Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130342e302f32332d3233203d3e20323632343434.roa
File:                     3137372e35322e3130342e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          kT10jeJ/BBCzWBw/ixxDKwcD3C+mio3VR6yAgfoPgjM=
Subject key identifier:   2C:AB:14:DA:95:62:30:C2:35:8E:7B:E2:17:5E:39:F8:7A:74:A0:7E
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       0A7C2E2D152611FF6DC8B9BD31A21651C8B7F328
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130342e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:40 +0000
ROA not before:           Wed 09 Jul 2025 13:59:40 +0000
ROA not after:            Wed 08 Jul 2026 14:04:40 +0000
asID:                     262444
IP address blocks:        177.52.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7c:2e:2d:15:26:11:ff:6d:c8:b9:bd:31:a2:16:51:c8:b7:f3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:40 2025 GMT
            Not After : Jul  8 14:04:40 2026 GMT
        Subject: CN=2CAB14DA956230C2358E7BE2175E39F87A74A07E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:ae:e3:da:fe:53:59:9c:f3:ab:30:c5:c8:
                    f7:e5:a2:bc:c8:a0:28:09:95:a7:8c:3c:f7:44:69:
                    c8:08:0c:76:d8:93:e3:94:41:f4:ac:a4:b8:f4:61:
                    d6:0a:ef:18:8e:38:a5:81:80:fd:b1:b0:c5:4f:81:
                    fa:4b:32:7a:61:5c:ad:81:47:7f:c3:99:7b:9f:2c:
                    32:60:c6:fd:8d:fd:4b:2d:93:ae:c1:e6:85:5b:8c:
                    c5:27:fd:77:6d:5d:b9:bc:10:54:2d:95:fe:f3:e9:
                    1d:f2:03:99:2c:54:3a:39:86:19:e9:50:01:bd:17:
                    a3:60:f5:f5:f2:c2:96:fb:94:01:7c:53:0b:84:10:
                    1e:0e:05:e0:ab:90:ca:d1:74:41:71:28:65:26:9e:
                    59:6e:3f:3b:ff:89:1f:e6:03:c7:a4:1a:84:31:be:
                    3d:de:73:a6:6e:51:7e:ea:2f:9a:ca:20:f9:57:e6:
                    84:fa:ad:db:fc:f8:32:6d:25:43:b8:d6:f1:a9:34:
                    7f:bd:cd:98:22:8f:31:4c:16:1c:3b:09:63:97:d8:
                    79:8e:fa:67:fe:e2:75:98:fd:a5:5e:45:eb:fb:78:
                    52:67:cd:04:03:b3:af:d0:9c:8e:0b:29:45:a6:30:
                    ee:59:9e:96:ff:25:8c:2c:77:81:8d:9c:60:9d:25:
                    c9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AB:14:DA:95:62:30:C2:35:8E:7B:E2:17:5E:39:F8:7A:74:A0:7E
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130342e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:e6:9e:2a:7b:8d:28:45:a0:cb:11:b1:66:12:29:99:06:57:
         43:da:7f:09:b7:6d:ed:86:98:95:9c:c6:fc:e3:1b:60:1e:13:
         06:f2:5a:1c:3a:ef:77:22:88:94:bb:d5:80:eb:5b:f0:ac:20:
         07:08:7f:a8:51:ce:4e:59:e1:76:df:36:1e:0f:62:fb:b1:60:
         8b:53:a6:ba:3e:2d:53:e4:d8:1f:02:20:f6:60:a5:e0:6c:81:
         ad:77:69:ea:23:42:12:16:45:23:c6:c4:e6:2f:3d:bc:1b:9b:
         6e:35:11:63:8c:52:f0:41:69:e7:f6:df:dc:c8:ec:2d:65:17:
         4d:8c:9e:e9:c0:35:42:90:1c:97:05:4f:e1:6d:9e:6b:45:61:
         d2:3d:c2:f9:81:8b:f2:6d:f9:ef:f3:0a:60:a5:bb:8d:6d:a7:
         eb:d3:a5:61:95:6f:1a:40:01:36:ed:06:fc:45:20:26:69:9f:
         9f:3d:80:7a:eb:c1:af:af:1e:7c:f7:44:c3:05:10:6a:c0:37:
         da:4a:67:f0:6b:c6:e4:c6:a6:d3:59:73:83:bf:15:e5:dd:1c:
         e5:3a:8f:b2:e5:06:a5:c9:f9:ce:d4:a9:34:aa:c1:4c:5d:dc:
         d0:a5:fc:df:0f:37:82:6c:1a:d4:64:97:85:f9:cc:f9:e4:10:
         a7:37:eb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:54:51 2025 by rpki-client