Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/2/3137372e38352e3233372e302f32342d3234203d3e20323632353135.roa
File:                     3137372e38352e3233372e302f32342d3234203d3e20323632353135.roa (raw, json)
Hash identifier:          KWcHWZJ+J8iS/chhx7Gq5a1+dFIGWAGo6BuEgar8g7w=
Subject key identifier:   B2:EC:6A:3A:CE:16:12:F1:30:9E:1E:BC:5F:C5:3F:73:73:95:23:91
Certificate issuer:       /CN=E5A57FBB04F6726EB70E5F8BEA4A4568F2CFA056
Certificate serial:       6540E89C6FBD1E331C9D064E167784B22E2DF6D3
Authority key identifier: E5:A5:7F:BB:04:F6:72:6E:B7:0E:5F:8B:EA:4A:45:68:F2:CF:A0:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5A57FBB04F6726EB70E5F8BEA4A4568F2CFA056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/2/3137372e38352e3233372e302f32342d3234203d3e20323632353135.roa
Signing time:             Wed 22 Oct 2025 19:49:09 +0000
ROA not before:           Wed 22 Oct 2025 19:44:09 +0000
ROA not after:            Wed 21 Oct 2026 19:49:09 +0000
asID:                     262515
IP address blocks:        177.85.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/2/E5A57FBB04F6726EB70E5F8BEA4A4568F2CFA056.crl
                          rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/2/E5A57FBB04F6726EB70E5F8BEA4A4568F2CFA056.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5A57FBB04F6726EB70E5F8BEA4A4568F2CFA056.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 03:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:40:e8:9c:6f:bd:1e:33:1c:9d:06:4e:16:77:84:b2:2e:2d:f6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A57FBB04F6726EB70E5F8BEA4A4568F2CFA056
        Validity
            Not Before: Oct 22 19:44:09 2025 GMT
            Not After : Oct 21 19:49:09 2026 GMT
        Subject: CN=B2EC6A3ACE1612F1309E1EBC5FC53F7373952391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:30:5c:0f:72:ea:98:af:75:cf:fb:af:10:
                    21:e6:50:06:e1:cb:7a:33:26:2b:e4:7c:f2:b9:68:
                    d1:0d:bc:8e:da:16:24:38:9a:b2:b3:12:5f:b9:92:
                    20:bd:21:0e:54:5d:cd:a2:c5:86:02:39:8c:8b:8b:
                    f1:51:74:0c:d2:0a:3d:2a:36:c0:43:74:59:92:d6:
                    da:6d:fb:2d:00:66:11:05:3f:ff:ce:69:38:85:0f:
                    86:98:46:f0:b9:26:e9:97:3b:ae:c4:06:15:ae:fc:
                    3f:10:e4:c2:37:15:78:46:44:cb:43:12:42:a6:af:
                    50:f2:48:ed:97:95:eb:90:16:08:85:c4:ed:ad:80:
                    4e:c5:cb:21:8a:f6:71:54:7c:11:e5:ea:9e:98:4b:
                    3b:cc:42:9e:39:7d:18:cc:ac:b0:cd:f4:f7:70:df:
                    52:0b:09:2d:56:1a:ab:85:99:36:64:53:19:62:c8:
                    2c:6d:d6:5e:4e:dc:13:0a:ba:ec:b2:eb:c7:8e:20:
                    4d:4b:a1:27:70:5c:03:23:98:1f:44:cd:fb:54:29:
                    ba:00:63:11:4e:2b:d6:fc:85:c7:52:6a:ae:01:52:
                    53:b5:81:d8:18:a8:6f:db:c3:9c:36:db:c6:e7:4f:
                    20:7e:a1:86:c3:42:11:63:1d:1e:09:14:d6:28:31:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EC:6A:3A:CE:16:12:F1:30:9E:1E:BC:5F:C5:3F:73:73:95:23:91
            X509v3 Authority Key Identifier:
                keyid:E5:A5:7F:BB:04:F6:72:6E:B7:0E:5F:8B:EA:4A:45:68:F2:CF:A0:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/2/E5A57FBB04F6726EB70E5F8BEA4A4568F2CFA056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5A57FBB04F6726EB70E5F8BEA4A4568F2CFA056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/2/3137372e38352e3233372e302f32342d3234203d3e20323632353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:2f:0e:73:ee:97:00:e6:d4:42:90:24:bf:ee:63:e5:ec:e9:
         1b:ab:a8:28:35:4c:df:e0:ce:d7:77:96:20:38:33:ee:2c:e3:
         f5:99:59:a8:8e:c3:f1:44:49:fe:fe:e1:5d:cb:10:63:a2:12:
         d8:74:be:f7:cb:fa:13:d0:27:8b:fc:17:12:d1:8c:42:96:29:
         20:80:16:70:fb:a2:1c:08:09:6c:d5:fa:93:8d:e0:55:1b:2b:
         d4:d8:ab:e5:d2:86:9c:5d:2b:bd:6c:e4:1a:21:9b:fb:3f:d4:
         72:2e:9a:d6:76:84:75:9f:d0:09:a9:7f:5e:3f:09:da:95:67:
         ce:65:f3:5f:68:1d:e2:d9:f6:6e:af:76:2d:aa:ec:30:e3:5e:
         3e:eb:a2:21:f8:01:fb:84:26:3d:64:c5:0e:e7:99:0a:bb:e6:
         5e:e1:2a:87:68:f6:d0:06:3e:e9:34:e0:e7:21:c4:2c:7c:cd:
         e8:f7:a3:28:d7:22:71:a6:43:48:0d:5d:d6:c1:0c:d0:d0:f5:
         2c:68:57:3b:e5:95:e6:50:f1:cd:b1:ae:69:70:29:be:3f:8b:
         c7:b4:3d:0e:00:d1:0b:81:81:0e:99:ee:dc:a7:d4:27:50:32:
         54:26:47:71:6f:91:c1:30:47:65:6f:a4:b0:10:8c:4e:5e:9c:
         fd:38:e3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:02:08 2025 by rpki-client