Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3231362e302f32312d3234203d3e203532373731.roa
File:                     3137372e3130372e3231362e302f32312d3234203d3e203532373731.roa (raw, json)
Hash identifier:          HufwzZ1gx4Y6Zmw7ZVqYM6excGyyrHDIomY5tv9Lj2I=
Subject key identifier:   E8:DE:BA:C0:88:E2:F1:1F:D7:C2:14:8B:09:63:60:41:D4:C0:5E:6B
Certificate issuer:       /CN=886EEAC9FB3433BE96A51A9D0154D4663682FF65
Certificate serial:       15560DF0B5B3A6333691F4B9615B7CD38682562A
Authority key identifier: 88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3231362e302f32312d3234203d3e203532373731.roa
Signing time:             Tue 27 May 2025 11:07:26 +0000
ROA not before:           Tue 27 May 2025 11:02:26 +0000
ROA not after:            Tue 26 May 2026 11:07:26 +0000
asID:                     52771
IP address blocks:        177.107.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.crl
                          rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 08:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:56:0d:f0:b5:b3:a6:33:36:91:f4:b9:61:5b:7c:d3:86:82:56:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=886EEAC9FB3433BE96A51A9D0154D4663682FF65
        Validity
            Not Before: May 27 11:02:26 2025 GMT
            Not After : May 26 11:07:26 2026 GMT
        Subject: CN=E8DEBAC088E2F11FD7C2148B09636041D4C05E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:73:9a:7e:d7:a3:b2:f7:7e:3b:d3:bd:81:78:
                    75:5b:fb:3e:f9:fe:62:ea:91:27:5c:0a:6e:c7:74:
                    d0:54:34:2e:6a:76:9b:99:17:a7:39:b8:69:21:8f:
                    84:79:7e:c5:22:d7:eb:89:00:52:c1:b3:3a:74:ba:
                    d1:b8:11:3d:21:46:20:4f:69:28:ba:f6:61:9c:da:
                    f2:39:0d:47:4f:14:82:ff:54:21:f9:13:a5:27:4a:
                    f4:94:c1:1b:dd:c5:f8:c6:e5:20:e2:2e:a9:dd:6b:
                    68:18:19:c1:27:e9:32:37:69:e1:38:78:33:71:66:
                    9a:eb:72:ac:f2:e5:78:5b:42:9b:19:74:64:23:17:
                    d5:bb:6a:4b:1c:a1:ab:73:79:36:db:e3:80:9c:09:
                    b2:75:bf:cc:4c:e4:77:2a:c9:36:e1:ad:7f:a8:f8:
                    93:2f:be:b9:a2:07:e7:09:ef:ce:af:15:26:03:dc:
                    f8:04:7d:6f:81:a0:3a:e3:f2:0a:41:de:16:b3:9f:
                    15:ef:bc:30:c5:bc:bd:85:e5:b4:f3:a2:ad:98:27:
                    14:f4:4e:b0:5e:44:90:cb:0a:6b:e7:c3:a9:9a:27:
                    e1:f5:8e:38:70:2f:2b:ce:33:61:cf:8b:66:44:04:
                    a9:80:37:9a:84:62:d8:a4:29:1d:ad:9a:6a:2b:e0:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DE:BA:C0:88:E2:F1:1F:D7:C2:14:8B:09:63:60:41:D4:C0:5E:6B
            X509v3 Authority Key Identifier:
                keyid:88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/3137372e3130372e3231362e302f32312d3234203d3e203532373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:52:91:0b:61:58:96:b0:c2:cc:88:41:e6:29:75:5a:63:45:
         db:9a:32:59:36:5d:df:50:94:ce:4f:16:6d:49:4d:bf:c1:db:
         9e:d0:73:66:3e:b8:e9:5a:3a:e7:71:82:a0:fe:26:01:fd:82:
         15:28:ab:73:ca:be:7f:f4:08:d5:ce:44:b7:9c:26:19:21:e4:
         62:a9:13:32:84:1c:59:42:e2:bb:f6:8b:cf:9d:26:fd:50:b5:
         53:cf:81:b4:40:1b:ce:46:d0:f9:58:82:77:11:f9:90:b7:7b:
         1b:39:a2:96:7b:6f:fb:97:94:f4:04:4a:86:80:de:56:70:1e:
         67:b6:a8:59:a3:56:b1:b1:af:11:87:48:0a:85:cd:76:ee:de:
         cf:9b:59:dd:e7:40:e2:f7:4a:3b:5e:fd:1f:05:8f:88:32:e8:
         42:ec:d5:d4:47:67:71:54:c7:d7:7b:c5:41:ad:52:fa:ae:62:
         de:8d:c8:af:96:ce:a1:02:08:e5:20:c8:de:92:6b:b8:18:4c:
         a3:01:2f:83:67:2f:86:d4:d8:aa:06:ca:67:db:a4:78:cc:01:
         7d:69:36:08:87:b5:e6:61:87:21:5e:d0:8c:67:2f:66:63:7f:
         a3:79:1c:bc:d6:3a:d0:d4:92:62:df:77:40:c4:f0:e8:51:c1:
         3c:84:32:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:08:58 2025 by rpki-client