Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa
File:                     3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa (raw, json)
Hash identifier:          cro6hIVcjeEeiAcnH5fnwHU14NKf7FT3DtgKoOW8ojg=
Subject key identifier:   09:67:2C:86:D6:F1:5A:43:64:41:0E:96:5B:33:63:8D:8C:A4:4C:ED
Certificate issuer:       /CN=88D55FAA7B5E1E71D137476BA24267E7BDBD54A9
Certificate serial:       12ADCEF4BC873E9254382DF13389CFE73F002EBE
Authority key identifier: 88:D5:5F:AA:7B:5E:1E:71:D1:37:47:6B:A2:42:67:E7:BD:BD:54:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa
Signing time:             Mon 03 Nov 2025 18:50:13 +0000
ROA not before:           Mon 03 Nov 2025 18:45:13 +0000
ROA not after:            Mon 02 Nov 2026 18:50:13 +0000
asID:                     271310
IP address blocks:        177.53.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.crl
                          rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 02:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ad:ce:f4:bc:87:3e:92:54:38:2d:f1:33:89:cf:e7:3f:00:2e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88D55FAA7B5E1E71D137476BA24267E7BDBD54A9
        Validity
            Not Before: Nov  3 18:45:13 2025 GMT
            Not After : Nov  2 18:50:13 2026 GMT
        Subject: CN=09672C86D6F15A4364410E965B33638D8CA44CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:46:fb:a7:b3:ec:41:24:57:aa:b6:3c:59:d6:
                    d3:fb:f2:33:bf:c5:9d:be:36:11:64:85:45:9c:9f:
                    60:3f:82:a9:ea:bd:31:c7:45:b9:fd:8a:bf:f1:d6:
                    bf:1e:87:cf:c8:b7:e3:64:80:c3:9a:73:91:7c:74:
                    ff:bd:9d:29:ce:54:21:c5:7c:bf:41:f3:4a:a4:a6:
                    ba:c4:dc:28:03:76:5d:c4:45:e1:07:99:14:ef:49:
                    8a:d6:53:55:8a:16:d5:0f:63:36:cf:dd:3c:2f:8b:
                    df:8a:59:4d:30:21:b2:e1:9f:03:ad:bc:28:82:f1:
                    79:fa:d7:82:a7:2f:df:6b:dc:30:b5:ec:f7:f4:c4:
                    3d:62:f9:c6:5e:7f:36:f8:74:08:96:6a:22:7c:61:
                    5a:e0:38:a5:df:8c:88:c8:12:1c:f7:68:71:3d:75:
                    df:9c:6b:32:88:a2:4a:ee:e9:68:d0:6c:c1:c5:03:
                    f3:6f:86:c3:3f:e7:ef:a9:e9:c9:a0:14:a9:93:11:
                    17:17:a3:9b:c2:99:55:8e:7c:78:30:bb:05:18:5b:
                    61:47:85:be:dc:84:3a:20:94:a1:e7:fa:f7:4f:51:
                    10:5f:3d:7d:84:68:ab:13:da:29:de:b8:e3:db:e3:
                    be:12:c0:91:30:c9:d4:f3:38:87:2a:85:a0:a7:9c:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:67:2C:86:D6:F1:5A:43:64:41:0E:96:5B:33:63:8D:8C:A4:4C:ED
            X509v3 Authority Key Identifier:
                keyid:88:D5:5F:AA:7B:5E:1E:71:D1:37:47:6B:A2:42:67:E7:BD:BD:54:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:98:00:32:f6:f3:55:11:5e:fc:70:dc:98:25:96:15:6a:07:
         c4:2b:0e:cc:dd:cb:8b:93:11:12:f8:fd:ba:b8:bd:32:6a:9c:
         78:61:28:61:46:ce:2e:c4:20:bc:c4:8c:64:3f:fe:0d:8a:5d:
         05:5b:6e:58:b3:9d:51:1a:6f:01:f4:5d:49:6c:58:e7:74:e3:
         d9:1c:65:c8:37:ad:f2:56:44:f7:88:46:37:ba:48:f5:6d:4a:
         71:2f:54:fe:cb:87:1c:58:67:a0:09:bf:07:46:0e:74:a7:07:
         cf:10:47:ff:87:77:d5:59:0f:df:53:3e:86:f6:8e:28:b1:cf:
         20:dd:e7:38:ec:5e:44:da:2a:a6:1c:94:e6:ea:d3:ee:3a:f8:
         82:28:97:f3:66:0d:fd:dd:38:20:ad:53:51:a8:2b:38:bf:26:
         2b:0c:02:8c:58:d0:88:7a:bf:49:ff:71:b2:c8:be:f9:18:1a:
         f1:0b:14:f2:86:13:fa:f3:96:c1:fe:05:5a:7a:cd:ae:7c:a1:
         88:62:8a:78:a3:65:9b:22:57:8d:91:ed:f6:7d:62:95:41:0e:
         46:ca:0c:fe:90:7d:d0:f0:91:b6:c8:a4:b2:3b:d2:7e:e7:a3:
         07:84:eb:6f:81:7f:9a:5d:d1:3b:0b:c7:8f:f6:34:a7:5b:0d:
         8e:9f:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 08:15:38 2025 by rpki-client