Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139352e302f32342d3234203d3e20323632353033.roa
File:                     3137372e36362e3139352e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          nJW9BILmDimpZx0b0axYPhra9scRmmMokJ3P/EBiIMg=
Subject key identifier:   0A:F8:54:C2:28:4E:63:6A:19:1F:A5:D3:01:36:64:6B:33:D5:3C:96
Certificate issuer:       /CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Certificate serial:       0546B457797C5C39182C13D4BE5B4D01697976CB
Authority key identifier: AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139352e302f32342d3234203d3e20323632353033.roa
Signing time:             Thu 29 May 2025 18:50:12 +0000
ROA not before:           Thu 29 May 2025 18:45:12 +0000
ROA not after:            Thu 28 May 2026 18:50:12 +0000
asID:                     262503
IP address blocks:        177.66.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 09:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:46:b4:57:79:7c:5c:39:18:2c:13:d4:be:5b:4d:01:69:79:76:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
        Validity
            Not Before: May 29 18:45:12 2025 GMT
            Not After : May 28 18:50:12 2026 GMT
        Subject: CN=0AF854C2284E636A191FA5D30136646B33D53C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:43:1b:a4:c1:45:d1:9b:be:29:56:f4:00:21:
                    9f:63:e5:02:44:b1:d7:51:df:80:46:69:4f:85:6f:
                    5f:19:6c:89:35:24:6f:8a:00:eb:5d:fb:7a:2e:15:
                    ad:05:3e:76:e3:ab:15:4f:50:e3:f9:1d:24:e7:85:
                    42:45:a9:ef:4e:3c:87:5c:9c:3a:c6:84:9f:1c:31:
                    d0:fc:f2:5c:34:b4:3d:46:76:cf:ab:4e:20:c9:44:
                    bd:26:32:9c:ae:45:92:d2:d6:73:d7:9e:8e:b7:5b:
                    48:d5:83:fa:70:c4:b0:b1:59:61:25:c7:fc:af:4d:
                    6b:1d:b6:37:b4:c1:c7:8a:67:8a:df:d3:5e:79:c1:
                    a9:b9:53:96:ae:a3:a9:27:fd:b8:eb:1a:db:37:0c:
                    62:f6:23:c9:cb:95:7d:8f:3f:85:e3:5b:0c:75:ab:
                    62:c9:e5:dc:2b:b1:9e:4d:ef:17:62:c4:4b:d1:e7:
                    e0:38:65:00:e7:b6:8d:95:8d:23:21:b9:da:aa:28:
                    93:97:75:5b:45:57:e1:13:5b:3b:02:7e:23:d8:f8:
                    99:9a:51:29:3d:4f:83:dd:4c:e7:17:f9:c2:f6:c6:
                    11:82:46:44:45:93:87:48:b0:8a:e0:2a:a9:99:2a:
                    78:b1:36:c9:4f:60:10:a0:11:49:60:9c:2a:81:eb:
                    0f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F8:54:C2:28:4E:63:6A:19:1F:A5:D3:01:36:64:6B:33:D5:3C:96
            X509v3 Authority Key Identifier:
                keyid:AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139352e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:5a:9d:f4:2b:63:5d:5d:42:25:df:db:a7:da:b2:e8:0c:27:
         f6:a6:16:b5:5b:c6:2e:8e:ba:4a:55:2c:36:7e:91:5d:1f:02:
         a3:0e:f4:07:4c:4d:17:2b:36:4f:86:5c:6a:3c:ae:cd:78:da:
         e8:f2:8e:31:0d:81:ef:86:49:f1:f2:7c:fc:09:a9:a0:9c:7e:
         6f:9b:4e:f1:bb:a8:87:90:32:90:0f:2a:60:40:a6:8a:46:4f:
         04:ed:dc:f5:e6:72:5f:c7:ed:37:9d:c3:de:45:da:c6:39:29:
         56:95:bb:1b:9c:b0:d4:67:30:bc:8f:75:22:5b:f0:59:1b:90:
         0b:65:30:32:e7:fa:6c:0c:ea:95:39:56:5b:7d:c0:c8:5c:66:
         0f:66:0b:c0:5e:83:81:c3:43:fe:ee:23:69:38:47:ba:d1:31:
         3a:18:dd:7d:b8:5c:b8:26:46:07:1c:e2:a3:1c:f2:7b:86:1d:
         2c:5b:ab:47:b6:7d:68:31:fd:f7:28:60:7a:59:9b:1b:8d:c4:
         e8:6a:bf:3d:14:fb:fe:8b:17:13:49:8e:92:33:ee:09:51:9c:
         63:94:bf:a4:65:35:07:fc:80:cf:39:fc:dc:32:95:46:76:9b:
         3e:c1:1c:42:fd:2a:f1:57:58:82:a6:7b:ec:6c:e7:8a:16:03:
         dc:bf:d8:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBUa0V3l8XDkYLBPUvltNAWl5dsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM2NEIyRDE3NzFBQjMwRTE4ODgzQ0REMTQwMDFBODJE
OTkwNUY5ODAeFw0yNTA1MjkxODQ1MTJaFw0yNjA1MjgxODUwMTJaMDMxMTAvBgNV
BAMTKDBBRjg1NEMyMjg0RTYzNkExOTFGQTVEMzAxMzY2NDZCMzNENTNDOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuQxukwUXRm74pVvQAIZ9j5QJE
sddR34BGaU+Fb18ZbIk1JG+KAOtd+3ouFa0FPnbjqxVPUOP5HSTnhUJFqe9OPIdc
nDrGhJ8cMdD88lw0tD1Gds+rTiDJRL0mMpyuRZLS1nPXno63W0jVg/pwxLCxWWEl
x/yvTWsdtje0wceKZ4rf0155wam5U5auo6kn/bjrGts3DGL2I8nLlX2PP4XjWwx1
q2LJ5dwrsZ5N7xdixEvR5+A4ZQDnto2VjSMhudqqKJOXdVtFV+ETWzsCfiPY+Jma
USk9T4PdTOcX+cL2xhGCRkRFk4dIsIrgKqmZKnixNslPYBCgEUlgnCqB6w+/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCvhUwihOY2oZH6XTATZkazPVPJYwHwYDVR0j
BBgwFoAUrGSy0Xcasw4YiDzdFAAagtmQX5gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC9BQzY0QjJEMTc3MUFCMzBFMTg4ODNDREQxNDAwMUE4MkQ5OTA1Rjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDNjRCMkQxNzcxQUIzMEUx
ODg4M0NERDE0MDAxQTgyRDk5MDVGOTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzEzNzM3MmUzNjM2MmUzMTM5MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxQsMwDQYJKoZIhvcNAQELBQADggEBAINanfQr
Y11dQiXf26fasugMJ/amFrVbxi6OukpVLDZ+kV0fAqMO9AdMTRcrNk+GXGo8rs14
2ujyjjENge+GSfHyfPwJqaCcfm+bTvG7qIeQMpAPKmBApopGTwTt3PXmcl/H7Ted
w95F2sY5KVaVuxucsNRnMLyPdSJb8FkbkAtlMDLn+mwM6pU5Vlt9wMhcZg9mC8Be
g4HDQ/7uI2k4R7rRMToY3X24XLgmRgcc4qMc8nuGHSxbq0e2fWgx/fcoYHpZmxuN
xOhqvz0U+/6LFxNJjpIz7glRnGOUv6RlNQf8gM85/NwylUZ2mz7BHEL9KvFXWIKm
e+xs54oWA9y/2Ik=
-----END CERTIFICATE-----
Generated at Thu Jun 19 21:28:37 2025 by rpki-client