Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33352e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33352e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          mqO9e2zGU39a5LLjmEexdBC674EQ9YArU5jggklOzOo=
Subject key identifier:   54:F6:F0:A1:37:27:72:74:CC:5C:C3:79:C9:3A:08:21:C5:FE:37:EF
Certificate issuer:       /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial:       43FE78D95E9DDBD2B9346E015C10AAA3EBFCA0B8
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33352e302f32342d3234203d3e20323632353738.roa
Signing time:             Fri 30 May 2025 17:46:23 +0000
ROA not before:           Fri 30 May 2025 17:41:23 +0000
ROA not after:            Fri 29 May 2026 17:46:23 +0000
asID:                     262578
IP address blocks:        177.84.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl
                          rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 06:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fe:78:d9:5e:9d:db:d2:b9:34:6e:01:5c:10:aa:a3:eb:fc:a0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
        Validity
            Not Before: May 30 17:41:23 2025 GMT
            Not After : May 29 17:46:23 2026 GMT
        Subject: CN=54F6F0A137277274CC5CC379C93A0821C5FE37EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:cd:eb:b8:35:14:fa:42:69:b2:c5:c4:01:
                    61:c6:5b:e8:ef:ac:d7:14:29:97:a0:ad:78:90:55:
                    71:69:84:57:53:d6:24:d9:7e:93:8a:fd:6a:50:8c:
                    79:d0:11:76:51:89:49:ef:7b:9d:f5:4e:bb:7d:6c:
                    45:83:42:57:e7:9d:9e:ff:a2:97:66:a8:af:18:19:
                    f5:d3:c7:72:9d:dd:0c:8b:69:2c:3d:45:07:07:66:
                    3b:43:b4:af:8f:d0:81:48:98:88:4b:a1:25:8a:76:
                    9b:2c:70:2b:da:f0:bc:3c:c5:86:22:22:bb:03:fb:
                    ea:e0:bd:0b:c6:e6:56:6e:f3:3f:29:4d:d9:24:d4:
                    a2:55:4e:60:79:0c:2c:ca:5b:19:a9:e5:a6:07:aa:
                    ab:b1:10:d4:d9:6c:4c:67:9d:08:26:e3:84:49:c8:
                    6d:1a:4c:75:d0:d9:f3:db:13:62:23:9b:f5:6f:1b:
                    07:1b:1c:5c:6a:49:44:4e:7d:31:ae:6f:f9:ac:ff:
                    3a:c8:02:e8:e5:21:ea:e5:d4:72:a2:fc:2e:8f:20:
                    e9:e0:94:6d:5f:a4:36:02:14:89:82:1a:35:24:2e:
                    8c:46:c9:da:06:65:e7:7a:b4:dc:37:a1:60:46:87:
                    03:27:ac:1a:c4:04:77:29:57:87:0e:1c:89:6e:d8:
                    10:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F6:F0:A1:37:27:72:74:CC:5C:C3:79:C9:3A:08:21:C5:FE:37:EF
            X509v3 Authority Key Identifier:
                keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33352e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:00:7f:30:0d:51:93:7a:6e:17:76:6d:b4:3a:6b:5d:68:c1:
         91:12:43:4b:a7:d8:c4:fb:be:4b:f1:99:69:f3:bf:5b:33:eb:
         8b:fe:a7:20:45:4e:a4:da:9c:04:c6:eb:f8:20:e8:1b:4f:35:
         93:9e:7c:29:b3:21:96:84:de:8a:13:e2:36:3e:0f:13:40:5b:
         13:9a:6f:6c:4b:0a:d9:21:4e:d4:48:8b:f3:9e:e9:d3:65:1c:
         c6:88:e6:8c:01:26:6e:dd:d2:3d:9f:c3:8c:c2:65:72:d9:c4:
         49:c5:e6:51:99:6f:0a:49:cf:1c:02:2f:8b:18:31:a9:53:4d:
         f7:af:45:c4:86:11:10:f7:a2:54:12:fa:d5:1d:56:25:5f:a6:
         5a:cb:88:b7:31:9b:e5:08:e4:c3:7e:00:d9:43:4d:7f:34:81:
         64:d3:e6:1d:be:ea:48:03:74:e7:3d:7e:96:8f:c8:11:57:4e:
         fe:e6:bd:08:d6:16:b3:4f:3b:4a:ec:6f:7e:0c:0b:3d:e7:c2:
         91:e5:d3:0c:1c:10:03:67:2a:4c:5a:17:fe:0d:1e:b3:20:d3:
         fd:ed:d4:2b:20:8d:27:7c:83:e2:eb:24:a3:ac:62:ab:b6:99:
         b6:06:d7:f0:ae:0a:1f:44:7b:46:76:ef:0b:66:82:95:9d:e6:
         5a:4d:99:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 17:03:43 2025 by rpki-client