Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/3137372e38362e3134322e302f32342d3234203d3e20323731373038.roa
File:                     3137372e38362e3134322e302f32342d3234203d3e20323731373038.roa (raw, json)
Hash identifier:          YbuR1zOx8+jKTIWygiCYdcw8WewIsHRyRxRtFwlQVCI=
Subject key identifier:   EC:5E:3C:DE:AE:DC:5D:0A:9F:3D:EA:71:72:64:EA:D4:16:68:55:6B
Certificate issuer:       /CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
Certificate serial:       0C251C0D70184FC9D73BB1961228226AFD4DC6F8
Authority key identifier: 70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/3137372e38362e3134322e302f32342d3234203d3e20323731373038.roa
Signing time:             Tue 29 Jul 2025 22:38:25 +0000
ROA not before:           Tue 29 Jul 2025 22:33:25 +0000
ROA not after:            Tue 28 Jul 2026 22:38:25 +0000
asID:                     271708
IP address blocks:        177.86.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl
                          rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 10:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:25:1c:0d:70:18:4f:c9:d7:3b:b1:96:12:28:22:6a:fd:4d:c6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
        Validity
            Not Before: Jul 29 22:33:25 2025 GMT
            Not After : Jul 28 22:38:25 2026 GMT
        Subject: CN=EC5E3CDEAEDC5D0A9F3DEA717264EAD41668556B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:ed:15:c1:07:5e:c0:8b:a4:0c:48:43:33:
                    d3:54:c0:d4:44:26:2f:57:ad:6f:15:90:9e:2a:9a:
                    15:a8:29:5c:4b:87:4b:24:8a:75:99:24:04:30:6d:
                    e1:ec:e0:ff:71:f9:88:cf:57:96:69:04:90:e9:f9:
                    37:25:56:89:16:fe:34:92:3d:1b:97:14:75:3b:01:
                    6a:d8:89:48:90:84:0b:24:cc:b3:a1:86:83:eb:63:
                    3d:05:64:5c:51:4a:2b:b4:b9:be:28:04:2a:b6:b0:
                    97:ca:d2:57:2e:d1:fd:8f:8e:f0:7e:02:87:72:cc:
                    56:85:c1:33:02:94:b2:59:b3:9e:a9:79:0e:4a:e8:
                    43:3a:58:20:b9:3c:74:f9:7e:95:ba:d1:05:dc:55:
                    55:a7:45:2e:8f:21:3c:8b:26:28:41:64:c5:40:f7:
                    98:d7:1b:66:30:e3:a4:09:86:54:0a:3e:af:ce:e4:
                    76:4e:51:13:53:a9:fa:d1:98:84:34:cc:03:86:20:
                    23:6b:e1:da:fa:fd:d9:92:d5:71:94:42:5b:a0:57:
                    a7:fc:a4:4b:f7:09:cf:c8:59:9b:3a:df:71:9d:af:
                    5b:93:1c:ce:65:4d:fa:e7:20:43:28:bf:d6:53:0b:
                    f9:71:86:ae:77:43:3e:c7:06:02:0a:c6:fe:95:ba:
                    6a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5E:3C:DE:AE:DC:5D:0A:9F:3D:EA:71:72:64:EA:D4:16:68:55:6B
            X509v3 Authority Key Identifier:
                keyid:70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/3137372e38362e3134322e302f32342d3234203d3e20323731373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:3e:04:b4:3b:c9:f3:bc:d1:84:73:35:64:bd:b3:c3:42:ed:
         ea:73:62:3d:68:5f:fd:e6:0e:45:51:37:ea:6e:ea:b5:4b:25:
         75:d0:87:85:a1:88:b9:5c:32:c8:d6:8c:3c:47:ca:ab:12:d8:
         f4:dd:3e:d8:c9:1b:62:79:e0:3f:a0:83:1d:e7:0f:c7:ed:e8:
         4f:ba:dd:ca:80:89:81:f3:a6:28:fc:51:cd:df:91:5e:55:4d:
         d4:ca:70:8a:59:a1:54:85:a4:ef:c2:5f:4f:a0:4c:ad:87:91:
         c5:3e:38:3d:ca:bc:5e:70:d7:82:a1:49:38:ca:ed:44:66:1b:
         19:27:e4:f1:5d:2e:a1:d5:a6:a4:2a:3d:9f:a1:8c:ae:0e:29:
         0f:0e:af:54:ac:65:fc:91:1f:5d:9b:aa:29:e4:fe:d1:38:63:
         7a:ad:4b:93:d0:a3:08:2f:ba:77:dc:f8:39:25:34:10:cd:0a:
         68:5f:05:16:c1:83:76:69:af:d5:92:f6:62:5e:26:e9:0d:f3:
         e3:79:70:02:e2:3d:21:45:ea:5b:5b:61:e7:ca:a8:b0:a8:8d:
         24:ce:0f:73:73:60:fb:4c:f1:9c:97:ae:a0:c2:68:72:61:90:
         76:3e:78:29:3b:0b:33:2a:22:9a:50:77:46:0b:e2:93:a2:66:
         5f:13:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:17:27 2025 by rpki-client