Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e302e302f32302d3230203d3e203533323339.roa
File:                     3137372e32302e302e302f32302d3230203d3e203533323339.roa (raw, json)
Hash identifier:          QtPbHa7lu+UNe8tm5IA7l4yNbjifzGOqopbbej7nZwU=
Subject key identifier:   F1:D0:43:27:D5:EF:B7:43:3F:EE:62:3A:BF:62:9E:4F:68:EE:F0:FB
Certificate issuer:       /CN=0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384
Certificate serial:       50AD832ABA0B1162FF34FED2BCB36DC286AFFF93
Authority key identifier: 0B:D6:FA:DA:5B:9D:4A:CC:75:21:C6:41:3D:70:0E:E9:DC:D4:E3:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e302e302f32302d3230203d3e203533323339.roa
Signing time:             Fri 08 Aug 2025 19:04:50 +0000
ROA not before:           Fri 08 Aug 2025 18:59:50 +0000
ROA not after:            Fri 07 Aug 2026 19:04:50 +0000
asID:                     53239
IP address blocks:        177.20.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.crl
                          rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 08:32:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ad:83:2a:ba:0b:11:62:ff:34:fe:d2:bc:b3:6d:c2:86:af:ff:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384
        Validity
            Not Before: Aug  8 18:59:50 2025 GMT
            Not After : Aug  7 19:04:50 2026 GMT
        Subject: CN=F1D04327D5EFB7433FEE623ABF629E4F68EEF0FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:36:05:02:8a:b9:61:f3:b5:e9:b4:cc:8f:
                    85:43:7a:1e:bc:7a:59:c5:c6:32:32:32:a4:d3:35:
                    6b:54:29:ea:47:fd:e1:04:ae:07:4b:b2:f8:39:25:
                    80:7a:85:fb:4e:e8:cf:12:65:18:07:b8:7f:b3:0d:
                    f8:fb:f9:8d:80:a9:28:32:f7:57:65:a2:76:90:0d:
                    10:c9:c6:63:2e:d0:df:54:f0:c7:66:57:24:cf:16:
                    fa:4d:29:69:01:64:7b:37:4a:a9:0a:1b:5e:5e:f9:
                    4b:1e:d2:fa:fd:b1:48:85:ea:74:b8:59:86:92:ba:
                    ef:f4:8a:5d:fe:64:a0:25:9d:e3:e9:94:04:1f:87:
                    b4:46:e7:16:ee:c8:f2:06:35:78:b1:1e:f8:29:58:
                    71:11:3d:32:07:e5:13:fa:aa:c5:1e:af:b6:bf:97:
                    0c:0d:dd:fa:b4:ef:50:4f:3e:28:64:ce:8d:c5:1a:
                    da:5b:9e:55:ba:8a:fb:05:cc:58:c1:cd:5a:3f:9e:
                    17:df:9d:e4:cf:6a:1c:bb:9e:14:62:e1:13:c9:38:
                    cd:58:10:27:89:99:b1:49:a5:28:a8:21:b5:be:ea:
                    4f:90:7e:82:bd:ff:df:b7:24:7a:68:9f:f9:60:8e:
                    6f:9a:4b:7d:42:35:10:66:62:f9:e8:85:90:f3:98:
                    fd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D0:43:27:D5:EF:B7:43:3F:EE:62:3A:BF:62:9E:4F:68:EE:F0:FB
            X509v3 Authority Key Identifier:
                keyid:0B:D6:FA:DA:5B:9D:4A:CC:75:21:C6:41:3D:70:0E:E9:DC:D4:E3:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e302e302f32302d3230203d3e203533323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:a8:16:b6:b2:49:fe:20:13:fb:09:07:d3:0b:9a:bc:b5:b6:
         4d:6d:bd:58:ed:15:de:57:53:ed:ff:27:66:d6:29:42:0a:32:
         46:42:44:3f:4d:c7:b8:a9:a0:62:97:2a:89:f2:0f:f7:07:21:
         21:8e:2c:83:75:9a:63:a8:3d:54:74:56:b1:ce:f5:9e:d4:b2:
         72:65:f0:fc:5f:df:c7:af:12:d4:7d:6b:70:45:e0:33:51:fa:
         5e:4c:7a:91:ae:86:8a:08:f0:8b:98:79:b2:f3:20:00:98:92:
         c8:a2:55:4f:c8:01:91:3c:5c:6d:69:3e:83:11:0d:97:cd:fb:
         44:42:cf:06:1a:64:b2:ed:7d:81:f0:d0:57:80:7b:0d:b4:95:
         c3:b0:5f:9d:93:24:3f:8b:49:55:f7:ff:54:77:2a:65:5b:f1:
         0f:7b:67:13:cd:04:54:85:78:cb:7a:46:0c:3f:ac:78:64:18:
         df:ff:79:ce:45:66:34:6d:99:00:59:7e:23:82:43:77:f4:ec:
         cb:6a:bd:dc:7c:02:28:12:4e:e5:16:3a:d8:38:26:48:63:91:
         60:9c:64:d4:97:6c:4a:db:8d:ea:52:d5:e6:06:95:46:e1:8e:
         0a:98:07:f6:f6:14:0c:84:c2:53:cb:8b:f2:c0:f8:81:ec:28:
         f8:50:5b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:38:05 2025 by rpki-client