Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32342d3234203d3e20323632353738.roa
File:                     3137372e38342e33382e302f32342d3234203d3e20323632353738.roa (raw, json)
Hash identifier:          hT/VtbO6bsbMhxy9M8bb/kqOGbx+Q3T9OxevEt6OSGQ=
Subject key identifier:   65:1E:04:CE:8B:B3:16:BD:71:9A:4D:2A:2C:84:6A:63:D6:7D:FB:95
Certificate issuer:       /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial:       4238FB49B72C784927C3D34DA3BAB8CD26210DA1
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32342d3234203d3e20323632353738.roa
Signing time:             Fri 30 May 2025 17:46:26 +0000
ROA not before:           Fri 30 May 2025 17:41:26 +0000
ROA not after:            Fri 29 May 2026 17:46:26 +0000
asID:                     262578
IP address blocks:        177.84.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl
                          rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 11:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:38:fb:49:b7:2c:78:49:27:c3:d3:4d:a3:ba:b8:cd:26:21:0d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
        Validity
            Not Before: May 30 17:41:26 2025 GMT
            Not After : May 29 17:46:26 2026 GMT
        Subject: CN=651E04CE8BB316BD719A4D2A2C846A63D67DFB95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:28:c4:88:74:e0:7e:1c:44:69:1d:b4:5d:
                    29:e2:b8:06:35:df:ae:3e:7c:66:6e:92:f5:6a:61:
                    ee:7b:44:8e:fa:c1:11:e3:1c:70:50:e4:e4:39:5d:
                    51:3e:ed:92:0e:ff:8b:be:26:d9:58:4f:92:ad:e5:
                    c5:99:83:60:8f:78:00:44:61:94:36:ac:04:ab:c2:
                    4a:15:bb:17:57:3e:43:2e:3e:dd:88:05:bb:ad:b4:
                    c7:07:29:8d:0a:5e:6a:2b:92:62:04:cf:47:40:0a:
                    75:0f:60:57:74:30:b6:2f:a6:47:60:51:fb:f1:18:
                    6b:6d:7e:cf:bd:5e:2f:78:98:12:76:9c:12:ab:2c:
                    1a:71:74:9e:33:07:e3:6c:51:0e:49:6b:a4:fa:ed:
                    9a:c8:bb:03:ff:48:0a:66:0f:12:f5:57:50:5b:43:
                    68:59:a8:89:43:e8:1e:25:e9:2b:66:ec:5d:f0:36:
                    91:11:ef:4c:28:b1:af:9e:82:1a:1d:af:7b:b6:e0:
                    2f:4d:80:6e:35:71:b2:06:c7:8b:e2:b5:79:02:0d:
                    e4:c7:c2:f1:51:63:ac:77:db:27:1a:16:4a:e4:d0:
                    c2:fb:3d:dd:cb:c0:e6:20:13:9d:0d:ef:d0:c0:eb:
                    78:dd:d1:c9:c5:6e:ee:59:da:61:b1:1d:6d:f6:37:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1E:04:CE:8B:B3:16:BD:71:9A:4D:2A:2C:84:6A:63:D6:7D:FB:95
            X509v3 Authority Key Identifier:
                keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33382e302f32342d3234203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:59:20:d4:9a:59:b7:53:d3:58:17:98:f8:58:cf:5c:25:9e:
         cc:43:4f:05:87:9d:fd:88:00:66:70:3d:b8:4d:53:54:2f:10:
         8b:40:6b:52:a8:92:9e:e4:48:e5:6f:d8:51:62:79:54:93:d3:
         d8:30:6d:80:c8:3c:5d:8c:1d:e4:27:ed:a7:b9:50:0c:4c:b0:
         3c:41:7e:70:72:29:2a:e9:20:fe:22:44:cf:61:ce:67:0b:0f:
         a5:b4:d5:67:55:8f:3c:b2:b4:6b:a7:01:46:2c:e2:b3:ac:29:
         58:73:ed:0a:30:77:26:34:11:20:3c:25:c4:bc:56:3d:f7:6b:
         f9:fe:4c:94:db:f5:d1:fe:7c:07:cb:42:43:c6:7f:15:0c:0e:
         1c:ac:de:34:4e:8f:9b:53:9a:0b:74:c3:b7:9a:84:07:8d:51:
         ba:c6:5c:19:8d:3c:d5:cc:06:5f:4b:96:de:e5:00:e7:62:41:
         38:eb:70:3a:52:68:66:40:56:86:bf:4d:5e:4f:71:0a:05:cc:
         8d:1b:40:90:81:8c:5b:22:07:fd:1b:20:ab:a9:ac:5b:0b:c4:
         76:4a:9f:e3:12:24:21:ec:06:00:e8:c8:d0:a2:4f:1e:b4:70:
         23:c4:ae:01:0e:a0:7f:34:46:61:7a:3d:d8:f9:5b:fb:92:ec:
         6f:41:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 21:47:34 2025 by rpki-client