Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230302e302f32342d3234203d3e203532353837.roa
File:                     3137372e38372e3230302e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier:          tlWD0HzHIhfkJclR0v8ssrdgm/1+o7U+hMuXSlvl9Pc=
Subject key identifier:   63:46:4F:6F:51:03:ED:EC:61:29:A6:46:8E:51:A7:E7:0E:8C:85:5A
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       04CD4F7823DFF4174AAD76EAF8F46FC2655B730E
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230302e302f32342d3234203d3e203532353837.roa
Signing time:             Tue 03 Jun 2025 21:25:52 +0000
ROA not before:           Tue 03 Jun 2025 21:20:52 +0000
ROA not after:            Tue 02 Jun 2026 21:25:52 +0000
asID:                     52587
IP address blocks:        177.87.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cd:4f:78:23:df:f4:17:4a:ad:76:ea:f8:f4:6f:c2:65:5b:73:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Jun  3 21:20:52 2025 GMT
            Not After : Jun  2 21:25:52 2026 GMT
        Subject: CN=63464F6F5103EDEC6129A6468E51A7E70E8C855A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d5:9e:54:c8:b3:81:6c:86:53:e9:a0:eb:cb:
                    97:87:ff:eb:5a:af:1e:a0:ec:2a:27:b3:7f:3a:f9:
                    17:bc:89:84:e3:9e:79:76:6b:fe:47:d7:68:9d:58:
                    b2:93:2d:0e:00:eb:17:7f:34:e5:f2:b7:8d:c0:a9:
                    cc:38:ad:de:68:ac:fc:5b:12:62:e9:68:76:fd:76:
                    fe:4a:85:4b:50:b0:7e:09:79:b0:f7:76:76:78:bd:
                    a4:ea:bb:5c:08:ac:a5:8c:3d:93:6a:8e:de:41:56:
                    7b:b6:75:a9:0d:ad:a2:2c:cc:6a:c5:bf:27:fa:77:
                    25:bb:a5:88:ec:3c:43:d9:8d:9b:82:f1:1e:96:c7:
                    a4:27:cf:5f:da:8d:c9:dc:59:ca:17:35:1c:83:61:
                    1e:86:55:44:cf:f0:95:90:3a:a5:d8:79:c9:e1:33:
                    09:9a:e3:73:06:4d:c4:31:c0:5a:4b:f9:9a:6c:fc:
                    9a:63:c4:d6:2e:a4:d6:f6:45:4e:8f:fe:83:77:62:
                    ca:16:78:c6:71:5a:95:8d:c5:c6:be:54:03:da:90:
                    91:cb:8f:dc:95:40:f2:35:2d:1d:31:1f:fd:89:bd:
                    18:da:08:e2:d4:8e:f0:39:50:11:f7:b6:93:db:d5:
                    0b:32:a1:e7:84:93:a3:d8:a1:56:bb:eb:54:a0:cf:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:46:4F:6F:51:03:ED:EC:61:29:A6:46:8E:51:A7:E7:0E:8C:85:5A
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230302e302f32342d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e7:60:38:f1:2b:00:dd:4b:1c:29:9e:f8:02:a9:c9:d1:21:f3:
         78:9a:7a:44:00:b1:68:5d:4d:d6:a9:5a:98:e6:66:03:42:3f:
         01:89:a5:5d:57:ac:37:df:94:0a:22:1e:e7:81:ce:8c:54:de:
         59:c4:f4:cc:22:17:7e:2e:e3:9f:89:1f:69:b3:8f:f0:f6:26:
         1a:11:14:fa:2f:77:78:c6:11:2d:2a:15:a5:eb:81:bb:bb:75:
         3d:23:10:2b:d7:45:54:34:e8:e4:a1:75:74:3a:61:b8:06:8e:
         16:25:4e:7b:70:85:c2:e4:04:38:b2:23:b0:d2:fd:e4:9b:9f:
         3e:c9:2b:3b:6e:fd:3f:62:26:65:04:de:e6:75:de:a6:19:d3:
         6b:fd:99:27:52:40:94:a0:fe:c9:3b:f3:f3:a9:84:01:95:b2:
         40:ec:ee:9f:80:f5:33:4a:54:26:90:7d:f7:ee:68:e5:db:60:
         25:d4:d0:b8:5c:5e:16:70:63:80:4f:c7:b1:4d:e3:14:9e:aa:
         c7:7e:c2:9b:cc:64:6a:60:82:1d:c2:8c:2e:32:a7:01:48:57:
         dd:9e:1b:17:89:db:34:0c:f6:5a:4a:89:35:88:cb:37:06:e7:
         c5:a9:0b:b5:d6:85:18:4b:54:8d:dc:3f:7d:2c:b0:b2:ca:b7:
         ef:9b:d1:95
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBM1PeCPf9BdKrXbq+PRvwmVbcw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENGM0RBREJGNkY0MUREQkZCMjIxMDdENjgyQkFCNDg1
OUVCRUY5NjAeFw0yNTA2MDMyMTIwNTJaFw0yNjA2MDIyMTI1NTJaMDMxMTAvBgNV
BAMTKDYzNDY0RjZGNTEwM0VERUM2MTI5QTY0NjhFNTFBN0U3MEU4Qzg1NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh1Z5UyLOBbIZT6aDry5eH/+ta
rx6g7Cons386+Re8iYTjnnl2a/5H12idWLKTLQ4A6xd/NOXyt43Aqcw4rd5orPxb
EmLpaHb9dv5KhUtQsH4JebD3dnZ4vaTqu1wIrKWMPZNqjt5BVnu2dakNraIszGrF
vyf6dyW7pYjsPEPZjZuC8R6Wx6Qnz1/ajcncWcoXNRyDYR6GVUTP8JWQOqXYecnh
Mwma43MGTcQxwFpL+Zps/JpjxNYupNb2RU6P/oN3YsoWeMZxWpWNxca+VAPakJHL
j9yVQPI1LR0xH/2JvRjaCOLUjvA5UBH3tpPb1QsyoeeEk6PYoVa761Sgz8NNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUY0ZPb1ED7exhKaZGjlGn5w6MhVowHwYDVR0j
BBgwFoAUDPPa2/b0Hdv7IhB9aCurSFnr75YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXJBeXRxWkgxdGlFVFdhbWo4WTgxVk1uUjlDVXB5V3M3U1o1c0Zad2dT
a00vMS8wQ0YzREFEQkY2RjQxRERCRkIyMjEwN0Q2ODJCQUI0ODU5RUJFRjk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDRjNEQURCRjZGNDFEREJG
QjIyMTA3RDY4MkJBQjQ4NTlFQkVGOTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlyQXl0cVpIMXRpRVRXYW1qOFk4MVZNblI5Q1VweVdzN1NaNXNGWndnU2tNLzEv
MzEzNzM3MmUzODM3MmUzMjMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzUzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVfIMA0GCSqGSIb3DQEBCwUAA4IBAQDnYDjxKwDd
SxwpnvgCqcnRIfN4mnpEALFoXU3WqVqY5mYDQj8BiaVdV6w335QKIh7ngc6MVN5Z
xPTMIhd+LuOfiR9ps4/w9iYaERT6L3d4xhEtKhWl64G7u3U9IxAr10VUNOjkoXV0
OmG4Bo4WJU57cIXC5AQ4siOw0v3km58+ySs7bv0/YiZlBN7mdd6mGdNr/ZknUkCU
oP7JO/PzqYQBlbJA7O6fgPUzSlQmkH337mjl22Al1NC4XF4WcGOAT8exTeMUnqrH
fsKbzGRqYIIdwowuMqcBSFfdnhsXids0DPZaSok1iMs3BufFqQu11oUYS1SN3D99
LLCyyrfvm9GV
-----END CERTIFICATE-----
Generated at Sat Jun 14 14:02:02 2025 by rpki-client