Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3135352e302e302f31382d3138203d3e203238363135.roa
File:                     3137372e3135352e302e302f31382d3138203d3e203238363135.roa (raw, json)
Hash identifier:          tJ1/zBMQR07ACtyk6h+bMxvbHMvM8U9/IGUdJTyv7BM=
Subject key identifier:   50:A8:C4:C8:68:9E:2F:98:D0:AA:60:26:CC:CD:7A:A1:00:AC:3E:1B
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       77ED4637160C96AC13FACC536D8E07C8C3A78B2E
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3135352e302e302f31382d3138203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:49:15 +0000
ROA not before:           Thu 30 Oct 2025 02:44:15 +0000
ROA not after:            Thu 29 Oct 2026 02:49:15 +0000
asID:                     28615
IP address blocks:        177.155.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ed:46:37:16:0c:96:ac:13:fa:cc:53:6d:8e:07:c8:c3:a7:8b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:15 2025 GMT
            Not After : Oct 29 02:49:15 2026 GMT
        Subject: CN=50A8C4C8689E2F98D0AA6026CCCD7AA100AC3E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:5e:e4:d9:37:9b:ae:6b:f2:f1:95:f8:c2:
                    97:dc:46:1e:58:fc:85:fe:62:61:04:eb:d4:9d:13:
                    bc:25:88:bb:13:c2:11:64:e8:d8:b8:45:31:f8:e5:
                    04:a6:b9:16:7c:c0:af:e9:5d:cf:0c:7e:8a:b2:54:
                    91:c7:d4:ed:ff:05:fc:62:16:bb:e6:5b:dc:63:ba:
                    bb:b8:fa:6b:23:45:00:aa:52:aa:b3:d7:ce:3e:0f:
                    1a:55:4f:ec:f5:69:28:40:c7:9a:d9:f4:a1:07:51:
                    36:42:8b:d5:29:82:89:aa:ec:a6:f7:2b:18:3f:80:
                    4e:06:aa:89:cb:79:1a:29:3a:23:94:48:22:db:b6:
                    4f:1b:36:ef:8f:53:71:4e:29:32:e5:59:80:b7:c6:
                    f4:eb:c8:bf:ab:f3:ff:1b:0c:ba:a6:8a:a5:7b:7e:
                    36:96:4c:3a:0a:f1:64:46:bc:61:d4:67:01:dd:d3:
                    40:d5:75:59:a4:e2:0f:3e:20:8a:0d:d9:bc:30:76:
                    eb:98:e7:bd:93:94:bf:b4:27:35:e1:a6:f2:22:e1:
                    81:81:de:9d:ce:98:37:20:f6:24:7c:fe:75:a0:10:
                    4d:c1:25:a3:1a:5e:43:d9:ff:7f:43:a3:b4:2a:81:
                    2c:23:73:bc:49:bb:ab:39:73:61:29:b2:2f:db:f4:
                    93:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A8:C4:C8:68:9E:2F:98:D0:AA:60:26:CC:CD:7A:A1:00:AC:3E:1B
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3137372e3135352e302e302f31382d3138203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         97:93:f6:fe:a0:23:c2:a5:d7:6c:e9:dd:41:1a:95:96:89:13:
         d1:d6:8f:e3:31:b0:87:3c:46:6d:44:80:07:8d:e9:84:41:93:
         6c:e2:9a:eb:3c:d6:94:94:11:e6:fe:d9:b9:d4:ba:f1:63:5b:
         c7:da:95:68:0f:10:9d:16:88:27:0e:6e:af:40:d8:d8:35:15:
         2e:4a:27:ca:a8:fd:1c:39:f3:ce:8e:c6:5e:5a:9e:a0:dd:c5:
         d6:8d:9a:30:d7:b5:8f:f8:ba:24:ae:06:2f:3e:82:b4:06:a5:
         6d:58:35:be:ea:23:a4:98:a7:6e:df:03:39:6c:89:24:b8:6a:
         6c:e1:3e:d5:1a:ed:79:86:ad:85:8d:c1:01:eb:b9:0b:1a:82:
         24:31:a3:7b:04:07:b0:12:a1:44:b1:de:7d:14:2b:9a:1b:20:
         8b:f8:5f:24:0d:6b:a8:c3:28:63:12:c0:63:74:bf:b8:63:cf:
         ce:17:4c:be:9b:bc:ff:29:b3:fa:91:09:57:d3:9d:ad:7a:dd:
         55:0c:56:78:61:6f:f6:b1:02:79:0c:f5:73:9f:40:51:f8:65:
         8a:2d:ea:68:eb:1c:e0:13:8f:f2:f9:ce:81:0f:fb:ed:4b:5c:
         57:7e:74:66:4e:de:59:a1:3c:16:d4:db:d4:cc:42:64:14:19:
         9c:38:49:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:02:12 2025 by rpki-client