Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3137372e35352e33322e302f32302d3234203d3e20313938393439.roa
File:                     3137372e35352e33322e302f32302d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          7CshKhBtHVrQ0tJFFcXx3+VO9JLZbKKJSAUo6dLGT1A=
Subject key identifier:   96:30:F0:13:6E:97:B8:9B:E2:BB:CB:E5:44:8E:94:4F:0E:50:AD:51
Certificate issuer:       /CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0
Certificate serial:       55BCD132B3C5D5B2F1C1DAF084F95415ABE35746
Authority key identifier: 86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3137372e35352e33322e302f32302d3234203d3e20313938393439.roa
Signing time:             Mon 21 Jul 2025 15:13:23 +0000
ROA not before:           Mon 21 Jul 2025 15:08:23 +0000
ROA not after:            Mon 20 Jul 2026 15:13:23 +0000
asID:                     198949
IP address blocks:        177.55.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl
                          rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 15:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bc:d1:32:b3:c5:d5:b2:f1:c1:da:f0:84:f9:54:15:ab:e3:57:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0
        Validity
            Not Before: Jul 21 15:08:23 2025 GMT
            Not After : Jul 20 15:13:23 2026 GMT
        Subject: CN=9630F0136E97B89BE2BBCBE5448E944F0E50AD51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:b8:97:54:67:3f:50:dd:70:40:17:44:86:
                    3c:7f:7f:94:a5:78:d1:43:58:b8:8e:56:55:67:b8:
                    59:1a:23:84:ca:30:e4:25:e3:0c:86:63:26:23:8b:
                    87:e0:e3:5e:13:e0:f9:4f:23:61:cb:0f:9f:70:f3:
                    be:c7:cb:1b:d0:71:7f:e2:7f:e1:6c:91:cd:75:05:
                    cd:04:7d:26:f7:49:0e:ed:cc:1c:0d:32:6b:55:48:
                    78:97:5e:4d:cb:01:1b:dd:a9:af:49:90:55:64:b9:
                    5f:07:11:62:7b:4f:25:3a:49:19:4a:eb:e3:bf:4d:
                    1d:e1:55:e9:fb:90:9b:97:91:a7:1c:a6:df:dc:a0:
                    8a:b6:cb:f6:b1:5c:7a:8e:0b:8e:58:99:d1:70:e3:
                    b9:60:3c:82:26:e6:2b:f6:2c:63:2b:58:0b:d1:56:
                    bc:74:14:d1:f3:c3:5b:bf:95:e1:93:e2:c9:b5:83:
                    25:81:46:4c:c5:38:66:94:a9:d5:3c:d5:ae:24:e8:
                    b4:83:58:61:ca:b2:12:d6:a5:07:c6:86:85:8d:94:
                    d9:93:b4:ea:c7:3c:6a:e8:ed:c4:80:0b:07:bf:39:
                    10:44:88:80:0a:ee:55:91:4b:e1:3f:7f:76:dd:a3:
                    42:28:1a:9c:e6:8a:f2:cb:f4:e2:8f:02:03:8a:8a:
                    5f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:30:F0:13:6E:97:B8:9B:E2:BB:CB:E5:44:8E:94:4F:0E:50:AD:51
            X509v3 Authority Key Identifier:
                keyid:86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3137372e35352e33322e302f32302d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:51:04:0d:2c:72:be:e5:9b:36:a1:b5:61:eb:12:66:74:9f:
         0a:7e:83:aa:f1:e3:b8:31:67:59:dc:3b:48:24:6a:2b:75:ec:
         60:df:2e:ce:fd:82:a9:c9:d3:49:a2:2b:86:e9:34:41:83:97:
         bb:5e:d0:01:a8:b5:59:ad:7d:c3:f3:0a:00:8b:97:14:e7:16:
         5d:76:93:29:83:94:8a:e7:5f:ad:b7:30:36:c8:9d:68:04:2d:
         eb:17:67:c7:eb:e1:f2:6d:23:7f:95:09:c9:ef:3e:88:30:d8:
         98:1d:ba:79:0d:1e:ed:64:ef:06:55:01:e7:00:cc:a7:21:b9:
         c7:57:c3:1f:88:a1:90:ab:27:4d:74:35:e7:f0:43:54:cd:eb:
         bf:34:63:3e:3b:42:9c:00:9e:cd:47:6a:9d:0f:09:79:6a:5b:
         d4:d1:ff:a6:d5:d6:63:67:cc:80:0c:17:50:6b:39:8c:f6:60:
         df:d7:82:e3:e4:7c:78:05:c6:26:8c:35:85:37:b0:ef:7e:85:
         2d:32:03:f7:19:97:dc:f0:06:e9:de:2d:dc:fd:51:4b:6b:16:
         50:64:75:87:2d:61:58:85:2f:b8:9a:4b:3b:cc:32:d5:0c:f5:
         a8:fd:ea:fd:df:b5:70:41:89:0c:42:bb:91:20:46:2f:0d:1b:
         45:cf:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:44:38 2025 by rpki-client