Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          fklUw/HBMd98jZ9QvGARHFW0vT9821Ig4EPzan1Bpqk=
Subject key identifier:   F4:F8:69:6E:D6:DB:59:56:1E:E7:9C:6A:53:AE:25:84:08:27:9F:9C
Certificate issuer:       /CN=13A209790813EB704E8D837910B6D58314EFF4F9
Certificate serial:       16CBBB5202665B39C7EDF99C6AC73A308F1C4498
Authority key identifier: 13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa
Signing time:             Wed 09 Jul 2025 19:55:04 +0000
ROA not before:           Wed 09 Jul 2025 19:50:04 +0000
ROA not after:            Wed 08 Jul 2026 19:55:04 +0000
asID:                     262653
IP address blocks:        177.105.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cb:bb:52:02:66:5b:39:c7:ed:f9:9c:6a:c7:3a:30:8f:1c:44:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A209790813EB704E8D837910B6D58314EFF4F9
        Validity
            Not Before: Jul  9 19:50:04 2025 GMT
            Not After : Jul  8 19:55:04 2026 GMT
        Subject: CN=F4F8696ED6DB59561EE79C6A53AE258408279F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9f:98:19:4c:a2:0f:df:b6:8a:01:4a:21:62:
                    f0:e1:ec:37:71:f2:3a:2c:5b:ea:e1:76:44:90:63:
                    de:2c:98:2b:eb:94:35:99:67:fc:83:e7:f9:9a:f9:
                    43:02:1f:e9:fc:3e:e0:63:32:3d:82:2c:26:a2:84:
                    78:6a:18:f1:81:08:b5:f9:69:ea:7e:f3:4e:c8:2b:
                    31:3d:93:65:be:d9:e7:2e:fa:a9:5f:2b:c7:9c:3b:
                    f6:9b:79:b4:f8:69:b9:34:f2:95:3f:08:20:51:fb:
                    e4:0b:35:13:6d:a3:82:f9:e0:65:0c:5e:ae:49:e5:
                    b5:79:12:f5:8c:d3:46:69:d9:0f:64:96:f0:b1:cb:
                    43:a9:8f:d8:a7:06:91:a1:ea:bc:03:2d:52:9e:3e:
                    e0:43:99:5d:8f:06:c4:59:79:4b:75:fe:49:fd:f6:
                    30:b5:c1:61:12:b1:f4:8f:39:95:6c:41:2b:bd:40:
                    fe:f5:65:23:31:1e:23:f5:04:52:8b:5f:4e:c4:73:
                    f4:ed:b8:2e:0e:61:49:4c:df:b5:fb:40:92:50:f8:
                    16:6a:1e:69:3c:37:74:be:6c:a1:b8:1b:e0:44:f9:
                    ca:ab:70:55:27:bb:28:4f:5e:e1:68:34:1a:9e:20:
                    1b:1d:b2:88:ea:18:95:93:78:26:39:38:7f:8f:1f:
                    e4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F8:69:6E:D6:DB:59:56:1E:E7:9C:6A:53:AE:25:84:08:27:9F:9C
            X509v3 Authority Key Identifier:
                keyid:13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:49:b9:31:33:4d:3d:77:6b:eb:10:51:1b:5e:91:16:c7:07:
         14:35:ba:42:c3:e1:cf:c0:20:0c:c0:84:4d:62:a1:77:2c:50:
         b0:41:4e:db:1e:7f:90:0a:7b:c8:a3:a6:0d:25:6b:0a:5b:af:
         ba:b8:da:6c:20:57:14:80:59:56:62:6f:d6:ee:e0:aa:88:29:
         c3:74:db:ef:49:01:8f:ff:38:91:ca:82:e6:27:7d:48:54:73:
         7b:40:56:70:a2:1f:ea:44:b1:9e:80:a8:b1:b2:bd:2e:63:cb:
         19:17:08:58:e5:55:cc:0d:c1:b5:04:39:2c:84:b8:9d:7a:ed:
         88:3c:46:f2:ba:4c:6c:f4:97:a5:d0:2f:ce:6d:66:b6:19:c5:
         7c:1e:50:8c:7c:74:04:e9:88:94:46:11:56:98:16:11:4e:bb:
         f6:61:05:93:ed:d0:fa:b4:39:e7:1c:1e:9c:c7:91:c8:d7:81:
         14:4a:02:30:77:c2:5b:46:93:9a:b2:54:03:43:00:31:a3:a8:
         80:99:57:2a:eb:28:3b:3d:50:97:90:b9:97:ca:4e:e6:03:21:
         06:7b:f4:3b:fd:91:21:c7:76:77:a3:a0:47:ea:af:29:f7:2e:
         42:56:9d:11:a0:e8:e6:44:a1:0d:2b:37:9a:e0:8c:98:93:96:
         69:3d:b0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:03:39 2025 by rpki-client