Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa
File:                     3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa (raw, json)
Hash identifier:          SgEnakWWlh6mOXYejlFrDrjnT34ctnnkRDrar2MCFKs=
Subject key identifier:   A3:AA:6A:41:F2:B8:99:05:22:80:F6:97:6D:11:9A:F8:A2:A5:17:E5
Certificate issuer:       /CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Certificate serial:       4190E323F9D8A8D05F92C8001956BED914820C28
Authority key identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa
Signing time:             Tue 19 Aug 2025 20:06:22 +0000
ROA not before:           Tue 19 Aug 2025 20:01:22 +0000
ROA not after:            Tue 18 Aug 2026 20:06:22 +0000
asID:                     262503
IP address blocks:        177.66.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:90:e3:23:f9:d8:a8:d0:5f:92:c8:00:19:56:be:d9:14:82:0c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
        Validity
            Not Before: Aug 19 20:01:22 2025 GMT
            Not After : Aug 18 20:06:22 2026 GMT
        Subject: CN=A3AA6A41F2B899052280F6976D119AF8A2A517E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:1f:37:95:79:d6:bc:22:6c:41:a3:af:14:
                    5a:d9:bf:d2:55:84:3a:97:e8:ee:85:cd:a7:66:08:
                    dd:2b:f4:a7:74:24:d1:0a:ae:22:cd:ae:bc:dc:0d:
                    1b:da:fe:46:8b:ff:05:58:f1:70:7c:e1:2f:7d:14:
                    ad:3a:4f:19:3e:7a:57:7f:1f:2f:61:ce:4a:c8:05:
                    87:d8:ba:9d:d9:aa:9f:14:66:7d:fd:dd:3d:73:80:
                    fa:73:04:b0:7b:9e:2f:8d:1d:b9:6a:d9:94:8e:19:
                    fd:84:99:a0:88:7d:eb:f2:d6:ff:18:12:11:6a:59:
                    84:ed:f5:a2:1b:b1:16:cd:3f:d1:cc:c5:59:82:35:
                    93:6d:19:64:fa:55:83:14:a1:ee:32:89:07:89:33:
                    9a:bd:50:47:5d:94:3f:32:0b:4a:50:d8:ef:75:3c:
                    07:0f:5f:29:e2:07:4e:4b:c2:32:a1:c4:76:49:6c:
                    3d:67:9c:4a:f7:fa:80:2e:ab:bc:af:ed:f5:d9:dc:
                    fe:47:58:85:64:78:fc:5f:db:43:c8:a8:00:a4:5e:
                    24:1c:48:ea:56:51:05:f4:3c:af:d7:8d:71:a0:72:
                    49:f7:a3:93:ff:f3:b8:28:c7:7d:ae:95:b6:45:7a:
                    c3:e2:c9:e3:28:17:40:4d:95:7d:75:e4:29:dd:1a:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AA:6A:41:F2:B8:99:05:22:80:F6:97:6D:11:9A:F8:A2:A5:17:E5
            X509v3 Authority Key Identifier:
                keyid:12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:63:85:49:c0:8b:c7:11:31:eb:d2:58:93:ef:18:bf:d5:e5:
         be:a0:04:06:98:ae:d2:fc:69:dd:d6:68:91:a4:3c:fa:65:c6:
         88:c1:12:5f:9c:45:ae:76:cf:cc:51:4f:d1:c5:e0:b9:72:87:
         48:92:ca:2b:ba:c5:03:42:6a:5a:34:bd:ca:0b:77:4f:f2:c5:
         66:05:62:fc:14:fa:5c:84:3c:18:b7:e5:87:8c:e7:90:ce:7b:
         76:2a:09:47:da:8c:4c:dd:4b:52:20:a4:5f:07:1d:44:69:10:
         2e:9f:e5:a5:14:b6:a4:ec:4c:8b:9a:20:79:6a:c2:97:38:47:
         66:0d:07:f9:b1:dc:90:78:06:e8:89:98:fb:87:05:0e:ab:ac:
         58:09:4e:6e:d5:ef:79:d1:15:e2:2f:6f:76:c5:ef:02:44:2c:
         cd:8b:33:88:b0:1a:25:85:32:94:55:a3:8b:d3:7a:91:43:11:
         df:fd:1b:c2:dd:be:de:44:78:9a:96:d7:61:ff:f4:a4:c3:5e:
         d1:c9:51:b6:be:9d:7f:c1:63:79:74:2b:4f:d7:d1:43:ea:96:
         1c:7e:f5:b7:0f:10:61:fd:0a:36:d8:10:4b:5e:e0:98:2d:8c:
         19:d0:00:e3:bf:a8:9d:86:99:7d:e8:88:09:ce:5f:39:3a:91:
         b6:db:75:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQZDjI/nYqNBfksgAGVa+2RSCDCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIzQjAzRDQ2NjYwREVFOUIzMkUyNzEyMzQyRUI0RjQ4
NTkxQzdCNjAeFw0yNTA4MTkyMDAxMjJaFw0yNjA4MTgyMDA2MjJaMDMxMTAvBgNV
BAMTKEEzQUE2QTQxRjJCODk5MDUyMjgwRjY5NzZEMTE5QUY4QTJBNTE3RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHmh83lXnWvCJsQaOvFFrZv9JV
hDqX6O6FzadmCN0r9Kd0JNEKriLNrrzcDRva/kaL/wVY8XB84S99FK06Txk+eld/
Hy9hzkrIBYfYup3Zqp8UZn393T1zgPpzBLB7ni+NHblq2ZSOGf2EmaCIfevy1v8Y
EhFqWYTt9aIbsRbNP9HMxVmCNZNtGWT6VYMUoe4yiQeJM5q9UEddlD8yC0pQ2O91
PAcPXyniB05LwjKhxHZJbD1nnEr3+oAuq7yv7fXZ3P5HWIVkePxf20PIqACkXiQc
SOpWUQX0PK/XjXGgckn3o5P/87gox32ulbZFesPiyeMoF0BNlX115CndGhx5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUo6pqQfK4mQUigPaXbRGa+KKlF+UwHwYDVR0j
BBgwFoAUEjsD1GZg3umzLicSNC609IWRx7YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC8xMjNCMDNENDY2NjBERUU5QjMyRTI3MTIzNDJFQjRGNDg1OTFDN0I2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyM0IwM0Q0NjY2MERFRTlC
MzJFMjcxMjM0MkVCNEY0ODU5MUM3QjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzEzNzM3MmUzNjM2MmUzMTM5MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxQsAwDQYJKoZIhvcNAQELBQADggEBAD1jhUnA
i8cRMevSWJPvGL/V5b6gBAaYrtL8ad3WaJGkPPplxojBEl+cRa52z8xRT9HF4Lly
h0iSyiu6xQNCalo0vcoLd0/yxWYFYvwU+lyEPBi35YeM55DOe3YqCUfajEzdS1Ig
pF8HHURpEC6f5aUUtqTsTIuaIHlqwpc4R2YNB/mx3JB4BuiJmPuHBQ6rrFgJTm7V
73nRFeIvb3bF7wJELM2LM4iwGiWFMpRVo4vTepFDEd/9G8Ldvt5EeJqW12H/9KTD
XtHJUba+nX/BY3l0K0/X0UPqlhx+9bcPEGH9CjbYEEte4JgtjBnQAOO/qJ2GmX3o
iAnOXzk6kbbbdbI=
-----END CERTIFICATE-----
Generated at Thu Aug 21 07:22:30 2025 by rpki-client