Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3137372e35322e3136322e302f32342d3234203d3e20323632343438.roa
File:                     3137372e35322e3136322e302f32342d3234203d3e20323632343438.roa (raw, json)
Hash identifier:          5wFHtbn2lGhEeQi3wvm5A8/J/1zYeCj8D973hTJeZ/o=
Subject key identifier:   D4:37:B9:DF:DE:FD:31:FD:E0:F3:3F:06:A8:A8:4E:B7:59:91:CC:89
Certificate issuer:       /CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
Certificate serial:       4DA623037AFD1CA35B2B2DDFBFFF72A96A8C2DA1
Authority key identifier: E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3137372e35322e3136322e302f32342d3234203d3e20323632343438.roa
Signing time:             Wed 24 Sep 2025 01:47:25 +0000
ROA not before:           Wed 24 Sep 2025 01:42:25 +0000
ROA not after:            Wed 23 Sep 2026 01:47:25 +0000
asID:                     262448
IP address blocks:        177.52.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl
                          rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Oct 2025 02:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a6:23:03:7a:fd:1c:a3:5b:2b:2d:df:bf:ff:72:a9:6a:8c:2d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
        Validity
            Not Before: Sep 24 01:42:25 2025 GMT
            Not After : Sep 23 01:47:25 2026 GMT
        Subject: CN=D437B9DFDEFD31FDE0F33F06A8A84EB75991CC89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:72:f7:f5:1a:fd:41:cf:a4:ff:3f:35:e2:78:
                    26:6d:72:de:49:28:27:06:09:fa:de:f4:59:bb:5b:
                    04:c2:97:93:9d:61:50:f5:91:d4:5e:1e:dd:dd:de:
                    c9:66:95:7d:ce:1b:d3:f0:0e:71:a0:36:d7:9f:c2:
                    ba:05:98:01:c9:f5:49:5b:a5:de:ed:32:a6:db:dd:
                    cf:20:12:d5:1d:83:82:b2:cb:e8:45:eb:6d:ca:25:
                    68:5f:7e:39:dc:c3:e3:f4:5f:e0:7f:8a:67:33:ad:
                    af:cf:22:7e:6b:8e:6e:92:80:9f:d2:c9:15:b2:76:
                    66:16:9a:ea:c5:34:77:80:47:44:2d:46:63:30:b2:
                    9d:7b:16:e5:0a:83:fc:a8:b2:af:eb:7d:a6:ec:5a:
                    e0:2e:39:bf:6c:27:bb:da:c9:8e:d4:9a:59:79:13:
                    8a:aa:7d:f2:9e:bf:fa:94:d6:8e:90:b5:57:5e:51:
                    31:d8:ae:af:fe:15:45:28:d6:48:22:eb:9f:0f:d4:
                    b2:b9:b4:c7:38:9c:1d:1a:c1:50:98:da:ca:94:87:
                    de:55:52:80:89:1a:5b:00:9f:d2:66:23:af:99:4a:
                    06:9b:34:78:3f:76:de:34:5d:2b:2f:05:48:18:18:
                    de:af:61:27:1b:5a:c6:c8:e9:23:c0:20:1a:ae:e5:
                    18:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:37:B9:DF:DE:FD:31:FD:E0:F3:3F:06:A8:A8:4E:B7:59:91:CC:89
            X509v3 Authority Key Identifier:
                keyid:E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/3137372e35322e3136322e302f32342d3234203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:6e:b3:36:b9:76:e0:3b:09:7d:a4:ad:1f:d1:98:1d:8d:5e:
         56:c2:cd:18:0d:6f:4f:41:05:df:95:62:bb:70:60:89:ef:bc:
         f8:21:60:65:b9:a5:f5:f9:4d:90:7b:4f:43:c1:53:55:05:47:
         0c:96:a9:8f:90:98:b0:b2:a4:78:ea:d8:cd:9f:2b:61:69:06:
         b6:c6:45:66:23:17:0d:a5:2f:20:03:41:98:cb:5c:df:c8:9a:
         87:03:37:55:9a:38:7d:d7:34:fb:60:e0:c5:76:33:50:1d:de:
         86:56:43:37:3a:ee:e7:53:bc:17:f4:17:f9:34:d8:1d:44:da:
         fb:d2:63:49:96:3c:0a:5c:52:dc:c3:eb:1b:31:f3:1e:d5:db:
         81:a3:a1:1b:10:a9:10:31:ab:ee:1e:43:2e:a5:c6:1f:fe:d3:
         05:64:66:b1:7e:2c:c7:0b:3a:5c:22:1d:62:13:a1:6c:d8:eb:
         5e:48:aa:04:f6:44:d8:5a:7a:82:10:ac:69:75:60:65:b4:50:
         78:8b:76:2c:cc:0a:a2:a8:74:b2:9d:77:46:2e:72:3d:9f:99:
         3f:8c:2b:21:ef:a9:d2:eb:3e:98:93:a4:c2:cc:88:02:26:80:
         75:0b:16:14:6a:d6:c8:71:a9:f7:3e:42:88:03:03:92:3d:b0:
         2e:f9:e4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 14:44:14 2025 by rpki-client