Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38342e302f32332d3233203d3e20323732363737.roa
File:                     3137392e36332e38342e302f32332d3233203d3e20323732363737.roa (raw, json)
Hash identifier:          Gkte1rZdgZWcFABsNafvYFJLQ8NAOGhF7VkqNdf58CY=
Subject key identifier:   11:9A:34:88:3A:9D:06:C4:59:96:CD:1C:41:18:46:BC:0B:B1:04:EF
Certificate issuer:       /CN=3C20D4743A457C18DB0FEAEA3025E1CCD51A4793
Certificate serial:       3F5B73D0220EBE19150A71760E7D5D1495E144ED
Authority key identifier: 3C:20:D4:74:3A:45:7C:18:DB:0F:EA:EA:30:25:E1:CC:D5:1A:47:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38342e302f32332d3233203d3e20323732363737.roa
Signing time:             Fri 12 Sep 2025 02:41:52 +0000
ROA not before:           Fri 12 Sep 2025 02:36:52 +0000
ROA not after:            Fri 11 Sep 2026 02:41:52 +0000
asID:                     272677
IP address blocks:        179.63.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 03:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5b:73:d0:22:0e:be:19:15:0a:71:76:0e:7d:5d:14:95:e1:44:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C20D4743A457C18DB0FEAEA3025E1CCD51A4793
        Validity
            Not Before: Sep 12 02:36:52 2025 GMT
            Not After : Sep 11 02:41:52 2026 GMT
        Subject: CN=119A34883A9D06C45996CD1C411846BC0BB104EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:25:98:d1:1b:50:07:6a:7e:9e:b9:ad:72:
                    45:24:a0:c7:6f:0f:e5:cd:b9:41:eb:cc:7e:3c:b5:
                    14:ab:a1:1e:b9:8f:8b:c4:b6:0c:d4:44:17:21:11:
                    23:e7:ba:8d:5c:38:ae:7a:ab:a7:2c:08:3c:8b:5a:
                    e1:15:33:be:16:ac:a9:ce:c8:6f:0a:d2:cc:bf:be:
                    8d:b2:6d:b7:60:0a:d4:a4:3e:48:2d:32:bb:08:e7:
                    be:9a:ea:ca:83:d7:bd:2a:d4:d2:ef:82:71:3a:63:
                    b5:3c:05:39:12:09:b7:db:4e:78:e3:4e:87:11:25:
                    7b:44:f2:05:47:2e:58:5c:79:c3:cd:c0:9b:ad:86:
                    10:d4:a5:34:14:33:56:c5:b6:19:17:50:d5:1e:7e:
                    bd:f9:63:42:00:64:8e:b9:24:d9:59:24:05:c1:b8:
                    7f:61:87:09:6b:f7:1b:a2:a6:f2:a7:fe:97:f5:05:
                    48:1c:55:a3:79:de:7e:7b:04:c6:4a:4e:b1:85:ae:
                    84:0e:56:02:74:c2:85:6c:e2:61:f0:ed:46:44:15:
                    f7:b7:38:e3:01:4e:f9:4f:89:5e:d8:0f:63:e2:91:
                    77:4c:a5:87:a8:ee:77:81:d4:4d:9d:a8:09:59:66:
                    38:e3:e2:cc:fd:50:7b:8b:a6:07:f6:3d:6f:12:03:
                    c7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9A:34:88:3A:9D:06:C4:59:96:CD:1C:41:18:46:BC:0B:B1:04:EF
            X509v3 Authority Key Identifier:
                keyid:3C:20:D4:74:3A:45:7C:18:DB:0F:EA:EA:30:25:E1:CC:D5:1A:47:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3137392e36332e38342e302f32332d3233203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:d6:fd:ee:fa:52:22:19:e3:3e:3d:30:7f:1d:0c:d0:f1:8d:
         24:55:c2:2c:e3:61:2a:8f:d0:23:c1:3e:d5:d7:92:fa:20:f1:
         ab:8c:78:1f:e5:94:9f:b3:49:17:1a:35:e6:5a:ef:fa:8b:14:
         21:fa:64:9b:41:29:d5:ff:d3:c0:8c:03:0c:56:8d:e9:b8:c7:
         18:93:bf:f7:f0:25:71:eb:78:2f:ed:4f:a7:d9:9d:dc:9a:2a:
         30:73:11:01:bf:62:b3:5a:b3:c2:31:06:87:c0:0d:51:a7:44:
         82:7c:54:61:0b:7d:fd:a2:97:be:c1:9c:02:21:de:54:10:45:
         af:36:9c:d3:09:58:b8:98:0e:ee:78:95:8a:c6:46:f7:3e:ee:
         45:8f:4e:56:39:64:ff:9c:5a:13:67:c4:e6:ba:79:57:08:bd:
         da:36:ae:b0:6c:89:36:51:35:9a:55:3e:a5:f3:72:9e:eb:92:
         0b:3d:3c:fb:04:34:40:ac:96:02:b7:06:74:0a:2f:e0:61:4a:
         7c:b3:09:ca:c1:31:dc:f1:5b:ab:eb:79:c0:84:b6:a2:cb:24:
         03:8d:a7:9f:cf:c7:d1:4a:9f:db:5a:bf:26:29:23:e5:23:1d:
         ee:9e:9d:2a:27:df:94:92:63:86:4c:aa:e8:d5:b0:1e:92:d1:
         9e:e3:3f:3e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUP1tz0CIOvhkVCnF2Dn1dFJXhRO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MyMEQ0NzQzQTQ1N0MxOERCMEZFQUVBMzAyNUUxQ0NE
NTFBNDc5MzAeFw0yNTA5MTIwMjM2NTJaFw0yNjA5MTEwMjQxNTJaMDMxMTAvBgNV
BAMTKDExOUEzNDg4M0E5RDA2QzQ1OTk2Q0QxQzQxMTg0NkJDMEJCMTA0RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlCWY0RtQB2p+nrmtckUkoMdv
D+XNuUHrzH48tRSroR65j4vEtgzURBchESPnuo1cOK56q6csCDyLWuEVM74WrKnO
yG8K0sy/vo2ybbdgCtSkPkgtMrsI576a6sqD170q1NLvgnE6Y7U8BTkSCbfbTnjj
TocRJXtE8gVHLlhcecPNwJuthhDUpTQUM1bFthkXUNUefr35Y0IAZI65JNlZJAXB
uH9hhwlr9xuipvKn/pf1BUgcVaN53n57BMZKTrGFroQOVgJ0woVs4mHw7UZEFfe3
OOMBTvlPiV7YD2PikXdMpYeo7neB1E2dqAlZZjjj4sz9UHuLpgf2PW8SA8cJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEZo0iDqdBsRZls0cQRhGvAuxBO8wHwYDVR0j
BBgwFoAUPCDUdDpFfBjbD+rqMCXhzNUaR5MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21KVzliM3l3VjJqTXNSTVg1UlYyUjkzQVZmNzI3TENnalVEc2poWnBK
UlQvMS8zQzIwRDQ3NDNBNDU3QzE4REIwRkVBRUEzMDI1RTFDQ0Q1MUE0NzkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDMjBENDc0M0E0NTdDMThE
QjBGRUFFQTMwMjVFMUNDRDUxQTQ3OTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtSlc5YjN5d1Yyak1zUk1YNVJWMlI5M0FWZjcyN0xDZ2pVRHNqaFpwSlJULzEv
MzEzNzM5MmUzNjMzMmUzODM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMy
MzYzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsz9UMA0GCSqGSIb3DQEBCwUAA4IBAQAE1v3u+lIi
GeM+PTB/HQzQ8Y0kVcIs42Eqj9AjwT7V15L6IPGrjHgf5ZSfs0kXGjXmWu/6ixQh
+mSbQSnV/9PAjAMMVo3puMcYk7/38CVx63gv7U+n2Z3cmiowcxEBv2KzWrPCMQaH
wA1Rp0SCfFRhC339ope+wZwCId5UEEWvNpzTCVi4mA7ueJWKxkb3Pu5Fj05WOWT/
nFoTZ8TmunlXCL3aNq6wbIk2UTWaVT6l83Ke65ILPTz7BDRArJYCtwZ0Ci/gYUp8
swnKwTHc8Vur63nAhLaiyyQDjaefz8fRSp/bWr8mKSPlIx3unp0qJ9+UkmOGTKro
1bAektGe4z8+
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:58:25 2025 by rpki-client