Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130342e302f32312d3231203d3e20323632343434.roa
File:                     3137372e35322e3130342e302f32312d3231203d3e20323632343434.roa (raw, json)
Hash identifier:          tts9wnTqPohQouAU+PeEHgQ/GBueqAaFtqrGQ9nFUFs=
Subject key identifier:   B9:F5:C0:ED:C6:06:FD:40:85:EE:E0:09:68:3D:DB:88:F4:0B:A4:BC
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       65150B09FD80EA0421B5EE770302DE11AEC5BE10
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130342e302f32312d3231203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:44 +0000
ROA not before:           Wed 09 Jul 2025 13:59:44 +0000
ROA not after:            Wed 08 Jul 2026 14:04:44 +0000
asID:                     262444
IP address blocks:        177.52.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 17:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:15:0b:09:fd:80:ea:04:21:b5:ee:77:03:02:de:11:ae:c5:be:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:44 2025 GMT
            Not After : Jul  8 14:04:44 2026 GMT
        Subject: CN=B9F5C0EDC606FD4085EEE009683DDB88F40BA4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:c7:16:d1:16:e1:6e:7a:4f:45:a1:74:92:
                    3e:3e:75:39:1e:15:44:92:23:93:10:07:49:7c:7c:
                    9a:7d:cd:fd:ef:15:ee:13:c5:12:d8:f4:61:df:ee:
                    8a:e4:ad:24:7a:14:e8:fc:e8:cf:47:11:75:45:a9:
                    8c:33:41:d5:d5:32:14:62:c9:70:d0:c9:78:03:3e:
                    96:24:6d:85:e6:f0:49:67:24:00:50:07:d7:e6:88:
                    79:03:23:b2:10:4e:66:ba:78:e1:f0:41:99:fe:e0:
                    ad:b2:5a:22:b3:be:1f:43:08:cd:65:b3:2a:59:11:
                    c3:13:59:d5:33:c8:9a:d3:de:1b:06:23:e0:b9:a1:
                    18:9a:0c:cd:db:9a:17:b7:50:52:00:69:f8:31:5d:
                    f9:ee:6d:ab:32:52:37:97:cc:22:15:78:c5:ce:c4:
                    bc:1c:f5:78:94:e7:b8:15:50:82:2e:7a:de:38:ad:
                    ba:af:3e:ca:08:45:76:78:5b:36:d9:8f:0d:25:4e:
                    14:69:77:d8:d9:b0:aa:7a:52:48:49:3d:d2:60:c7:
                    25:10:f1:46:94:d8:ea:5c:76:5c:59:e9:80:49:25:
                    ef:c9:93:2d:9d:4b:c0:75:7d:a6:94:03:13:32:95:
                    63:c9:e6:db:1c:42:bc:7c:df:80:ea:ed:07:25:bf:
                    85:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F5:C0:ED:C6:06:FD:40:85:EE:E0:09:68:3D:DB:88:F4:0B:A4:BC
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130342e302f32312d3231203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:78:9c:b6:c4:c3:3e:9b:f1:a8:d6:1d:aa:63:28:23:54:4b:
         32:44:30:56:a1:70:5b:7e:82:4e:c0:5f:85:21:f4:e1:79:a4:
         e3:5e:35:22:df:00:49:de:0c:40:19:9b:74:b3:cf:08:ce:a1:
         b3:0d:e8:fb:01:64:aa:f5:a5:6d:c5:70:ed:85:78:af:7e:d2:
         24:fc:4c:d1:40:6a:ac:bc:0e:53:09:86:91:19:35:99:24:d8:
         ef:04:db:87:9a:31:2b:b2:8a:38:f7:f4:ca:7b:f8:96:b6:2b:
         9b:f6:f0:7d:0c:31:81:8b:6c:1a:14:a8:02:e7:0d:2e:61:91:
         19:f8:9e:88:ca:c6:48:78:07:c8:ec:d2:2e:02:04:10:1d:be:
         d5:ec:0d:c3:d9:b5:cf:37:01:b5:34:74:83:29:2c:dd:93:70:
         e6:f6:ee:a1:94:c7:15:cb:de:e1:3c:dd:19:3c:4d:e0:73:62:
         d8:22:7e:42:a9:08:bb:77:02:27:05:06:a6:b8:fe:c4:9c:e0:
         66:f2:bf:4b:1d:da:29:5a:c4:6a:a0:5e:01:fc:2a:cf:c7:eb:
         a0:46:7f:7a:25:26:b1:9d:cb:33:d5:8e:77:ad:33:3b:24:fb:
         c7:51:06:19:82:3e:fe:6c:40:3d:e4:52:a8:fb:13:ad:ce:17:
         46:32:29:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:40:07 2025 by rpki-client