Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/3137372e3230302e3232382e302f32322d3332203d3e20323730363035.roa
File:                     3137372e3230302e3232382e302f32322d3332203d3e20323730363035.roa (raw, json)
Hash identifier:          IFEckCwoB8Z55hrB0cIzDmwXqQiVlP3FQFUuZEzRuyE=
Subject key identifier:   C1:93:2C:29:13:1B:D3:DF:A6:73:31:62:E8:58:7C:5E:DE:FE:1D:6F
Certificate issuer:       /CN=1C4067D9FC8880CD844526B4C8268B525C75BAEF
Certificate serial:       5DFBEF4E49B27FEA23A67C5CE28CEA8FE61FE3ED
Authority key identifier: 1C:40:67:D9:FC:88:80:CD:84:45:26:B4:C8:26:8B:52:5C:75:BA:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/3137372e3230302e3232382e302f32322d3332203d3e20323730363035.roa
Signing time:             Wed 16 Jul 2025 16:16:47 +0000
ROA not before:           Wed 16 Jul 2025 16:11:47 +0000
ROA not after:            Wed 15 Jul 2026 16:16:47 +0000
asID:                     270605
IP address blocks:        177.200.228.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.crl
                          rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 06:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fb:ef:4e:49:b2:7f:ea:23:a6:7c:5c:e2:8c:ea:8f:e6:1f:e3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4067D9FC8880CD844526B4C8268B525C75BAEF
        Validity
            Not Before: Jul 16 16:11:47 2025 GMT
            Not After : Jul 15 16:16:47 2026 GMT
        Subject: CN=C1932C29131BD3DFA6733162E8587C5EDEFE1D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8f:2d:87:aa:b2:06:e1:27:44:82:1c:58:c0:
                    91:91:c2:65:55:15:04:ca:0c:d7:28:0f:a1:86:1d:
                    f6:5f:6b:b4:1d:1a:b0:17:e2:08:02:64:3e:43:60:
                    d0:73:3a:07:e6:14:ed:39:42:25:12:30:a2:2f:5e:
                    af:12:24:08:a7:10:74:16:84:47:87:3c:a5:00:c8:
                    89:bd:c0:0c:80:d9:91:b9:07:e2:e8:4e:9c:9c:48:
                    e4:39:69:66:c9:41:bb:18:33:2c:69:4c:b4:37:3f:
                    72:89:92:89:50:7a:9d:c0:2a:39:f9:bc:34:2c:9e:
                    6b:06:d0:58:f1:7f:ea:12:89:0e:e9:58:e2:2f:0b:
                    91:bb:57:d1:61:cb:e5:28:f7:9b:d4:96:4b:d3:f0:
                    10:03:00:01:b9:04:d6:a0:d1:65:19:29:0f:4a:b8:
                    0d:d6:58:ad:c2:59:8c:db:a8:60:04:50:2f:9f:e5:
                    bb:a5:ad:48:5c:b8:24:63:26:19:7f:51:a5:de:e6:
                    7f:32:4a:52:d9:8d:47:f1:a4:55:ad:1f:3b:39:3c:
                    cd:11:e5:b9:d3:10:f7:b0:f3:c3:89:0f:d6:dd:1f:
                    67:d2:97:41:9b:0f:52:5d:ee:2c:ce:88:da:db:ab:
                    af:54:16:b4:fe:44:05:28:e3:ba:86:80:3f:84:21:
                    0a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:93:2C:29:13:1B:D3:DF:A6:73:31:62:E8:58:7C:5E:DE:FE:1D:6F
            X509v3 Authority Key Identifier:
                keyid:1C:40:67:D9:FC:88:80:CD:84:45:26:B4:C8:26:8B:52:5C:75:BA:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/3137372e3230302e3232382e302f32322d3332203d3e20323730363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:7a:9e:5e:d1:82:7c:d8:26:15:d7:6e:e7:0b:e7:c1:00:90:
         b5:b3:df:59:57:84:2b:0e:17:8e:2d:48:75:83:6e:6c:e7:2f:
         c7:4e:30:7a:89:e9:fc:cc:88:ef:2a:47:b7:df:e3:4c:77:09:
         7d:1f:62:d0:bb:61:ea:ad:cd:69:9f:06:83:58:59:f0:50:ff:
         d0:4d:ac:c1:04:be:e4:b1:f0:9d:6e:60:11:c4:b4:3b:a8:b1:
         ff:49:79:8e:ab:08:ad:8f:a2:d3:cf:1f:1b:a8:6b:f5:ac:11:
         fe:34:6d:af:2b:5a:13:03:10:11:da:8a:25:60:fd:87:43:7b:
         83:eb:e5:14:0b:16:3d:97:71:34:10:01:c1:40:08:81:03:d7:
         22:b2:e8:57:e3:77:1e:6e:60:47:ff:31:a8:8b:42:72:60:f2:
         1f:26:2d:ec:51:b3:56:a6:52:82:e6:7d:cc:8b:09:c1:dc:48:
         41:11:d5:33:b0:a8:10:b5:2b:42:2b:5b:8e:f8:a9:99:51:af:
         2d:b7:ec:49:af:d5:cf:2d:07:38:62:75:3b:79:53:ca:e3:11:
         fa:68:d1:2d:1d:1a:19:e9:66:9a:d0:42:af:b9:32:df:5c:87:
         6c:28:9b:cd:41:fb:96:fa:0a:5b:9f:bb:4f:f3:24:d3:cc:dd:
         98:8f:28:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:34:05 2025 by rpki-client