Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e32322e38302e302f32302d3234203d3e203532383932.roa
File:                     3137372e32322e38302e302f32302d3234203d3e203532383932.roa (raw, json)
Hash identifier:          UUtxB7KPG8yXz2ejeN+HBeVex3m/7Z3+D4reOK8SLlA=
Subject key identifier:   51:C9:CD:FE:E7:82:2F:B6:D3:26:50:45:D0:2C:5E:14:E3:66:3C:C3
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       76D93A67732DC8C84D0370AF55368CE9E22A54BA
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e32322e38302e302f32302d3234203d3e203532383932.roa
Signing time:             Tue 20 May 2025 03:52:17 +0000
ROA not before:           Tue 20 May 2025 03:47:17 +0000
ROA not after:            Tue 19 May 2026 03:52:17 +0000
asID:                     52892
IP address blocks:        177.22.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 12:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d9:3a:67:73:2d:c8:c8:4d:03:70:af:55:36:8c:e9:e2:2a:54:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: May 20 03:47:17 2025 GMT
            Not After : May 19 03:52:17 2026 GMT
        Subject: CN=51C9CDFEE7822FB6D3265045D02C5E14E3663CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:db:ca:9a:0c:43:35:18:ff:88:3c:70:04:
                    9a:5a:a2:e8:56:4d:02:43:95:60:f9:30:8d:6a:fe:
                    f6:d7:fb:02:99:e0:a2:2d:1c:52:ba:7b:30:34:7d:
                    34:2b:29:d8:2c:5f:e4:85:c5:29:ef:c8:43:8a:d3:
                    b6:fa:2f:e7:3b:4d:0b:82:d5:be:54:54:53:4f:c6:
                    eb:eb:b2:2b:81:0a:c1:79:3b:86:b6:31:a3:70:10:
                    6e:7d:e0:70:b0:45:8d:b2:9f:28:4d:15:99:7d:75:
                    98:bf:79:4c:94:43:89:a0:b9:8e:c6:23:34:48:5d:
                    01:84:5b:00:ec:38:b5:64:e5:9a:4a:ed:70:d3:6f:
                    e3:5e:f6:85:f3:4d:7b:97:72:7f:c6:b3:96:81:3d:
                    29:e2:bd:1d:0a:f5:44:84:da:cb:93:1a:48:bb:66:
                    eb:a9:9e:9f:ad:98:8a:37:5c:e4:09:88:b6:6d:d6:
                    8e:e5:39:2e:a3:0a:a8:6d:92:e4:87:1a:ab:22:b1:
                    87:03:28:3c:29:c5:1f:16:fd:8a:05:05:c4:a8:a6:
                    23:1d:7e:83:bc:e3:12:90:d2:60:5b:31:8d:49:58:
                    c6:b2:9b:d5:8f:a7:44:28:f3:62:24:03:9a:18:62:
                    89:ec:a0:ce:52:20:ad:cb:0a:e6:bd:9e:c2:5c:84:
                    46:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C9:CD:FE:E7:82:2F:B6:D3:26:50:45:D0:2C:5E:14:E3:66:3C:C3
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3137372e32322e38302e302f32302d3234203d3e203532383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:cc:08:de:65:74:22:bd:a4:f3:e3:71:4d:bc:6d:4a:56:1f:
         69:db:ab:3a:1d:3e:fc:a8:9f:7c:3b:30:84:6f:60:2f:bc:bd:
         5e:c1:99:81:40:13:e9:7b:8a:59:2a:db:37:68:6f:52:f2:74:
         45:ad:f1:3a:76:4e:57:08:ea:ff:b3:bd:30:88:5b:f7:cc:f2:
         df:1a:b5:f6:d9:d7:86:f5:67:15:6b:07:90:01:9b:7f:f2:af:
         10:b6:7f:e6:03:ac:7a:8b:04:70:41:19:c4:57:43:bd:26:ec:
         7d:1a:4e:22:04:83:98:50:fa:4b:35:7c:c8:5c:da:93:04:34:
         76:61:6b:ef:05:f7:f3:c5:3a:a1:19:eb:3a:23:7a:f7:3e:59:
         1b:77:28:4d:40:c9:53:7a:e1:4d:be:ce:24:e9:5d:7c:f6:d9:
         46:39:a1:29:7a:d8:22:fd:e6:ab:cb:40:e6:a6:1f:b8:2c:9a:
         85:9b:2d:1f:1c:91:fe:7b:8a:30:da:66:f3:5a:6e:38:59:1a:
         c2:8a:a0:11:14:bd:f1:a2:0f:85:8e:47:a4:fd:53:c1:20:1e:
         42:be:88:a2:58:f3:75:97:22:44:7d:04:8e:0b:c2:f7:38:07:
         60:bc:4c:1d:92:f5:9b:95:66:33:fd:8e:da:30:bc:d9:ff:7d:
         83:9b:75:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:09:09 2025 by rpki-client