Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136342e302f32322d3234203d3e20323731373030.roa
File:                     3137372e36372e3136342e302f32322d3234203d3e20323731373030.roa (raw, json)
Hash identifier:          7OuEe3LSCK23Gio+3CWXhD8gyMWMiO9U4TxLsi6dafc=
Subject key identifier:   5C:8C:F2:D8:2D:F1:6E:42:F7:D0:70:99:3D:F2:9E:4A:09:1C:C0:77
Certificate issuer:       /CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
Certificate serial:       336D4C2FAF6A4A296138EE2C01F0B9AB3FDC2CB4
Authority key identifier: DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136342e302f32322d3234203d3e20323731373030.roa
Signing time:             Wed 09 Jul 2025 20:07:28 +0000
ROA not before:           Wed 09 Jul 2025 20:02:28 +0000
ROA not after:            Wed 08 Jul 2026 20:07:28 +0000
asID:                     271700
IP address blocks:        177.67.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.crl
                          rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 13:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6d:4c:2f:af:6a:4a:29:61:38:ee:2c:01:f0:b9:ab:3f:dc:2c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
        Validity
            Not Before: Jul  9 20:02:28 2025 GMT
            Not After : Jul  8 20:07:28 2026 GMT
        Subject: CN=5C8CF2D82DF16E42F7D070993DF29E4A091CC077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:df:81:39:c3:ca:05:e8:70:53:68:10:2f:a8:
                    72:90:57:f8:b4:7c:28:9d:6f:da:dd:d0:e8:ae:eb:
                    3d:ee:9e:65:42:7c:7a:d0:bc:32:57:00:95:45:86:
                    ce:a1:5c:d0:17:95:84:3a:13:01:6f:9c:91:a6:19:
                    64:6e:d3:53:53:83:83:77:1c:5d:74:cc:a4:8d:9f:
                    e5:57:ee:7f:36:c3:b2:aa:d5:69:1d:5d:99:bb:4a:
                    da:fe:68:63:39:61:d9:09:93:5f:fc:99:5e:62:37:
                    ea:72:b9:a7:96:38:e1:68:43:4d:ca:2e:7d:aa:dd:
                    47:d1:e7:f4:df:85:49:cf:76:7d:47:56:52:b7:be:
                    96:fc:96:49:e8:cf:83:67:01:a0:15:ca:37:a4:f7:
                    14:ea:0b:d3:39:79:18:0f:73:25:1c:fe:6d:1f:e5:
                    1b:4e:d5:75:1e:28:a7:93:43:81:48:62:56:af:83:
                    69:03:b8:b4:bb:ed:f8:a6:94:76:d8:f5:95:1e:ec:
                    10:aa:b7:a2:ee:d1:d5:74:18:52:29:3a:c2:e6:85:
                    29:76:b8:6b:20:3c:51:7c:4a:9d:0f:c0:45:2b:c3:
                    89:2f:62:87:37:7f:6f:f5:e8:91:0b:e7:4a:27:d3:
                    06:a9:ee:d8:4f:be:9a:a3:ab:07:bf:b7:26:6a:0a:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8C:F2:D8:2D:F1:6E:42:F7:D0:70:99:3D:F2:9E:4A:09:1C:C0:77
            X509v3 Authority Key Identifier:
                keyid:DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3137372e36372e3136342e302f32322d3234203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:09:7a:43:d8:10:38:1a:7b:78:b4:96:e6:8d:75:1e:43:c5:
         55:e6:f6:44:2c:c4:c1:20:d7:f8:d0:52:97:d7:97:0d:d4:b3:
         c3:d4:22:94:05:c2:f8:a4:9e:b6:18:86:7a:6d:01:7b:0b:78:
         97:14:a0:ed:10:f9:3f:93:07:61:1b:f5:b8:86:70:74:b2:37:
         fd:05:ac:ad:7f:1f:45:15:58:df:7b:1c:ea:fd:78:8d:06:c1:
         2d:6a:af:2c:9e:15:4e:b8:c0:54:e5:fc:ae:30:6a:33:fe:26:
         03:95:94:4f:d5:4b:99:56:81:38:16:0d:2f:9c:51:29:55:b1:
         8c:f5:70:82:cf:d4:52:90:da:b1:97:1f:a0:32:9a:5f:c3:3b:
         07:b1:e8:13:8e:a7:55:ab:74:b2:fa:3f:31:40:1e:b7:8e:84:
         1a:54:a3:5d:96:e8:81:64:a6:35:46:1c:56:97:81:10:c4:3b:
         f0:50:b7:9f:7c:ba:69:77:cc:7d:d8:6b:f4:99:86:4a:32:8e:
         17:68:0f:e9:44:8b:b4:64:ef:98:b8:68:57:6f:9f:fb:11:dc:
         54:d9:a2:73:71:7b:fc:3e:30:3c:41:2a:e5:6a:07:d2:42:1a:
         ed:98:fd:45:97:94:c5:28:0d:6b:66:44:d9:23:5e:4e:3b:b4:
         1d:94:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:55:00 2025 by rpki-client