Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/3137372e33392e3139362e302f32322d3332203d3e203532373734.roa
File:                     3137372e33392e3139362e302f32322d3332203d3e203532373734.roa (raw, json)
Hash identifier:          /9br6QVPdWIkV/9o1/HGP8CkMnhxDB1cXWx6NAD/XIQ=
Subject key identifier:   57:8F:99:D4:2A:3A:C7:B2:63:F5:3F:1E:33:E1:C9:C9:FB:1A:AD:B5
Certificate issuer:       /CN=ECC476EEF0025078A76C96EE377194228F90C3A1
Certificate serial:       7BB38813E535D8FD84966971919472721300C2C9
Authority key identifier: EC:C4:76:EE:F0:02:50:78:A7:6C:96:EE:37:71:94:22:8F:90:C3:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECC476EEF0025078A76C96EE377194228F90C3A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/3137372e33392e3139362e302f32322d3332203d3e203532373734.roa
Signing time:             Wed 30 Jul 2025 15:02:46 +0000
ROA not before:           Wed 30 Jul 2025 14:57:46 +0000
ROA not after:            Wed 29 Jul 2026 15:02:46 +0000
asID:                     52774
IP address blocks:        177.39.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/ECC476EEF0025078A76C96EE377194228F90C3A1.crl
                          rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/ECC476EEF0025078A76C96EE377194228F90C3A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECC476EEF0025078A76C96EE377194228F90C3A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 23:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b3:88:13:e5:35:d8:fd:84:96:69:71:91:94:72:72:13:00:c2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECC476EEF0025078A76C96EE377194228F90C3A1
        Validity
            Not Before: Jul 30 14:57:46 2025 GMT
            Not After : Jul 29 15:02:46 2026 GMT
        Subject: CN=578F99D42A3AC7B263F53F1E33E1C9C9FB1AADB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:61:60:2c:4a:f0:38:20:b4:4f:23:36:88:5c:
                    20:1d:e1:cf:1f:a5:6d:59:39:76:a4:b6:7a:a7:bb:
                    a9:de:df:a2:52:df:4b:40:7a:63:59:61:83:0d:b6:
                    79:8e:d9:ba:59:43:66:95:9e:1b:f8:98:2c:ed:ff:
                    88:28:ba:43:89:dd:7e:54:46:a8:ff:e9:98:d5:11:
                    ac:16:6e:4c:92:1f:f2:cd:e0:c1:91:4b:85:f6:2f:
                    65:f4:dd:1e:95:9a:74:2d:7a:48:95:10:9e:d8:cc:
                    9f:b5:0b:e8:72:45:bf:b5:3a:70:e7:f2:09:fa:90:
                    0e:f8:d2:2c:3d:7d:0c:33:93:9e:88:a9:c5:84:bc:
                    36:55:bb:5b:95:9d:df:65:18:08:f8:2d:6b:09:db:
                    4e:3c:3b:40:86:7d:1d:f0:39:33:0b:e0:0b:75:cf:
                    b7:96:b4:bf:b8:95:a6:3a:e3:9f:db:a0:13:18:13:
                    79:61:cd:d3:62:90:b9:86:91:e7:f7:12:8d:a1:71:
                    54:fe:04:8a:74:4b:0d:d2:00:5c:30:cd:40:43:e4:
                    b0:b0:1e:07:26:90:32:c6:23:22:9f:16:b0:e3:bf:
                    9b:b8:66:3e:1b:39:b9:25:22:21:b6:38:85:04:dc:
                    c5:80:f7:d9:a0:72:7b:e5:ec:71:c1:cb:bb:c3:26:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8F:99:D4:2A:3A:C7:B2:63:F5:3F:1E:33:E1:C9:C9:FB:1A:AD:B5
            X509v3 Authority Key Identifier:
                keyid:EC:C4:76:EE:F0:02:50:78:A7:6C:96:EE:37:71:94:22:8F:90:C3:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/ECC476EEF0025078A76C96EE377194228F90C3A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECC476EEF0025078A76C96EE377194228F90C3A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/3137372e33392e3139362e302f32322d3332203d3e203532373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:62:ce:48:33:b1:36:a0:2d:a5:12:16:30:97:52:bc:50:fe:
         18:be:ea:00:96:16:d8:6d:31:b9:2c:b3:a8:33:39:a9:d8:f3:
         50:94:43:44:09:53:b9:2d:e4:ea:d3:55:af:38:fa:02:8e:b8:
         be:57:e0:fe:ec:f4:c0:da:12:86:d5:a0:dd:09:ab:de:76:ee:
         78:0b:85:4e:4c:79:7a:cb:b6:8e:63:fc:77:cd:5a:85:b0:7b:
         de:47:e2:03:24:96:9e:e4:e2:43:02:8f:60:90:5e:40:63:22:
         4e:ba:60:e3:4c:29:e0:66:6c:c4:06:d5:e0:9e:da:03:0a:89:
         ed:7d:de:03:c2:04:d7:2c:27:01:b8:85:ed:53:6d:5b:27:6b:
         16:47:d3:93:58:74:dd:0a:d7:33:bc:dd:6d:ec:52:2e:01:f6:
         47:0e:e0:7d:98:6f:04:f9:08:fd:cd:08:6a:38:d0:a9:44:88:
         53:82:17:f5:3a:c7:20:af:17:fc:37:14:26:19:5f:49:9e:9b:
         a3:b0:4f:72:21:7f:84:9c:68:1f:0c:28:86:f9:d1:55:0f:8a:
         1c:74:c0:8d:c7:78:54:59:4c:0e:c7:78:24:7c:1e:03:77:cc:
         c1:e4:b9:c3:28:2c:d4:13:1a:64:87:73:2f:80:32:c2:1b:45:
         d6:91:7b:9e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUe7OIE+U12P2ElmlxkZRychMAwskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNDNDc2RUVGMDAyNTA3OEE3NkM5NkVFMzc3MTk0MjI4
RjkwQzNBMTAeFw0yNTA3MzAxNDU3NDZaFw0yNjA3MjkxNTAyNDZaMDMxMTAvBgNV
BAMTKDU3OEY5OUQ0MkEzQUM3QjI2M0Y1M0YxRTMzRTFDOUM5RkIxQUFEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFYWAsSvA4ILRPIzaIXCAd4c8f
pW1ZOXaktnqnu6ne36JS30tAemNZYYMNtnmO2bpZQ2aVnhv4mCzt/4goukOJ3X5U
Rqj/6ZjVEawWbkySH/LN4MGRS4X2L2X03R6VmnQtekiVEJ7YzJ+1C+hyRb+1OnDn
8gn6kA740iw9fQwzk56IqcWEvDZVu1uVnd9lGAj4LWsJ2048O0CGfR3wOTML4At1
z7eWtL+4laY645/boBMYE3lhzdNikLmGkef3Eo2hcVT+BIp0Sw3SAFwwzUBD5LCw
HgcmkDLGIyKfFrDjv5u4Zj4bObklIiG2OIUE3MWA99mgcnvl7HHBy7vDJl99AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUV4+Z1Co6x7Jj9T8eM+HJyfsarbUwHwYDVR0j
BBgwFoAU7MR27vACUHinbJbuN3GUIo+Qw6EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVFCWmZhTTMxdnczMXZtZDZmdkQ4ZTFVSGc3ZXBhU3NjcjRIYkdnSnJa
clIvMC9FQ0M0NzZFRUYwMDI1MDc4QTc2Qzk2RUUzNzcxOTQyMjhGOTBDM0ExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDQzQ3NkVFRjAwMjUwNzhB
NzZDOTZFRTM3NzE5NDIyOEY5MEMzQTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VRQlpmYU0zMXZ3MzF2bWQ2ZnZEOGUxVUhnN2VwYVNzY3I0SGJHZ0pyWnJSLzAv
MzEzNzM3MmUzMzM5MmUzMTM5MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMy
MzczNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSfEMA0GCSqGSIb3DQEBCwUAA4IBAQASYs5IM7E2
oC2lEhYwl1K8UP4YvuoAlhbYbTG5LLOoMzmp2PNQlENECVO5LeTq01WvOPoCjri+
V+D+7PTA2hKG1aDdCavedu54C4VOTHl6y7aOY/x3zVqFsHveR+IDJJae5OJDAo9g
kF5AYyJOumDjTCngZmzEBtXgntoDContfd4DwgTXLCcBuIXtU21bJ2sWR9OTWHTd
CtczvN1t7FIuAfZHDuB9mG8E+Qj9zQhqONCpRIhTghf1Oscgrxf8NxQmGV9Jnpuj
sE9yIX+EnGgfDCiG+dFVD4ocdMCNx3hUWUwOx3gkfB4Dd8zB5LnDKCzUExpkh3Mv
gDLCG0XWkXue
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:09:50 2025 by rpki-client