Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/3137372e3130372e36342e302f32302d3234203d3e203532383632.roa
File:                     3137372e3130372e36342e302f32302d3234203d3e203532383632.roa (raw, json)
Hash identifier:          EU7C3yuBxcqaZ6WL5avZyOmRL6O/vnBtBGX770Dw1tM=
Subject key identifier:   FC:29:E1:C7:54:43:E1:BD:B9:F3:23:3C:98:0F:54:80:8D:8A:53:E6
Certificate issuer:       /CN=5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5
Certificate serial:       5A693C5631088410C388523B921A593628E35935
Authority key identifier: 5A:5F:04:F3:CD:1D:E3:A8:53:C1:30:5E:F3:E9:18:5A:AB:1E:51:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/3137372e3130372e36342e302f32302d3234203d3e203532383632.roa
Signing time:             Fri 16 May 2025 18:37:31 +0000
ROA not before:           Fri 16 May 2025 18:32:31 +0000
ROA not after:            Fri 15 May 2026 18:37:31 +0000
asID:                     52862
IP address blocks:        177.107.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.crl
                          rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 12:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:69:3c:56:31:08:84:10:c3:88:52:3b:92:1a:59:36:28:e3:59:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5
        Validity
            Not Before: May 16 18:32:31 2025 GMT
            Not After : May 15 18:37:31 2026 GMT
        Subject: CN=FC29E1C75443E1BDB9F3233C980F54808D8A53E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c4:96:85:14:cc:44:84:5b:ff:6c:7b:5f:d2:
                    dd:9e:97:bd:60:17:e7:3b:33:51:25:de:8e:3d:e9:
                    2a:ac:17:80:07:c4:13:f4:c6:9b:16:04:23:66:0b:
                    73:85:9f:a1:5c:15:ef:13:f0:1e:49:e2:26:47:11:
                    4f:1d:f7:12:69:b0:bf:a0:3b:61:7a:25:81:ac:d2:
                    f3:cf:3e:41:81:44:e3:56:79:41:d2:cc:53:00:56:
                    e7:7f:bc:d5:62:66:bb:71:5d:38:ec:82:62:2e:36:
                    30:de:e4:8b:40:c7:6c:b2:77:55:f7:ec:49:be:f3:
                    18:a0:a0:b1:78:21:7c:65:1a:f0:f1:e6:e7:8a:c0:
                    6c:a5:a4:3a:be:6c:06:5a:28:b3:ce:29:d3:2b:9b:
                    61:89:9c:2f:11:3f:8e:f8:b4:d9:06:dc:15:83:7c:
                    ef:04:e2:e4:da:41:9e:ea:5d:f4:5a:1b:5c:e2:f2:
                    89:7a:79:54:55:88:fa:2b:07:12:19:47:dd:4d:b0:
                    d8:41:c2:9d:df:0d:3d:9f:72:b5:39:80:f6:06:5d:
                    b4:3b:a8:5e:08:0a:0e:3d:79:6e:6f:06:4e:67:38:
                    58:ac:a7:c5:dc:f9:fc:fa:86:eb:42:eb:69:d2:d7:
                    22:69:ee:8e:e2:99:87:e4:34:35:91:fa:9c:7c:ff:
                    b8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:29:E1:C7:54:43:E1:BD:B9:F3:23:3C:98:0F:54:80:8D:8A:53:E6
            X509v3 Authority Key Identifier:
                keyid:5A:5F:04:F3:CD:1D:E3:A8:53:C1:30:5E:F3:E9:18:5A:AB:1E:51:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/3137372e3130372e36342e302f32302d3234203d3e203532383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:36:b5:87:35:2e:ba:81:7b:7c:dd:9c:26:fe:48:f6:b2:7b:
         4d:f5:81:f6:7f:5a:f2:86:77:71:50:dc:23:b2:2c:6a:78:8f:
         85:20:18:a2:2d:a9:e7:36:89:29:71:82:7c:a3:74:49:a8:7b:
         c7:35:9a:00:2f:21:9f:fc:39:33:56:a6:56:86:c7:e6:45:a6:
         c3:e7:ca:1b:19:32:65:61:c5:8a:4a:87:5e:4c:fb:2a:10:7a:
         c5:19:a3:82:30:31:fd:e0:83:c4:9a:98:8a:ef:5a:43:7a:d6:
         8f:79:e2:39:f3:81:64:22:0f:ea:f1:86:ee:13:ab:78:5d:29:
         3e:5d:8b:70:63:97:e8:d6:29:55:b7:f0:76:8b:99:93:29:3b:
         f1:d4:27:d1:e8:54:3e:3f:00:26:34:de:9a:ab:cd:7f:b0:4b:
         bd:df:c5:07:12:5d:06:a6:8e:9b:59:8e:36:a3:0d:e6:f9:28:
         83:52:73:34:5c:2a:32:ef:43:71:a1:c3:3e:a6:15:de:a4:e4:
         bc:08:fc:c4:79:02:93:b7:34:92:5c:f2:9d:a8:43:ba:3e:df:
         27:9c:bb:67:af:6a:e5:bb:20:a6:d0:f3:5d:aa:99:ee:8c:f4:
         d2:9a:c2:0a:45:40:6f:68:44:6a:13:71:68:fd:fe:dc:d9:18:
         6f:4f:d6:29
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWmk8VjEIhBDDiFI7khpZNijjWTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE1RjA0RjNDRDFERTNBODUzQzEzMDVFRjNFOTE4NUFB
QjFFNTFENTAeFw0yNTA1MTYxODMyMzFaFw0yNjA1MTUxODM3MzFaMDMxMTAvBgNV
BAMTKEZDMjlFMUM3NTQ0M0UxQkRCOUYzMjMzQzk4MEY1NDgwOEQ4QTUzRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNxJaFFMxEhFv/bHtf0t2el71g
F+c7M1El3o496SqsF4AHxBP0xpsWBCNmC3OFn6FcFe8T8B5J4iZHEU8d9xJpsL+g
O2F6JYGs0vPPPkGBRONWeUHSzFMAVud/vNViZrtxXTjsgmIuNjDe5ItAx2yyd1X3
7Em+8xigoLF4IXxlGvDx5ueKwGylpDq+bAZaKLPOKdMrm2GJnC8RP474tNkG3BWD
fO8E4uTaQZ7qXfRaG1zi8ol6eVRViPorBxIZR91NsNhBwp3fDT2fcrU5gPYGXbQ7
qF4ICg49eW5vBk5nOFisp8Xc+fz6hutC62nS1yJp7o7imYfkNDWR+px8/7gTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/Cnhx1RD4b258yM8mA9UgI2KU+YwHwYDVR0j
BBgwFoAUWl8E880d46hTwTBe8+kYWqseUdUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODFnbVVWREVUOGZ1SzY2b2Y0UlpRSFNhS2I5aVZIdjNCVzR5d3VXOUFQ
NGIvMC81QTVGMDRGM0NEMURFM0E4NTNDMTMwNUVGM0U5MTg1QUFCMUU1MUQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBNUYwNEYzQ0QxREUzQTg1
M0MxMzA1RUYzRTkxODVBQUIxRTUxRDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgxZ21VVkRFVDhmdUs2Nm9mNFJaUUhTYUtiOWlWSHYzQlc0eXd1VzlBUDRiLzAv
MzEzNzM3MmUzMTMwMzcyZTM2MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMy
MzgzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsWtAMA0GCSqGSIb3DQEBCwUAA4IBAQAfNrWHNS66
gXt83Zwm/kj2sntN9YH2f1ryhndxUNwjsixqeI+FIBiiLannNokpcYJ8o3RJqHvH
NZoALyGf/DkzVqZWhsfmRabD58obGTJlYcWKSodeTPsqEHrFGaOCMDH94IPEmpiK
71pDetaPeeI584FkIg/q8YbuE6t4XSk+XYtwY5fo1ilVt/B2i5mTKTvx1CfR6FQ+
PwAmNN6aq81/sEu938UHEl0Gpo6bWY42ow3m+SiDUnM0XCoy70NxocM+phXepOS8
CPzEeQKTtzSSXPKdqEO6Pt8nnLtnr2rluyCm0PNdqpnujPTSmsIKRUBvaERqE3Fo
/f7c2RhvT9Yp
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:40:37 2025 by rpki-client