Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139352e302f32342d3234203d3e20323632353033.roa
File:                     3137372e36362e3139352e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          5ViVBwPUNYdci5ezpdVXcp1kRYJi209mk3eVQSXdRuw=
Subject key identifier:   B1:4B:E6:A7:9F:DA:EF:9C:60:21:C8:07:C0:5F:5C:DF:DB:78:42:D4
Certificate issuer:       /CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Certificate serial:       6A9840E0E1A9531B17AE50D4D0A3FAFB12F1245E
Authority key identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139352e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 19 Aug 2025 20:06:23 +0000
ROA not before:           Tue 19 Aug 2025 20:01:23 +0000
ROA not after:            Tue 18 Aug 2026 20:06:23 +0000
asID:                     262503
IP address blocks:        177.66.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:98:40:e0:e1:a9:53:1b:17:ae:50:d4:d0:a3:fa:fb:12:f1:24:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
        Validity
            Not Before: Aug 19 20:01:23 2025 GMT
            Not After : Aug 18 20:06:23 2026 GMT
        Subject: CN=B14BE6A79FDAEF9C6021C807C05F5CDFDB7842D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:ba:fe:f2:09:1f:eb:b8:38:5d:56:26:2f:
                    63:7c:22:8a:7e:7b:cc:fe:3c:6c:c0:3d:69:24:47:
                    c2:67:6f:3f:38:0a:ca:e0:16:e3:cc:fb:35:a1:1a:
                    25:b0:2f:48:1d:c9:4c:8c:3b:23:ca:c4:20:c9:2b:
                    45:14:69:fd:fb:2b:ef:1a:3c:a8:e3:f4:9b:a6:6a:
                    8a:8b:f8:dd:fd:2f:8f:b2:0d:01:dd:f0:1c:1e:cb:
                    23:ad:61:32:4d:39:e9:93:80:87:fd:33:2a:f3:43:
                    e1:d4:17:48:9a:a4:09:9e:05:73:a3:52:45:52:2b:
                    09:5e:17:86:c4:85:fe:18:13:7f:59:71:c9:c9:04:
                    43:55:ce:1a:8b:03:2f:27:d6:3f:76:c1:9b:8c:59:
                    4c:5c:12:bd:1c:b9:9c:b8:ab:b9:11:40:2d:45:91:
                    83:f7:84:a8:5e:f3:56:f9:3b:8e:d1:54:68:0e:4e:
                    8d:10:9c:41:f8:09:90:27:1f:4f:7c:37:f0:63:6c:
                    5e:e7:2d:4f:97:d9:be:53:8a:47:69:2b:21:0c:97:
                    3f:e6:a1:22:bb:6d:47:01:fd:72:42:fc:ae:a3:3e:
                    f4:57:a1:96:f8:c2:ab:71:50:9e:c3:92:ba:7d:34:
                    a9:48:34:12:8a:a8:5b:15:d9:a8:b4:ee:c9:0d:ec:
                    e6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:E6:A7:9F:DA:EF:9C:60:21:C8:07:C0:5F:5C:DF:DB:78:42:D4
            X509v3 Authority Key Identifier:
                keyid:12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139352e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:e2:54:dd:39:16:1d:7f:9e:5a:f6:a6:15:78:60:5b:6a:4e:
         d4:3d:e8:b6:ac:ed:c9:fa:ab:7a:82:73:40:53:04:53:13:9b:
         0d:f0:4e:dc:f7:1f:e4:38:c8:dd:ab:e0:9b:aa:16:7b:fe:cb:
         60:a8:92:5a:de:06:a7:d1:34:d2:c9:46:e0:55:b4:e2:cd:24:
         a4:0c:c3:97:6d:a8:44:fc:36:99:eb:34:0e:98:01:1c:18:28:
         9c:4a:d9:f0:cb:db:8f:e6:a9:b7:58:24:ff:94:b7:08:b3:30:
         cd:28:68:c4:50:4a:f4:56:b3:f8:cb:b7:a7:18:70:af:44:3b:
         69:c3:bb:57:08:ac:dc:b0:37:bd:25:79:b0:7d:2f:dc:85:33:
         62:db:25:1b:45:2a:87:c5:53:24:6b:ac:f8:44:64:04:f5:3e:
         7f:b4:3b:d5:ac:51:93:58:bb:70:c1:19:9c:20:6f:6a:f9:9b:
         5b:00:9a:35:72:79:6d:80:4d:69:96:d6:33:82:22:f7:b3:42:
         25:8d:8f:c3:ff:75:d0:a5:d9:03:70:fa:f2:8b:cd:d5:29:49:
         d9:54:65:42:ed:3c:ff:e6:23:6e:3c:8f:42:8f:e7:7b:3d:c4:
         be:f8:ab:aa:1b:01:ba:f9:80:c3:e9:07:d3:d6:a1:bc:8e:6c:
         4b:b7:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:24:08 2025 by rpki-client