Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32312d3234203d3e20323632343836.roa
File:                     3137372e36362e382e302f32312d3234203d3e20323632343836.roa (raw, json)
Hash identifier:          LZoFELxMXx867Xd3E4pNp/ySsVHVvQxmw5pEnMTwnHQ=
Subject key identifier:   16:F3:85:1F:2E:90:60:2F:11:98:87:21:40:24:B3:C2:BF:A7:9D:93
Certificate issuer:       /CN=04E2212E8119A88F829030DBA9530D79080ABB93
Certificate serial:       165B459A7A12595A7E81A63419C5A6A55AC1C2E3
Authority key identifier: 04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32312d3234203d3e20323632343836.roa
Signing time:             Wed 10 Sep 2025 17:14:18 +0000
ROA not before:           Wed 10 Sep 2025 17:09:18 +0000
ROA not after:            Wed 09 Sep 2026 17:14:18 +0000
asID:                     262486
IP address blocks:        177.66.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.crl
                          rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 07:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5b:45:9a:7a:12:59:5a:7e:81:a6:34:19:c5:a6:a5:5a:c1:c2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E2212E8119A88F829030DBA9530D79080ABB93
        Validity
            Not Before: Sep 10 17:09:18 2025 GMT
            Not After : Sep  9 17:14:18 2026 GMT
        Subject: CN=16F3851F2E90602F119887214024B3C2BFA79D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:de:e9:1b:32:5b:73:20:a5:cf:8a:9a:20:
                    9c:2b:d2:6a:ec:55:0d:c1:08:f7:0c:8c:71:39:ae:
                    16:d6:12:ae:14:c0:d1:15:60:58:70:e2:ff:9a:05:
                    46:20:f5:d5:f7:bb:a1:8e:8a:c3:99:54:7b:62:c5:
                    3e:5b:20:82:18:5a:b4:87:f3:dc:1e:86:2b:b2:cc:
                    5e:af:fd:a8:f6:eb:e9:72:c1:eb:5e:4d:9c:98:20:
                    15:37:ae:b0:c4:60:c7:02:e9:b7:cc:2c:34:09:41:
                    d4:85:36:7f:eb:fb:ab:9b:58:b7:18:a3:9a:b9:5f:
                    38:b5:c6:02:97:e0:0c:01:3d:6b:26:69:c4:9a:68:
                    d3:e9:ea:42:86:3e:fd:3f:f3:19:10:7a:05:a2:09:
                    1a:08:05:a9:aa:6c:ec:bd:93:22:56:63:5c:56:10:
                    7a:9e:94:22:08:04:a8:6d:4f:25:27:05:f3:85:46:
                    39:ff:03:a2:1b:7f:5c:12:8a:17:dc:05:2d:30:94:
                    5a:26:0b:07:a0:fd:8e:05:c1:4e:10:d4:4d:5b:48:
                    9e:b4:2a:12:d5:91:59:3c:11:4a:01:01:d3:d9:64:
                    53:47:12:12:81:5a:b7:c2:1f:7f:0f:26:37:d4:5a:
                    08:5d:7c:a8:bc:71:c4:a3:50:a9:93:aa:ce:55:8f:
                    5f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F3:85:1F:2E:90:60:2F:11:98:87:21:40:24:B3:C2:BF:A7:9D:93
            X509v3 Authority Key Identifier:
                keyid:04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32312d3234203d3e20323632343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:97:35:45:93:ce:6c:cb:8b:28:39:21:95:d4:0a:54:11:47:
         c4:97:2b:09:d2:fd:ef:68:66:52:c8:29:4b:d6:fa:e2:3e:ee:
         5d:65:70:22:bc:a4:25:13:4e:4c:13:4d:a6:d9:25:d1:da:da:
         5d:99:25:91:9c:60:23:e4:95:77:3a:79:4a:15:b5:0d:29:32:
         0e:ad:a6:45:a9:74:38:f8:bf:12:6f:e7:c7:94:64:45:a7:e0:
         b2:d3:34:64:a0:a5:cd:21:00:a8:3a:d1:19:5d:93:91:cd:b7:
         f8:c7:bf:bb:a0:89:f0:34:b4:db:0f:e8:60:d0:af:f8:96:38:
         4f:b4:ba:fc:f5:47:5c:ac:68:68:4e:b2:b3:47:8f:8c:69:ba:
         6a:65:25:f0:a5:4d:c2:23:b2:bd:54:bd:84:93:a3:be:96:81:
         c3:c6:ed:d7:40:12:bb:d6:a5:9f:a5:3d:f4:ed:ce:96:a0:d5:
         e2:8d:9c:bb:26:81:a7:7b:cd:ed:47:20:8d:02:3e:0c:03:5e:
         e2:75:b7:0f:3a:76:ed:95:42:09:bc:69:5e:ee:8b:07:1e:ab:
         74:36:d0:7f:a7:1f:39:13:fd:b5:68:44:6c:00:e0:6b:6a:ba:
         e7:b5:dd:ed:08:af:1c:8e:60:16:ec:19:c7:5c:79:5e:29:23:
         e1:d6:a0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:37:03 2025 by rpki-client