Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139342e302f32342d3234203d3e20323632353033.roa
File:                     3137372e36362e3139342e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          E0gvKI34RDG/hArb+mjuLwEEvo7elYgpvZlKLdw82pk=
Subject key identifier:   15:9A:19:24:4C:27:C3:67:E9:7D:FC:3C:6D:C3:6C:10:9B:D0:82:03
Certificate issuer:       /CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Certificate serial:       076821781AE2D43C0F5D134FE5F9015ADAC016AB
Authority key identifier: AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139342e302f32342d3234203d3e20323632353033.roa
Signing time:             Thu 29 May 2025 18:50:12 +0000
ROA not before:           Thu 29 May 2025 18:45:12 +0000
ROA not after:            Thu 28 May 2026 18:50:12 +0000
asID:                     262503
IP address blocks:        177.66.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 21:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:68:21:78:1a:e2:d4:3c:0f:5d:13:4f:e5:f9:01:5a:da:c0:16:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
        Validity
            Not Before: May 29 18:45:12 2025 GMT
            Not After : May 28 18:50:12 2026 GMT
        Subject: CN=159A19244C27C367E97DFC3C6DC36C109BD08203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:70:a9:21:fe:b3:8f:3b:24:d6:5e:04:fc:
                    d6:e1:66:16:d0:59:6e:79:79:fc:7f:b8:c3:ad:68:
                    29:d7:c8:17:39:8e:e4:6e:e5:e2:9d:97:23:3f:33:
                    72:4d:63:9f:b2:06:81:d4:f5:0b:1c:bd:63:35:e2:
                    14:d6:c0:54:48:a2:0c:d1:4f:76:88:c2:cb:34:cb:
                    d9:22:f2:ae:78:0f:d1:bf:a6:8b:75:52:99:fd:71:
                    20:ae:e4:f3:28:fb:1e:36:cd:41:a1:97:c8:06:fd:
                    fc:69:71:12:a6:ed:86:89:b0:9e:6a:0d:24:a7:c5:
                    33:ac:52:ce:05:ed:67:db:86:d6:63:6e:9e:1e:ca:
                    30:3e:17:d0:a0:64:c3:e0:57:0f:38:fa:06:d9:8f:
                    f1:e0:fc:80:71:62:79:80:e8:a6:1d:bb:02:a2:03:
                    13:a5:63:fe:e9:80:63:09:04:9f:08:43:8e:9b:e1:
                    41:6d:61:a6:3c:43:d2:dd:d7:04:06:84:01:e4:26:
                    57:36:7f:db:0b:8b:a2:f9:6c:08:19:5b:95:ce:b6:
                    e7:d0:de:09:31:c4:41:ff:b4:c4:b3:19:7e:be:f6:
                    dc:9a:f2:44:b0:d6:fe:87:fe:a1:32:ed:8d:7a:11:
                    70:2e:c6:13:48:07:0b:49:3d:24:64:14:db:77:f0:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9A:19:24:4C:27:C3:67:E9:7D:FC:3C:6D:C3:6C:10:9B:D0:82:03
            X509v3 Authority Key Identifier:
                keyid:AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139342e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:ef:6a:4a:2c:3e:4f:f9:7a:2f:59:a1:ec:5b:62:8a:dd:77:
         1b:8f:61:05:44:a7:54:73:e3:9b:bb:9e:22:23:06:04:da:1b:
         1d:af:7b:10:ba:80:db:2f:0c:8e:b1:19:ff:c2:d5:23:8c:be:
         98:ad:47:b4:64:bc:d5:2a:e2:8f:24:52:68:a2:08:58:b7:98:
         b6:86:60:b2:ff:6b:2b:90:9e:8a:0f:ef:bb:4c:6b:70:41:0e:
         6f:9a:8f:cd:d4:83:c2:00:ac:36:4b:46:a2:f6:42:f5:2f:ff:
         33:20:be:54:8a:2b:fb:29:be:a1:6c:e5:9d:a8:ab:9f:b4:b7:
         c2:82:65:72:0f:50:8f:b0:32:7a:be:00:40:d3:21:93:6e:2f:
         df:27:0a:6d:fa:69:0b:63:b5:cd:d7:e6:55:c2:ef:a7:0b:e6:
         de:d1:f1:37:2d:09:be:7e:d1:73:63:ac:d7:a1:53:b4:dc:bf:
         4b:4f:3f:e7:76:95:ac:7e:3c:70:9b:37:c6:55:7b:58:49:61:
         b2:6a:8c:f3:98:eb:18:ce:99:f8:73:37:60:05:b1:02:3c:80:
         8e:42:9d:37:b6:6a:84:a5:0b:33:36:b7:ad:ca:59:00:2b:d8:
         4a:d9:fc:27:2c:8e:02:2c:7a:cf:c7:5c:d2:87:48:a1:42:e6:
         14:8a:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:48:23 2025 by rpki-client