Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/3137372e382e3133322e302f32322d3332203d3e20323730353831.roa
File:                     3137372e382e3133322e302f32322d3332203d3e20323730353831.roa (raw, json)
Hash identifier:          Kcu0+gXUcf3geIYyVDHTYNPOLPCPeqfxE97c3TX/wJs=
Subject key identifier:   C5:6C:A3:51:BE:AB:D2:4A:D6:A3:D8:E5:56:2E:F6:9B:8B:34:76:C2
Certificate issuer:       /CN=793843AE7EAE08FD5A902A5679C194A4E02D2781
Certificate serial:       27B975910CD4B6E490622AF1BD488B926E8F340D
Authority key identifier: 79:38:43:AE:7E:AE:08:FD:5A:90:2A:56:79:C1:94:A4:E0:2D:27:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/3137372e382e3133322e302f32322d3332203d3e20323730353831.roa
Signing time:             Thu 07 Aug 2025 14:35:58 +0000
ROA not before:           Thu 07 Aug 2025 14:30:58 +0000
ROA not after:            Thu 06 Aug 2026 14:35:58 +0000
asID:                     270581
IP address blocks:        177.8.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.crl
                          rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 15:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b9:75:91:0c:d4:b6:e4:90:62:2a:f1:bd:48:8b:92:6e:8f:34:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793843AE7EAE08FD5A902A5679C194A4E02D2781
        Validity
            Not Before: Aug  7 14:30:58 2025 GMT
            Not After : Aug  6 14:35:58 2026 GMT
        Subject: CN=C56CA351BEABD24AD6A3D8E5562EF69B8B3476C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:af:6a:10:02:94:68:c2:0a:1d:51:62:f8:
                    ef:a5:33:53:6c:dc:f1:39:03:ef:35:54:53:4e:cb:
                    44:8b:1f:74:14:df:72:80:3b:fd:e6:b6:53:ae:bf:
                    9c:32:55:7f:70:23:4e:91:e2:f4:1c:eb:52:32:69:
                    0c:e6:95:8c:df:fb:2a:11:0a:db:d0:7c:7a:96:19:
                    27:27:f1:6b:d3:f8:75:e3:21:27:25:6d:7c:db:2f:
                    fe:a1:38:9f:50:5f:92:31:86:d1:47:f2:aa:47:71:
                    71:7a:9d:4f:5d:f7:2e:c2:d4:2d:30:44:fa:7c:d4:
                    3c:ba:ba:89:47:41:a6:75:dd:f4:eb:c7:0c:96:90:
                    00:78:35:f2:3d:2d:ea:5a:42:bb:10:7f:68:0b:b3:
                    1f:ef:e1:32:ec:ed:8a:9c:80:6b:8c:7b:67:f5:34:
                    2b:da:ca:3d:e9:0a:27:41:74:87:2d:1a:d1:3b:c0:
                    52:7f:d9:84:5d:84:75:fc:d6:d7:3f:f3:1b:48:67:
                    35:a5:9b:44:38:cb:35:d2:7c:95:30:07:62:3d:0b:
                    9e:1f:81:b6:3e:2e:b2:87:48:f5:1e:02:6d:53:6e:
                    d1:e3:d6:57:7d:d2:e1:a9:19:dd:8b:8c:4a:0c:11:
                    ef:90:43:7a:a6:f2:3c:b0:86:1c:20:bf:c4:98:86:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6C:A3:51:BE:AB:D2:4A:D6:A3:D8:E5:56:2E:F6:9B:8B:34:76:C2
            X509v3 Authority Key Identifier:
                keyid:79:38:43:AE:7E:AE:08:FD:5A:90:2A:56:79:C1:94:A4:E0:2D:27:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/3137372e382e3133322e302f32322d3332203d3e20323730353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:a0:dc:fa:f9:74:6a:0d:66:7b:37:f3:51:26:9d:4a:17:f3:
         7e:d9:91:9b:24:7b:1b:71:16:ed:02:e2:e3:23:45:6a:d3:a0:
         c5:79:68:57:d8:c1:ab:90:65:de:cd:34:e7:8b:d1:59:5c:1d:
         8b:e2:25:c5:a2:ab:74:b2:52:f8:3f:1e:ec:4f:83:49:b6:56:
         34:6b:e3:f7:5f:93:83:26:45:06:63:5b:b5:65:47:0f:db:6c:
         d4:c8:3e:c6:e5:ac:d6:3e:98:3d:be:98:75:83:f2:39:33:1a:
         e4:64:a9:4a:17:d1:cd:8a:51:63:5d:9f:f7:9a:94:3a:8d:4b:
         17:4c:14:2d:51:a9:d1:6a:ba:d2:98:ed:26:28:79:95:ad:a4:
         0c:e9:a3:8d:77:86:90:b0:29:44:33:0c:7b:35:1b:d6:cf:26:
         90:70:4d:c5:5c:32:4d:83:1e:dd:25:05:89:eb:ab:85:73:c0:
         8a:57:ec:88:85:9d:1b:01:1b:9b:c4:97:0e:41:f2:58:ed:47:
         53:4a:c3:a4:89:d7:f2:d4:16:cb:18:08:60:d7:22:b6:39:c6:
         ff:ce:65:3c:c8:e0:93:6f:0b:5c:b3:2e:de:44:89:ef:33:57:
         f8:56:7b:1e:0e:35:22:54:b2:a0:90:a5:4b:28:80:5b:c9:2e:
         a1:b5:6f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:48:50 2025 by rpki-client