Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131322e302f32312d3332203d3e20323632343934.roa
File:                     3137372e36362e3131322e302f32312d3332203d3e20323632343934.roa (raw, json)
Hash identifier:          EmE/yiiH2n3fa+ilQdsIw7q9y5AGhGk/bmCZzK92/o4=
Subject key identifier:   6B:3A:2F:49:FC:32:CE:CB:14:A2:12:32:83:A7:74:D0:51:E7:99:E3
Certificate issuer:       /CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
Certificate serial:       07396389B46562B09CFB7922DE3EE8059465BACA
Authority key identifier: A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131322e302f32312d3332203d3e20323632343934.roa
Signing time:             Mon 04 Aug 2025 20:22:05 +0000
ROA not before:           Mon 04 Aug 2025 20:17:05 +0000
ROA not after:            Mon 03 Aug 2026 20:22:05 +0000
asID:                     262494
IP address blocks:        177.66.112.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 20:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:39:63:89:b4:65:62:b0:9c:fb:79:22:de:3e:e8:05:94:65:ba:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
        Validity
            Not Before: Aug  4 20:17:05 2025 GMT
            Not After : Aug  3 20:22:05 2026 GMT
        Subject: CN=6B3A2F49FC32CECB14A2123283A774D051E799E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8b:ea:e6:4f:03:60:7f:f7:9d:e2:a2:2f:8e:
                    60:87:ff:b3:55:10:7a:07:4f:e3:72:90:d5:48:dc:
                    c6:b2:b6:8e:0f:df:13:47:6a:fb:a4:af:9f:74:21:
                    53:06:5c:2c:c7:95:3c:b1:7a:50:5b:5d:67:dd:75:
                    78:7b:42:df:95:fe:2e:ef:de:2f:53:bb:a7:17:6f:
                    e4:06:13:73:27:4f:0b:64:2f:ba:82:e8:5a:8c:ed:
                    6c:67:e4:37:8a:df:b7:35:11:ac:da:4d:38:44:7d:
                    14:c3:2c:19:53:d8:c0:22:4c:cb:4b:02:7a:18:d6:
                    da:39:4e:7a:a9:16:ce:72:75:ba:40:27:c3:06:4e:
                    d2:fe:56:62:17:f6:86:9b:4c:32:84:eb:86:f3:01:
                    90:50:0b:02:60:07:88:8f:dd:b3:b9:cf:83:0b:fc:
                    2e:96:25:8c:ef:c9:d1:cf:c8:b0:e0:e1:e6:6e:cc:
                    b2:17:e1:48:07:5f:5d:23:bc:70:12:dd:f9:f9:8a:
                    ff:35:eb:14:86:83:86:df:69:bc:e2:6b:7a:e7:d4:
                    e3:ea:78:07:5f:ca:00:3f:3b:9a:c5:7d:5d:c6:4f:
                    b0:bf:38:9f:67:4e:12:66:8d:8e:1e:73:f0:57:a3:
                    aa:e8:58:81:3a:36:51:bb:13:11:54:d7:e3:4f:b9:
                    7e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3A:2F:49:FC:32:CE:CB:14:A2:12:32:83:A7:74:D0:51:E7:99:E3
            X509v3 Authority Key Identifier:
                keyid:A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131322e302f32312d3332203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:87:6d:d8:8a:fd:bc:3a:fb:4d:c2:60:e2:12:ca:5c:e1:2e:
         0e:6f:1c:57:07:0d:88:5a:be:e0:bc:85:ba:35:fb:73:95:59:
         fb:c2:e8:0a:91:bc:15:77:ac:2a:7c:1a:06:f9:b5:cf:fc:cc:
         b2:3e:78:6d:48:77:8e:e4:7a:03:29:ba:fd:a8:8c:55:47:58:
         8d:8c:da:53:7b:5d:d4:cf:6f:8e:88:b9:f5:7a:61:5b:85:ab:
         6d:b2:cc:c9:a8:da:00:c8:c1:27:fb:bb:97:b4:e5:5a:8e:9e:
         8a:37:4f:65:71:41:41:e5:6b:93:2a:ae:7c:94:34:bc:3f:0f:
         e7:9f:de:b3:82:33:dc:f1:69:7a:a4:94:8f:b7:14:7e:b5:75:
         6e:98:df:12:2f:cb:eb:5a:ca:85:c1:aa:c0:22:c8:86:9f:87:
         96:e0:4b:69:56:c3:58:79:15:38:67:97:3e:49:46:95:2c:f8:
         95:bc:77:73:fb:e5:9a:97:5d:d9:71:d3:cf:54:c8:51:8e:f4:
         25:86:fc:02:e9:60:b8:38:a2:7e:1c:21:74:af:0e:9b:3b:55:
         33:1c:1c:41:a7:95:fa:6b:eb:15:1b:e6:0c:e5:f1:dd:5b:a9:
         de:e5:4f:40:46:b7:4f:77:ab:08:2b:7f:c1:be:0e:14:d4:51:
         46:0f:85:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:02:06 2025 by rpki-client