Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230342e302f32332d3233203d3e20323632373239.roa
File:                     3137372e39322e3230342e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          Wo1Xgav1NkrnDaB+ZzLGQdPXnZgIODdP7cMy7Mhpvcg=
Subject key identifier:   77:33:D8:60:DA:EB:44:69:49:DA:74:DB:0A:32:46:7D:53:FC:5C:63
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       3A334F42C1B9184E9772528E56A9DA41EC558AE5
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230342e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:48 +0000
ROA not before:           Mon 16 Jun 2025 14:05:48 +0000
ROA not after:            Mon 15 Jun 2026 14:10:48 +0000
asID:                     262729
IP address blocks:        177.92.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 14:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:33:4f:42:c1:b9:18:4e:97:72:52:8e:56:a9:da:41:ec:55:8a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:48 2025 GMT
            Not After : Jun 15 14:10:48 2026 GMT
        Subject: CN=7733D860DAEB446949DA74DB0A32467D53FC5C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:37:af:de:75:a4:98:e6:7f:42:4a:25:58:b8:
                    ad:09:cf:25:1c:b4:d6:66:e1:3c:e1:a2:fd:b1:3b:
                    c2:69:21:fb:0a:e7:6d:f1:a6:37:00:e5:7e:62:34:
                    2f:5e:0a:9e:1a:24:d4:cf:62:9b:bd:8f:52:52:8f:
                    f6:f8:e6:e7:9d:f8:9a:29:36:34:2f:9d:9b:56:9d:
                    d1:9d:d0:50:87:87:06:16:a0:8a:bc:97:dd:6d:92:
                    ae:4a:c2:fa:73:a0:83:03:59:b9:31:36:45:83:72:
                    4c:64:f2:76:5e:76:f0:b7:1b:62:c5:a5:81:16:77:
                    ef:1f:a8:3a:52:0b:3b:18:24:93:5a:c0:70:fa:2d:
                    35:38:53:48:2b:c2:fd:23:98:17:e5:35:64:b9:06:
                    04:07:f5:8e:c5:fa:f6:53:3e:f5:1f:92:9e:5c:be:
                    65:3c:31:89:4f:99:60:4f:c1:e7:fa:d6:f5:ff:78:
                    5e:e2:9a:32:f6:25:79:51:cb:fc:79:64:b2:47:c4:
                    b8:02:ee:e9:57:7f:21:38:db:cd:57:29:46:be:e3:
                    00:da:01:9d:f0:a3:8d:0b:1d:63:24:d4:be:e0:ba:
                    35:ba:e0:bc:d1:c2:d7:bf:df:04:42:7f:24:43:ac:
                    29:97:1b:10:2b:e5:7d:c7:b7:52:91:e7:ac:c3:50:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:33:D8:60:DA:EB:44:69:49:DA:74:DB:0A:32:46:7D:53:FC:5C:63
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230342e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:45:ab:3d:30:8d:52:46:d4:80:9d:42:d4:81:27:84:47:61:
         e9:e8:bc:37:a7:58:15:20:47:cb:6f:64:70:39:5c:4b:d1:10:
         c8:70:66:36:b2:b9:dd:4c:45:61:a5:8e:25:b2:34:20:b9:23:
         b6:05:aa:a2:d7:17:fe:3d:a1:34:2b:61:04:4b:5e:55:58:55:
         d9:a9:e7:60:f6:19:6c:6d:22:32:72:fe:6d:37:b4:41:9c:6b:
         32:c1:3e:33:0a:8b:5e:dc:59:00:2b:bd:c5:2e:22:fd:6a:9d:
         9d:ef:14:46:1b:33:72:cb:15:33:c3:b8:ab:9a:3e:da:9b:0f:
         0a:6d:5d:bb:55:6d:8b:26:7a:b8:eb:93:0a:8b:1c:dd:7a:41:
         8c:ca:1b:02:ed:b1:4b:05:02:d2:af:dc:d9:b0:c0:57:9e:06:
         e4:2e:48:9a:0e:4a:b1:20:21:51:53:92:cf:e2:a4:1a:f5:86:
         19:fc:a9:6f:9a:1a:85:75:b7:b1:9d:dd:17:17:37:cc:cf:1b:
         1b:dc:ef:f8:9e:b9:ce:ed:06:c7:3b:36:49:34:2d:18:3c:73:
         c8:d3:38:77:da:a7:fa:f3:40:30:89:fc:55:f2:ab:24:59:02:
         8a:97:02:23:fb:82:70:5a:54:07:ce:22:2e:3a:4b:4e:4e:90:
         e8:d4:2f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:30:24 2025 by rpki-client