Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/3137372e39332e36342e302f32312d3234203d3e20323633313337.roa
File:                     3137372e39332e36342e302f32312d3234203d3e20323633313337.roa (raw, json)
Hash identifier:          M/qY9z7KJ0sdMDhdS+zWWCVPkw7NbeXln4juApbMLok=
Subject key identifier:   D5:D5:C1:EA:2B:BB:B5:BA:3C:61:79:62:31:DB:E8:BD:D8:A4:53:B4
Certificate issuer:       /CN=08CF424E6FE1980B284A93E6736C3E8628D381CA
Certificate serial:       7D5D3FF34A448EA5B93006B32135B538A19A0DA2
Authority key identifier: 08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/3137372e39332e36342e302f32312d3234203d3e20323633313337.roa
Signing time:             Thu 11 Sep 2025 14:24:55 +0000
ROA not before:           Thu 11 Sep 2025 14:19:55 +0000
ROA not after:            Thu 10 Sep 2026 14:24:55 +0000
asID:                     263137
IP address blocks:        177.93.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl
                          rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 22:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5d:3f:f3:4a:44:8e:a5:b9:30:06:b3:21:35:b5:38:a1:9a:0d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08CF424E6FE1980B284A93E6736C3E8628D381CA
        Validity
            Not Before: Sep 11 14:19:55 2025 GMT
            Not After : Sep 10 14:24:55 2026 GMT
        Subject: CN=D5D5C1EA2BBBB5BA3C61796231DBE8BDD8A453B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:bb:8b:7f:4d:45:35:89:8c:4f:33:25:4b:
                    ec:3b:ec:fa:9e:44:16:1e:b7:bf:d5:c3:58:c3:30:
                    12:21:ed:35:61:fb:84:e1:12:08:28:56:12:d7:73:
                    20:03:46:0b:f8:1a:50:ce:16:f4:7c:12:07:d2:fd:
                    0b:cf:7f:20:d1:20:f8:69:c4:ce:e0:41:af:5b:c5:
                    29:6f:31:54:a8:03:c9:f4:36:a1:a9:16:dc:39:19:
                    b6:af:99:4b:4e:b3:34:c2:a3:e8:19:ce:d9:1c:0a:
                    b7:01:31:be:40:80:9a:d3:75:d6:b8:e5:c3:3b:68:
                    81:16:cf:0f:de:5d:72:71:a1:bb:65:a1:64:09:1c:
                    b3:a0:88:44:ae:9a:0b:4e:fd:af:12:b6:82:be:4e:
                    a6:0f:47:54:66:2b:3e:22:31:bf:1b:ac:d2:57:e0:
                    e3:d5:62:68:67:48:bf:28:9c:8a:d2:51:48:7e:e3:
                    a8:32:6f:93:0c:f6:e1:bc:5a:3a:c9:fc:ad:f0:b5:
                    0b:93:ad:d0:87:e3:aa:e8:aa:6b:3d:15:ac:ed:35:
                    3c:d2:57:bf:f0:14:46:9d:83:9b:d2:e5:44:8b:fa:
                    26:ce:8d:60:e5:2c:9d:c4:43:85:2d:be:51:f8:5f:
                    32:3a:9f:56:04:9a:c0:c4:8a:3a:f9:ab:81:2b:da:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D5:C1:EA:2B:BB:B5:BA:3C:61:79:62:31:DB:E8:BD:D8:A4:53:B4
            X509v3 Authority Key Identifier:
                keyid:08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/3137372e39332e36342e302f32312d3234203d3e20323633313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:d1:dc:5f:e3:66:29:6a:05:d0:07:28:d1:1b:9d:08:e4:cc:
         00:16:61:78:75:c1:d0:0a:2f:d8:30:75:c9:e6:22:12:33:3a:
         7d:b9:68:a8:e2:29:60:96:56:7c:4f:be:1b:70:bd:eb:4d:1c:
         a3:c9:d4:b0:37:7c:b7:06:63:b8:86:db:12:fe:98:8f:01:f2:
         5e:11:f4:5e:e2:aa:b8:0f:19:b7:7b:ce:47:aa:d1:a7:55:b1:
         3d:83:40:5b:af:96:9a:c2:39:eb:ff:f3:49:c4:7f:cf:17:e0:
         0c:4f:ee:d4:2d:c9:20:92:1e:b1:2b:f9:a9:8a:a7:ff:01:0c:
         1f:b1:4f:74:7a:20:8b:30:6e:3e:e6:14:ff:86:b8:4e:50:14:
         c6:02:bf:aa:98:cf:e8:cb:46:a6:30:61:ed:4b:12:10:98:76:
         19:88:a7:d5:02:52:6a:40:c3:ab:e8:1f:f7:13:36:42:da:4c:
         e8:61:5c:44:16:6d:56:2a:dd:68:63:cd:9c:bb:f3:e8:4f:4a:
         40:d3:b8:d0:5e:1d:f9:db:5a:97:2a:34:b9:d0:f3:42:ad:30:
         a0:4d:cf:8d:38:9c:50:36:07:cd:fb:05:eb:2c:d8:e0:53:90:
         a9:e5:6a:16:20:6a:ca:83:fe:b8:d3:e9:5f:91:be:78:8e:3b:
         b4:25:ef:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:25:58 2025 by rpki-client