Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37372e302f32342d3234203d3e203532373636.roa
File:                     3137372e3132352e37372e302f32342d3234203d3e203532373636.roa (raw, json)
Hash identifier:          hMV0PmP1bIkVe5jy7BgKW2ObEfuIM/VAOkdwThtzkN0=
Subject key identifier:   ED:49:07:8E:FA:68:C1:D1:1A:8E:02:A6:A1:04:A9:04:BA:92:AD:DC
Certificate issuer:       /CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE
Certificate serial:       7E831786791C50A67948BCFDCDF3AB7B640AF4B6
Authority key identifier: DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37372e302f32342d3234203d3e203532373636.roa
Signing time:             Mon 07 Jul 2025 14:35:11 +0000
ROA not before:           Mon 07 Jul 2025 14:30:11 +0000
ROA not after:            Mon 06 Jul 2026 14:35:11 +0000
asID:                     52766
IP address blocks:        177.125.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl
                          rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 09:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:83:17:86:79:1c:50:a6:79:48:bc:fd:cd:f3:ab:7b:64:0a:f4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE
        Validity
            Not Before: Jul  7 14:30:11 2025 GMT
            Not After : Jul  6 14:35:11 2026 GMT
        Subject: CN=ED49078EFA68C1D11A8E02A6A104A904BA92ADDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:e0:ea:62:d9:09:97:c3:f2:b8:9e:86:b3:
                    6a:d1:af:97:a3:41:c7:47:c0:3e:18:26:d7:26:9e:
                    88:48:57:a7:82:6e:4d:20:c8:82:8d:fb:00:0f:2b:
                    5e:15:97:0b:e5:2f:40:60:ee:0f:18:d2:ae:bd:27:
                    53:90:62:8e:2c:8c:f0:70:e8:33:fb:79:d2:b6:91:
                    2d:97:19:e3:7c:50:43:9a:63:d8:b7:bb:4a:73:c4:
                    b7:2d:4e:7f:90:e3:91:ee:49:8a:10:fa:34:20:88:
                    e4:fd:3e:20:b8:36:be:f7:a7:87:39:5b:da:23:67:
                    16:32:d6:b8:ae:48:c3:eb:67:54:96:01:3a:41:53:
                    92:4f:fe:a2:f6:56:a3:73:ae:61:84:b8:22:57:f0:
                    0a:01:20:c2:6f:bb:ec:13:fc:67:5f:23:bf:10:f8:
                    98:f0:08:be:28:1d:1f:b3:e6:d4:64:4e:04:f1:bc:
                    42:a3:52:2b:04:bd:91:4a:3e:e6:82:cb:01:af:5b:
                    2e:0e:bd:57:e9:a0:40:9a:ec:6b:4c:72:88:be:87:
                    64:36:fd:8e:d6:7e:08:62:e5:fe:35:45:d3:8e:b1:
                    ad:26:0f:47:fd:51:9f:a4:04:76:1a:d7:dc:17:68:
                    58:d9:d8:7f:7a:2d:64:e6:d6:f7:5b:cd:c2:3d:42:
                    d7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:49:07:8E:FA:68:C1:D1:1A:8E:02:A6:A1:04:A9:04:BA:92:AD:DC
            X509v3 Authority Key Identifier:
                keyid:DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37372e302f32342d3234203d3e203532373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:56:d7:d0:53:97:6b:a8:4b:e9:8e:7b:c0:20:8b:db:4d:d0:
         de:f6:96:8d:6d:c8:15:a4:0c:dc:e4:b5:26:5a:ac:d9:7e:b3:
         89:35:92:4b:70:48:6a:25:11:e3:66:84:92:12:ae:9c:9a:f9:
         a5:69:d2:9c:5c:c6:f7:b1:ac:9a:fd:ef:0a:f6:bc:b5:56:aa:
         28:b9:be:e2:d2:03:c2:6b:68:1f:cf:83:68:7a:8d:44:7f:8f:
         ac:11:18:63:97:1e:a4:73:f6:3a:36:a6:b5:43:0f:4f:81:56:
         e8:d7:d2:1e:f3:a0:4c:62:9b:4c:64:2c:28:67:2d:f8:f3:c5:
         19:47:4f:1b:6b:da:c1:a0:57:b9:f4:6b:ad:eb:35:59:d4:f3:
         35:73:7e:2a:dd:1a:49:42:4a:73:7d:d1:6d:fe:55:31:52:a6:
         24:96:23:82:34:56:01:04:cd:e2:c9:7a:5b:46:79:c7:2e:41:
         30:13:28:97:59:13:00:5b:17:d0:9b:dd:e1:7c:1b:cc:8c:00:
         37:bb:f9:be:48:9f:57:f8:ff:81:33:21:ef:4b:42:cb:6c:a4:
         b2:40:db:29:cd:de:22:a7:ac:2c:08:0b:ef:c3:db:07:bd:49:
         ab:14:be:97:99:1b:25:66:a6:64:8c:6c:b1:1a:e3:88:c9:19:
         9e:5e:8f:dd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfoMXhnkcUKZ5SLz9zfOre2QK9LYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJBOUJCNkZENTY3QTUwODNCN0JBMEJCMDdDRDMxMjEw
RjNDOEJFRTAeFw0yNTA3MDcxNDMwMTFaFw0yNjA3MDYxNDM1MTFaMDMxMTAvBgNV
BAMTKEVENDkwNzhFRkE2OEMxRDExQThFMDJBNkExMDRBOTA0QkE5MkFEREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3EODqYtkJl8PyuJ6Gs2rRr5ej
QcdHwD4YJtcmnohIV6eCbk0gyIKN+wAPK14VlwvlL0Bg7g8Y0q69J1OQYo4sjPBw
6DP7edK2kS2XGeN8UEOaY9i3u0pzxLctTn+Q45HuSYoQ+jQgiOT9PiC4Nr73p4c5
W9ojZxYy1riuSMPrZ1SWATpBU5JP/qL2VqNzrmGEuCJX8AoBIMJvu+wT/GdfI78Q
+JjwCL4oHR+z5tRkTgTxvEKjUisEvZFKPuaCywGvWy4OvVfpoECa7GtMcoi+h2Q2
/Y7Wfghi5f41RdOOsa0mD0f9UZ+kBHYa19wXaFjZ2H96LWTm1vdbzcI9QtdZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7UkHjvpowdEajgKmoQSpBLqSrdwwHwYDVR0j
BBgwFoAU26m7b9VnpQg7e6C7B80xIQ88i+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVv
ZlYvMC9EQkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQTlCQjZGRDU2N0E1MDgz
QjdCQTBCQjA3Q0QzMTIxMEYzQzhCRUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDUFBadVBqaXVRQllrdjNCYUtWTnFxSzV0Mjd6aXFwOWZoQldTU2VFb2ZWLzAv
MzEzNzM3MmUzMTMyMzUyZTM3MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsX1NMA0GCSqGSIb3DQEBCwUAA4IBAQCyVtfQU5dr
qEvpjnvAIIvbTdDe9paNbcgVpAzc5LUmWqzZfrOJNZJLcEhqJRHjZoSSEq6cmvml
adKcXMb3saya/e8K9ry1Vqooub7i0gPCa2gfz4Noeo1Ef4+sERhjlx6kc/Y6Nqa1
Qw9PgVbo19Ie86BMYptMZCwoZy3488UZR08ba9rBoFe59Gut6zVZ1PM1c34q3RpJ
QkpzfdFt/lUxUqYkliOCNFYBBM3iyXpbRnnHLkEwEyiXWRMAWxfQm93hfBvMjAA3
u/m+SJ9X+P+BMyHvS0LLbKSyQNspzd4ip6wsCAvvw9sHvUmrFL6XmRslZqZkjGyx
GuOIyRmeXo/d
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:46:08 2025 by rpki-client