Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32332d3233203d3e20323632343434.roa
File:                     3137372e3132382e382e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          /Oe1rCuXtpMushrUAw7jJmb2MY6kTbEYVFE/Np+yV34=
Subject key identifier:   E6:BD:31:B1:71:9A:B2:76:1B:77:30:A6:52:D5:68:F7:94:B3:F7:DF
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       091E1630C67D2EE38B4B069CA570BF5FB1C89178
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:41 +0000
ROA not before:           Wed 09 Jul 2025 13:59:41 +0000
ROA not after:            Wed 08 Jul 2026 14:04:41 +0000
asID:                     262444
IP address blocks:        177.128.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1e:16:30:c6:7d:2e:e3:8b:4b:06:9c:a5:70:bf:5f:b1:c8:91:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:41 2025 GMT
            Not After : Jul  8 14:04:41 2026 GMT
        Subject: CN=E6BD31B1719AB2761B7730A652D568F794B3F7DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d4:8a:63:0b:70:cd:18:af:4f:e2:6c:3e:bb:
                    95:b9:dc:4c:f3:59:2b:98:0e:6a:3e:1b:95:cf:7d:
                    1e:8f:9e:b5:5e:f2:9e:32:eb:6f:ad:47:32:0e:0a:
                    3d:56:58:dd:30:2c:aa:f2:8c:35:b6:43:e2:42:95:
                    12:ce:c4:60:fe:ff:90:8e:a6:73:b9:ea:8a:c0:aa:
                    f7:62:3e:0b:8a:4c:d5:b1:71:9a:ce:d2:c1:42:19:
                    38:b5:7e:17:c3:3b:47:6e:d5:03:55:6a:76:78:63:
                    48:ae:75:2a:4f:f3:2d:96:45:b7:a4:fb:96:5a:ab:
                    40:d2:e5:bb:42:ad:20:21:4b:44:26:9d:6d:14:ea:
                    f4:57:a3:ff:d1:1f:17:0a:f8:56:71:1c:c2:a6:41:
                    57:94:6c:a4:27:40:3d:f7:27:e7:df:6c:fa:d4:b3:
                    5d:9f:14:3a:bd:28:b9:5d:fc:82:fb:d1:41:28:37:
                    03:f9:61:4c:b9:34:83:cc:90:c5:72:2a:4b:26:ef:
                    1a:1f:33:01:1d:e9:7c:40:db:c6:b4:f6:fb:82:1e:
                    32:3d:f4:2d:7e:4a:88:28:1b:10:8c:f7:ea:5a:02:
                    52:f8:3a:6d:a3:ae:4e:b4:d1:7b:4f:8f:b8:36:8e:
                    99:89:7a:2b:88:d1:02:af:89:ff:29:0b:ec:14:b1:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BD:31:B1:71:9A:B2:76:1B:77:30:A6:52:D5:68:F7:94:B3:F7:DF
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e382e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:69:ad:a1:2c:f2:38:c3:02:64:e5:33:3b:75:62:5a:38:63:
         43:85:a6:0e:2e:c7:db:cb:a1:4d:e8:67:d4:7a:5d:f2:40:a0:
         9f:68:01:e5:2f:6b:eb:ec:5c:ab:ee:5b:96:ce:0b:f6:dd:2a:
         35:85:a3:15:60:30:74:5e:47:66:00:d3:dd:b9:39:3d:35:9a:
         96:16:ce:6c:ae:0b:ee:48:7c:ae:3b:81:3d:15:e7:70:0d:93:
         7b:af:20:24:6e:d9:83:72:34:b0:d3:e9:86:f8:83:2d:aa:b3:
         d5:97:ee:81:b0:51:3d:ca:88:2c:91:ad:c2:5a:2d:f9:dd:e1:
         5d:3a:ab:4f:e1:b8:71:80:48:bb:30:69:91:f7:89:23:b0:4e:
         ee:6c:54:8a:45:c2:a0:55:14:35:b9:c7:85:e6:8b:80:b3:e6:
         a5:d7:85:bb:3e:10:f8:0d:38:e5:6f:bf:61:07:84:4f:13:06:
         16:2a:53:00:42:29:75:1c:66:b5:f2:28:3e:0b:f6:ab:61:72:
         03:3e:fa:44:7b:65:28:a7:6e:a4:e2:3d:38:e3:02:a4:09:68:
         69:64:1d:d9:92:04:e0:a5:b0:96:ee:19:8c:56:fb:c3:99:d8:
         3f:fe:be:ff:58:0a:13:6c:76:1f:7b:fe:69:15:d7:2e:0a:50:
         76:48:a5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:59:21 2025 by rpki-client