Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/3137372e36362e3234302e302f32312d3332203d3e203533303035.roa
File:                     3137372e36362e3234302e302f32312d3332203d3e203533303035.roa (raw, json)
Hash identifier:          bHfFCyWGlsePJ/y/oKA1csV8sAL6g+vwJBUN0PQ7Hro=
Subject key identifier:   DC:55:5F:34:B7:9B:D7:3A:DB:68:23:44:E4:36:CA:BF:60:CB:88:2A
Certificate issuer:       /CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
Certificate serial:       051C627C9410009C5E83B884FD577C7C34F048BE
Authority key identifier: E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/3137372e36362e3234302e302f32312d3332203d3e203533303035.roa
Signing time:             Fri 31 Oct 2025 13:57:28 +0000
ROA not before:           Fri 31 Oct 2025 13:52:28 +0000
ROA not after:            Fri 30 Oct 2026 13:57:28 +0000
asID:                     53005
IP address blocks:        177.66.240.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl
                          rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 08:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1c:62:7c:94:10:00:9c:5e:83:b8:84:fd:57:7c:7c:34:f0:48:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
        Validity
            Not Before: Oct 31 13:52:28 2025 GMT
            Not After : Oct 30 13:57:28 2026 GMT
        Subject: CN=DC555F34B79BD73ADB682344E436CABF60CB882A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:0f:73:a6:5f:c4:3d:23:07:d0:d9:33:a0:
                    ac:ff:cb:51:03:f2:c4:6a:15:e1:0f:f5:11:52:27:
                    87:cb:62:e2:2a:55:ef:0e:9e:cc:53:45:62:b4:c6:
                    f1:b9:74:5d:a3:7c:60:08:32:6b:e0:c0:17:96:d6:
                    2e:a9:06:1e:c4:b7:16:51:5c:92:1b:ad:3c:24:68:
                    2e:08:ae:a2:91:f0:47:6d:b3:0d:b0:99:1b:51:9b:
                    3b:d5:58:9a:62:5d:fd:8c:cc:29:d7:f4:62:b1:c2:
                    32:27:e1:6a:b9:bc:e8:dc:c0:c1:f6:18:42:51:25:
                    4b:38:63:55:a1:0c:94:4e:e4:78:6f:ce:39:b9:d3:
                    fe:09:e2:74:2f:54:86:70:fa:7c:d0:9f:71:42:68:
                    4f:9b:bb:57:58:97:e7:d9:90:9a:a3:f9:98:13:50:
                    86:99:39:1a:1a:5b:5c:f0:7a:9f:60:fc:34:5b:e9:
                    14:60:00:53:96:82:e7:4e:7c:83:bb:29:3c:20:1b:
                    33:4c:72:09:ad:4e:be:13:ca:42:49:69:53:61:7c:
                    b0:2f:a3:22:8c:a9:37:e9:4a:58:3c:a6:26:96:fd:
                    22:c2:c1:96:8f:02:2d:ed:9e:6d:3f:6d:0b:c2:3b:
                    13:c6:bd:b6:04:ec:c7:b3:e7:ac:1d:98:83:85:82:
                    9c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:55:5F:34:B7:9B:D7:3A:DB:68:23:44:E4:36:CA:BF:60:CB:88:2A
            X509v3 Authority Key Identifier:
                keyid:E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/3137372e36362e3234302e302f32312d3332203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:1b:5e:5d:84:0f:2b:cf:dd:fa:bc:4b:82:98:dc:f0:cc:a2:
         e4:8b:ac:57:06:73:1b:f9:e7:90:8a:a3:02:a2:97:0f:7d:9a:
         a2:77:4b:3c:d7:ab:2e:d3:ba:b4:ab:c7:31:99:5f:ce:23:00:
         d9:fc:4e:d1:a5:c0:48:28:da:80:97:d8:3d:04:62:66:4d:c5:
         ae:8d:6b:8d:c2:9e:1c:35:a3:14:54:18:93:9f:99:45:3e:ee:
         60:e1:da:6e:13:b2:40:04:e7:08:3e:34:69:9f:07:98:e5:b3:
         ad:0a:8d:e4:5e:a0:87:82:50:56:1d:13:49:3b:b9:0e:52:5f:
         4a:ba:da:a2:c9:cb:a8:1e:a1:29:3d:d8:c4:ed:21:12:10:7c:
         0b:8f:4f:94:1d:a3:83:e1:1b:ae:1f:3d:63:14:be:10:67:71:
         02:41:70:9f:dd:b2:ce:93:d4:02:c9:c8:80:bc:d0:74:0b:3b:
         3c:a2:21:70:bb:b4:6e:d0:06:98:70:60:ed:d3:14:70:1a:d9:
         59:ac:ba:bb:99:15:d7:54:e6:1e:db:98:b7:a4:af:cc:b6:23:
         28:74:84:bc:cd:62:3a:99:95:e6:90:f4:fe:13:36:1d:8a:68:
         c3:5a:31:be:1c:93:01:ae:33:e5:d0:d1:79:63:54:af:7c:c1:
         63:0a:af:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:13:13 2025 by rpki-client