Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3137372e39322e3234302e302f32312d3234203d3e20323632363036.roa
File:                     3137372e39322e3234302e302f32312d3234203d3e20323632363036.roa (raw, json)
Hash identifier:          ocJ/qvPSIG/UI7HZ+E+lIck1XNc1dBLInlohqxrJY7E=
Subject key identifier:   E1:A8:96:C0:38:E5:82:BF:93:53:69:AA:EB:05:1E:3D:51:8F:27:55
Certificate issuer:       /CN=A6578758F56AC37AA21D1EA43F62AE01ABEE5915
Certificate serial:       304B0687D00204773FF0E05C60C8C77816C08E52
Authority key identifier: A6:57:87:58:F5:6A:C3:7A:A2:1D:1E:A4:3F:62:AE:01:AB:EE:59:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3137372e39322e3234302e302f32312d3234203d3e20323632363036.roa
Signing time:             Tue 29 Jul 2025 04:37:53 +0000
ROA not before:           Tue 29 Jul 2025 04:32:53 +0000
ROA not after:            Tue 28 Jul 2026 04:37:53 +0000
asID:                     262606
IP address blocks:        177.92.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.crl
                          rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 23:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4b:06:87:d0:02:04:77:3f:f0:e0:5c:60:c8:c7:78:16:c0:8e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6578758F56AC37AA21D1EA43F62AE01ABEE5915
        Validity
            Not Before: Jul 29 04:32:53 2025 GMT
            Not After : Jul 28 04:37:53 2026 GMT
        Subject: CN=E1A896C038E582BF935369AAEB051E3D518F2755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:c6:e2:59:13:92:10:7b:b3:0d:67:e7:22:
                    0b:a1:c1:9b:dc:76:2f:a6:0b:a2:de:91:a1:4a:3d:
                    f9:5f:03:0a:79:27:0d:e3:de:75:53:0a:ba:cf:3c:
                    15:da:9a:4b:98:75:de:18:72:d9:52:f4:68:e3:fe:
                    4d:d4:95:e8:e8:20:e3:1c:0c:ce:05:9d:bb:74:ff:
                    b2:2e:35:71:f8:e7:00:ab:70:23:92:ea:01:bf:51:
                    5b:1a:d9:67:00:99:93:23:f7:20:6f:cf:98:c7:65:
                    77:63:9e:ea:20:c7:61:d5:03:88:a5:da:df:b5:e8:
                    13:81:ef:24:9a:3b:f2:66:38:38:78:97:2b:4d:c0:
                    59:9d:9d:6b:5d:b4:c0:a6:b3:d0:51:32:ee:80:cc:
                    91:4f:21:40:53:05:e2:16:1e:2d:aa:ca:3a:fd:02:
                    f2:3a:6e:2d:75:b9:59:8b:f4:59:d3:6a:e1:96:97:
                    80:be:30:10:e3:bb:99:1b:88:b5:7c:b2:b9:e0:1a:
                    33:49:83:48:f2:4a:23:7d:9b:7f:03:5e:2b:c6:27:
                    e6:57:72:38:35:ab:cd:90:e0:f1:d8:47:9d:ee:75:
                    3f:dd:e6:c1:3b:e8:27:26:c5:5e:e8:e2:12:4e:9d:
                    86:13:16:2b:24:36:3c:01:9c:c8:37:78:e4:a8:dc:
                    9b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A8:96:C0:38:E5:82:BF:93:53:69:AA:EB:05:1E:3D:51:8F:27:55
            X509v3 Authority Key Identifier:
                keyid:A6:57:87:58:F5:6A:C3:7A:A2:1D:1E:A4:3F:62:AE:01:AB:EE:59:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3137372e39322e3234302e302f32312d3234203d3e20323632363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:af:c2:78:07:aa:29:bc:df:98:e1:89:27:3f:97:20:d5:04:
         17:b9:39:8d:6a:87:9e:3f:b1:a3:dc:a3:61:90:14:a6:db:d9:
         8c:e3:3a:66:d0:67:77:df:dd:eb:a5:92:ad:d4:be:7a:84:75:
         bc:26:f4:c4:1a:46:d9:cf:45:0a:0a:53:8a:40:44:96:ca:bf:
         30:7d:65:d1:f0:9a:a4:4d:07:3b:9c:26:65:1f:76:50:99:c6:
         ca:1f:c5:9c:10:c9:61:27:2d:6c:89:8a:7c:d5:b1:2f:f4:86:
         a7:58:26:65:28:d8:8a:d5:dd:70:cc:2f:9b:0d:32:5c:e0:c1:
         d2:9c:9e:87:14:8c:4d:b2:bc:83:84:15:c4:cd:0a:91:43:74:
         01:2e:de:96:7f:7c:55:94:1f:ed:93:36:04:87:c2:fe:63:07:
         fe:79:06:06:8e:56:a5:ef:0b:18:ac:5b:7f:73:52:74:46:fb:
         54:ba:3e:0d:f6:af:bb:54:1b:27:39:77:b7:15:95:91:07:ae:
         49:62:69:b1:1b:2a:4b:35:17:d9:5d:a3:54:ed:ad:10:7b:73:
         75:c4:af:cc:d8:3c:75:90:a1:cd:fd:69:1b:8b:b3:41:88:9b:
         1c:8f:79:7c:ec:aa:18:9e:db:33:4c:19:66:90:0a:34:df:27:
         1e:80:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 04:31:29 2025 by rpki-client