Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139342e302f32332d3233203d3e20323632383238.roa
File:                     3137372e3135352e3139342e302f32332d3233203d3e20323632383238.roa (raw, json)
Hash identifier:          dR+Yw29+XhWmbBlC2sJwty3VquxTsKxwJD5b9qLuCfY=
Subject key identifier:   33:0C:65:74:73:AA:20:DF:D1:89:7E:42:9A:D6:8E:F3:06:F7:4E:A4
Certificate issuer:       /CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
Certificate serial:       7F267F6D47650A50E4A82D5189DD08125A98ABEB
Authority key identifier: 2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139342e302f32332d3233203d3e20323632383238.roa
Signing time:             Thu 28 Aug 2025 12:14:54 +0000
ROA not before:           Thu 28 Aug 2025 12:09:54 +0000
ROA not after:            Thu 27 Aug 2026 12:14:54 +0000
asID:                     262828
IP address blocks:        177.155.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Sep 2025 05:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:26:7f:6d:47:65:0a:50:e4:a8:2d:51:89:dd:08:12:5a:98:ab:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACA27717E82C4618B8C9B8809209FD48E26847B
        Validity
            Not Before: Aug 28 12:09:54 2025 GMT
            Not After : Aug 27 12:14:54 2026 GMT
        Subject: CN=330C657473AA20DFD1897E429AD68EF306F74EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:36:ed:e9:28:79:3e:41:40:c8:c6:57:af:
                    11:19:09:e7:eb:18:a3:63:c3:74:04:de:80:ef:e5:
                    2c:1a:f0:03:3a:bf:67:f6:ee:ff:1c:1e:e3:29:94:
                    1a:7f:4d:49:74:3f:d0:a3:77:c7:3f:e3:e7:e6:63:
                    8f:d2:7a:77:cc:d9:72:00:b5:a0:ba:11:0e:14:d9:
                    c5:45:76:f8:18:a7:cf:c9:96:1a:7a:58:08:ff:b9:
                    36:3c:1c:71:31:22:80:e5:32:ea:a8:d4:64:1e:1f:
                    dc:7f:23:22:a7:34:c9:73:84:96:da:c4:dd:a6:ae:
                    52:10:f9:24:42:d4:e8:79:ba:f9:a9:8b:f3:fb:9e:
                    20:4f:6b:44:d4:e9:63:03:4d:01:f0:23:01:cd:aa:
                    b1:a8:c6:ca:a5:b5:b1:3d:69:ac:37:a6:cf:d7:23:
                    38:8e:b5:cd:51:cf:81:6f:2e:35:f9:e3:a9:83:fe:
                    41:12:d7:75:58:12:10:08:f7:f4:4e:88:b1:c8:a9:
                    55:82:ee:61:49:be:1c:ba:b6:c9:fd:d4:9d:05:ae:
                    9d:f3:90:62:8f:64:69:96:18:37:48:83:07:27:08:
                    e1:40:dd:02:5f:5d:47:fe:9b:25:2a:18:27:f5:72:
                    0c:5d:fa:17:33:16:8c:ac:71:cd:03:64:82:0a:35:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0C:65:74:73:AA:20:DF:D1:89:7E:42:9A:D6:8E:F3:06:F7:4E:A4
            X509v3 Authority Key Identifier:
                keyid:2A:CA:27:71:7E:82:C4:61:8B:8C:9B:88:09:20:9F:D4:8E:26:84:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/2ACA27717E82C4618B8C9B8809209FD48E26847B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ACA27717E82C4618B8C9B8809209FD48E26847B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139342e302f32332d3233203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:24:61:b2:c7:f9:50:34:31:7a:77:d0:40:4b:29:69:ae:3d:
         22:63:d0:c1:e4:2d:00:ab:5a:e5:db:1b:5f:5e:37:3d:85:74:
         d2:20:e4:ec:81:bb:dc:da:f4:d8:4e:d9:42:64:dc:80:79:ca:
         56:86:ec:9e:3a:ee:5f:f1:d3:e7:1d:23:17:2d:2e:eb:54:f8:
         e4:20:c7:f2:dc:43:9c:18:5c:9d:b1:e4:74:3f:97:30:fc:a7:
         fe:f9:11:fd:ca:90:2c:f1:21:74:52:95:6d:a7:4f:c8:02:9f:
         8c:2b:c6:1e:00:89:08:38:ce:da:e1:a1:e2:4c:46:35:76:e4:
         73:c7:92:f0:3c:40:42:8c:89:4c:6d:6a:54:be:a8:4d:58:97:
         b9:3c:e3:e9:db:06:43:29:cd:dd:1e:58:6f:ec:be:db:34:73:
         df:ae:ba:0d:27:1e:19:0d:72:5c:ec:15:0e:98:be:85:55:a8:
         75:a0:80:b2:3e:a6:58:3e:b2:01:80:d1:3d:a6:ec:58:e8:f1:
         c9:23:f5:c9:16:07:3a:8b:d9:ea:8a:3e:4c:6d:41:95:20:ba:
         49:ad:86:23:5f:c1:98:e7:f8:f4:60:0d:97:41:c7:71:0f:e0:
         3c:6a:ce:5a:82:d4:7e:77:ae:c6:ee:b1:be:da:dc:c3:18:f9:
         97:b1:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 06:19:06 2025 by rpki-client