZi38=
Subject key identifier:   6B:88:A7:6E:D5:4D:98:B3:7D:6E:41:60:EB:29:62:35:82:26:4D:EB
Certificate issuer:       /CN=13A209790813EB704E8D837910B6D58314EFF4F9
Certificate serial:       4949CCD4DFA65EF97C67E859984DF8B26A9435F7
Authority key identifier: 13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231322e302f32342d3234203d3e20323632363533.roa
Signing time:             Wed 09 Jul 2025 19:55:11 +0000
ROA not before:           Wed 09 Jul 2025 19:50:11 +0000
ROA not after:            Wed 08 Jul 2026 19:55:11 +0000
asID:                     262653
IP address blocks:        177.105.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:49:cc:d4:df:a6:5e:f9:7c:67:e8:59:98:4d:f8:b2:6a:94:35:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A209790813EB704E8D837910B6D58314EFF4F9
        Validity
            Not Before: Jul  9 19:50:11 2025 GMT
            Not After : Jul  8 19:55:11 2026 GMT
        Subject: CN=6B88A76ED54D98B37D6E4160EB29623582264DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:cf:eb:9e:05:c0:7f:ac:30:b7:0b:7a:d1:
                    b7:b8:e6:89:9a:8f:4d:24:cc:59:0d:e1:f7:6b:02:
                    f5:46:67:c7:36:ec:65:9f:bb:ae:77:1f:fd:14:51:
                    dc:b0:f8:63:ae:77:d1:de:a0:b6:ba:1b:3a:69:8b:
                    77:ed:df:81:52:de:3e:64:1e:65:dd:f1:6c:27:fd:
                    ea:71:c3:fd:ed:dd:81:06:ee:96:cb:ab:ab:7d:52:
                    68:22:47:05:6d:42:22:d5:8c:72:7d:4f:38:3f:38:
                    be:58:88:70:20:dc:70:13:35:64:f5:92:ce:9b:d9:
                    6f:e8:0c:dc:df:d7:2c:da:23:1c:d2:81:e9:8d:36:
                    78:89:b0:e9:cd:84:83:ff:a9:22:8a:ec:ea:7b:d7:
                    81:30:26:9e:63:b7:2c:37:d6:5f:4a:ac:e8:69:1a:
                    a6:47:d0:d3:f2:9a:f9:dd:82:0c:84:62:e9:b5:10:
                    85:79:9c:10:59:56:9d:6c:04:aa:e4:ef:15:d0:13:
                    4e:b7:f3:70:23:6b:92:f5:6d:a8:4b:8d:77:34:35:
                    7d:46:47:8d:4f:40:f5:05:a7:86:fe:0e:17:ed:1e:
                    13:64:19:ff:cd:24:b0:85:8a:a3:90:ee:aa:32:ad:
                    4b:4e:ec:f0:8a:21:a2:29:f6:c8:24:ba:d8:e2:66:
                    22:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:88:A7:6E:D5:4D:98:B3:7D:6E:41:60:EB:29:62:35:82:26:4D:EB
            X509v3 Authority Key Identifier:
                keyid:13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231322e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:e6:41:5a:44:de:40:01:16:0b:79:27:65:1e:de:0d:68:3e:
         2d:52:36:a8:10:81:f3:79:4b:47:b1:e6:11:0a:de:50:9b:e4:
         ef:e4:29:3b:82:ed:0c:70:04:70:d5:dd:cf:c1:c0:88:34:8f:
         31:95:c8:c5:3d:68:57:50:8d:4a:25:e4:e0:5b:9a:fa:df:f7:
         b7:a8:8b:58:66:10:fb:d5:58:d7:9b:dc:40:30:9a:b0:6e:d0:
         46:eb:4f:38:6e:e0:b2:67:c3:95:21:bb:01:b4:be:40:e9:39:
         c4:56:40:05:82:64:0d:7d:67:39:40:a5:d4:d4:00:94:fb:af:
         bd:b2:bc:6e:0f:33:de:55:c9:de:da:c5:bb:e0:cd:4d:4f:a7:
         d8:7b:af:f6:55:ba:05:2b:b8:75:5d:26:f8:2e:8a:3e:69:0c:
         e0:8e:96:10:55:d2:fa:39:67:88:3a:78:44:96:5d:fe:de:37:
         64:36:9c:00:02:85:b5:8b:5f:0f:e7:54:b0:6b:6f:7c:d7:10:
         8a:c7:e5:48:4b:3c:6c:4e:3c:54:2d:4a:1f:49:f7:92:a2:69:
         d5:6f:d2:42:5f:ee:8d:e7:b3:1a:c1:66:51:89:4c:25:27:8b:
         6b:c8:f0:60:e0:6e:bf:e4:ad:69:07:ab:e4:40:dd:f1:db:cc:
         83:60:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:47:02 2025 by rpki-client