Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32322d3232203d3e20323632353033.roa
File:                     3137372e36362e3139322e302f32322d3232203d3e20323632353033.roa (raw, json)
Hash identifier:          f7ZB3C158XlyvRN6pYP303uJ1ilJRily/0+jx8DjRLI=
Subject key identifier:   19:CF:7F:EF:48:4F:A5:CF:86:E9:82:4C:53:94:74:80:7B:F1:8C:CA
Certificate issuer:       /CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Certificate serial:       7BF673807B37E446B9A3F66A34E9F430102C518F
Authority key identifier: AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32322d3232203d3e20323632353033.roa
Signing time:             Thu 29 May 2025 18:50:13 +0000
ROA not before:           Thu 29 May 2025 18:45:13 +0000
ROA not after:            Thu 28 May 2026 18:50:13 +0000
asID:                     262503
IP address blocks:        177.66.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 21:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f6:73:80:7b:37:e4:46:b9:a3:f6:6a:34:e9:f4:30:10:2c:51:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
        Validity
            Not Before: May 29 18:45:13 2025 GMT
            Not After : May 28 18:50:13 2026 GMT
        Subject: CN=19CF7FEF484FA5CF86E9824C539474807BF18CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:e7:dc:b2:7d:76:82:bb:66:a5:84:a0:97:
                    40:c6:c6:c6:e9:18:1e:15:58:bb:8f:06:e8:f1:d5:
                    e7:98:3b:b1:2e:a6:65:90:0f:b0:a3:45:d1:b3:2e:
                    a6:a9:bd:95:c2:c7:38:be:21:0c:ab:38:cb:f9:48:
                    9c:13:13:53:65:94:78:a5:08:ab:c0:ec:d2:45:27:
                    d7:59:42:ee:aa:87:d4:51:cf:ca:18:f4:a4:6c:47:
                    f0:c3:20:f3:0f:13:67:6e:d6:82:c4:e2:fb:82:6e:
                    94:0d:55:14:74:0e:d7:e3:2b:8b:6f:cc:3f:73:27:
                    06:9d:48:69:d2:6f:98:48:0d:36:83:17:ee:bd:eb:
                    c5:4f:d5:b2:47:26:0f:0a:09:29:f3:85:db:5a:a1:
                    6d:eb:45:69:35:62:84:4a:20:23:4a:2d:56:10:e9:
                    b9:c4:f0:39:9e:a4:7f:62:df:80:f3:8b:bf:9d:c6:
                    b5:78:42:5a:73:25:06:e8:af:ee:dd:8c:cd:15:ad:
                    b5:04:1a:8a:d8:ba:ec:99:3c:17:d5:26:52:ec:e6:
                    c6:60:7a:bc:e0:33:19:98:ff:64:c4:88:dc:49:74:
                    2d:5b:0f:92:08:6d:f0:be:2f:87:c3:eb:da:3b:e5:
                    65:02:fe:61:64:78:a2:98:5e:0f:5c:ab:fd:36:80:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CF:7F:EF:48:4F:A5:CF:86:E9:82:4C:53:94:74:80:7B:F1:8C:CA
            X509v3 Authority Key Identifier:
                keyid:AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32322d3232203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:0f:ba:6f:58:1c:5b:6c:2e:e4:73:7b:72:0f:d2:55:99:52:
         15:37:ab:29:d6:b0:07:63:02:f2:5d:4a:57:25:ff:7c:af:83:
         1d:c2:95:85:a7:70:d5:11:ed:b1:73:28:b1:af:00:93:9c:0a:
         b2:a0:b8:bd:70:88:c7:6b:08:0d:4d:be:32:51:7a:d2:70:f5:
         1f:62:aa:2e:61:c8:a6:d2:e9:6a:6f:28:8f:ae:ab:65:7f:39:
         9a:cd:df:4b:61:6e:11:e4:f8:d3:69:b7:23:b2:95:9b:e9:e8:
         64:f0:37:a4:f3:99:e5:fa:fc:ae:d0:32:f7:7d:75:31:e2:39:
         ce:17:98:06:af:70:c0:a3:ae:87:d3:47:59:26:54:ca:fb:97:
         eb:83:02:09:10:ca:ff:de:59:f2:2c:01:93:21:91:f2:0f:0c:
         9e:4e:65:11:54:5f:ae:2f:9a:bd:a3:6f:98:ed:43:c7:ee:06:
         66:c6:77:ff:62:69:00:ae:af:37:67:60:67:c2:b4:b1:cb:a8:
         b7:d5:07:c0:fd:c0:fb:14:93:a2:14:14:27:fe:45:17:de:c6:
         36:fd:1a:d2:1f:7d:c4:44:ef:0d:72:c7:46:1b:ba:b4:b4:a7:
         6a:ae:79:76:73:3b:ec:72:21:b5:8b:ae:09:05:40:ae:b8:d1:
         16:89:86:41
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe/ZzgHs35Ea5o/ZqNOn0MBAsUY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM2NEIyRDE3NzFBQjMwRTE4ODgzQ0REMTQwMDFBODJE
OTkwNUY5ODAeFw0yNTA1MjkxODQ1MTNaFw0yNjA1MjgxODUwMTNaMDMxMTAvBgNV
BAMTKDE5Q0Y3RkVGNDg0RkE1Q0Y4NkU5ODI0QzUzOTQ3NDgwN0JGMThDQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCIefcsn12grtmpYSgl0DGxsbp
GB4VWLuPBujx1eeYO7EupmWQD7CjRdGzLqapvZXCxzi+IQyrOMv5SJwTE1NllHil
CKvA7NJFJ9dZQu6qh9RRz8oY9KRsR/DDIPMPE2du1oLE4vuCbpQNVRR0DtfjK4tv
zD9zJwadSGnSb5hIDTaDF+6968VP1bJHJg8KCSnzhdtaoW3rRWk1YoRKICNKLVYQ
6bnE8DmepH9i34Dzi7+dxrV4QlpzJQbor+7djM0VrbUEGorYuuyZPBfVJlLs5sZg
erzgMxmY/2TEiNxJdC1bD5IIbfC+L4fD69o75WUC/mFkeKKYXg9cq/02gJSPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGc9/70hPpc+G6YJMU5R0gHvxjMowHwYDVR0j
BBgwFoAUrGSy0Xcasw4YiDzdFAAagtmQX5gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC9BQzY0QjJEMTc3MUFCMzBFMTg4ODNDREQxNDAwMUE4MkQ5OTA1Rjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDNjRCMkQxNzcxQUIzMEUx
ODg4M0NERDE0MDAxQTgyRDk5MDVGOTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzEzNzM3MmUzNjM2MmUzMTM5MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxQsAwDQYJKoZIhvcNAQELBQADggEBAGMPum9Y
HFtsLuRze3IP0lWZUhU3qynWsAdjAvJdSlcl/3yvgx3ClYWncNUR7bFzKLGvAJOc
CrKguL1wiMdrCA1NvjJRetJw9R9iqi5hyKbS6WpvKI+uq2V/OZrN30thbhHk+NNp
tyOylZvp6GTwN6TzmeX6/K7QMvd9dTHiOc4XmAavcMCjrofTR1kmVMr7l+uDAgkQ
yv/eWfIsAZMhkfIPDJ5OZRFUX64vmr2jb5jtQ8fuBmbGd/9iaQCurzdnYGfCtLHL
qLfVB8D9wPsUk6IUFCf+RRfexjb9GtIffcRE7w1yx0YburS0p2queXZzO+xyIbWL
rgkFQK640RaJhkE=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:38:02 2025 by rpki-client