Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HC6CPgyjtRVKd6vDTkVaZZLUdXJSej3ZV5qRozdS1dsB/0/3137372e3232332e38302e302f32302d3332203d3e203532353632.roa
File:                     3137372e3232332e38302e302f32302d3332203d3e203532353632.roa (raw, json)
Hash identifier:          KNcRqAqQoPEhKGWB7Ue4qrb0WD8QGJfJP8vDU3iq//4=
Subject key identifier:   3C:33:1D:6D:8B:F1:45:2C:46:0E:2B:6F:1D:99:15:92:03:09:4A:3D
Certificate issuer:       /CN=15EFD200CD85AAB95290D2681B8B178BD76D4A27
Certificate serial:       2330905E0ADAD3F8BC7E774C0EE278BA49A123A1
Authority key identifier: 15:EF:D2:00:CD:85:AA:B9:52:90:D2:68:1B:8B:17:8B:D7:6D:4A:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15EFD200CD85AAB95290D2681B8B178BD76D4A27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC6CPgyjtRVKd6vDTkVaZZLUdXJSej3ZV5qRozdS1dsB/0/3137372e3232332e38302e302f32302d3332203d3e203532353632.roa
Signing time:             Mon 03 Nov 2025 18:10:33 +0000
ROA not before:           Mon 03 Nov 2025 18:05:33 +0000
ROA not after:            Mon 02 Nov 2026 18:10:33 +0000
asID:                     52562
IP address blocks:        177.223.80.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HC6CPgyjtRVKd6vDTkVaZZLUdXJSej3ZV5qRozdS1dsB/0/15EFD200CD85AAB95290D2681B8B178BD76D4A27.crl
                          rsync://rpki-repo.registro.br/repo/HC6CPgyjtRVKd6vDTkVaZZLUdXJSej3ZV5qRozdS1dsB/0/15EFD200CD85AAB95290D2681B8B178BD76D4A27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15EFD200CD85AAB95290D2681B8B178BD76D4A27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 14:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:30:90:5e:0a:da:d3:f8:bc:7e:77:4c:0e:e2:78:ba:49:a1:23:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15EFD200CD85AAB95290D2681B8B178BD76D4A27
        Validity
            Not Before: Nov  3 18:05:33 2025 GMT
            Not After : Nov  2 18:10:33 2026 GMT
        Subject: CN=3C331D6D8BF1452C460E2B6F1D99159203094A3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:39:f1:32:ca:cc:20:42:fc:94:14:ff:1d:
                    86:08:3f:f3:53:d7:37:d1:01:db:c4:2f:77:33:95:
                    08:06:29:40:7d:ef:40:ba:42:e8:3d:90:f3:95:25:
                    81:40:9d:a6:d3:ea:6c:42:5f:a7:d6:48:33:e9:9d:
                    8f:51:0e:75:70:ed:6c:c3:90:31:fd:0d:0e:20:46:
                    1f:8a:ab:3b:ee:35:9e:ca:8b:73:cb:ae:25:b5:8d:
                    45:23:fc:40:09:35:ab:b5:9f:96:9d:e8:6d:87:ff:
                    52:c5:8c:09:36:e8:db:02:ee:d1:53:72:a1:cc:32:
                    ed:ef:de:23:42:1c:fa:2f:62:4e:c8:ea:d0:2c:dc:
                    30:4c:62:47:49:2e:66:a8:bd:15:67:3b:2c:c6:77:
                    15:2c:f0:19:36:35:61:24:e4:98:51:b7:b2:8b:0e:
                    8e:45:07:42:e2:06:c3:7b:a0:8f:8a:6c:8c:02:26:
                    9c:14:65:d9:d2:6c:ee:54:df:78:b3:d3:e6:dc:21:
                    8d:86:e4:8a:cf:78:0c:58:46:a9:1c:1b:c6:28:69:
                    d4:93:75:36:44:63:95:96:db:55:aa:97:38:94:56:
                    bb:f6:2d:01:4b:25:99:f8:fd:d4:d1:2a:40:74:36:
                    35:0f:b5:c9:4b:58:9d:12:38:1f:bf:fb:5c:55:5c:
                    a3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:33:1D:6D:8B:F1:45:2C:46:0E:2B:6F:1D:99:15:92:03:09:4A:3D
            X509v3 Authority Key Identifier:
                keyid:15:EF:D2:00:CD:85:AA:B9:52:90:D2:68:1B:8B:17:8B:D7:6D:4A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC6CPgyjtRVKd6vDTkVaZZLUdXJSej3ZV5qRozdS1dsB/0/15EFD200CD85AAB95290D2681B8B178BD76D4A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15EFD200CD85AAB95290D2681B8B178BD76D4A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC6CPgyjtRVKd6vDTkVaZZLUdXJSej3ZV5qRozdS1dsB/0/3137372e3232332e38302e302f32302d3332203d3e203532353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:82:e7:e6:1d:96:cc:ea:81:b5:4e:02:e9:e3:68:a1:b7:67:
         2f:38:81:06:bd:45:83:90:7d:aa:42:51:36:d4:47:52:93:f9:
         e6:5a:3f:3e:d0:7e:a0:77:3f:ef:46:bc:69:8e:c3:7e:c9:58:
         da:45:70:ee:ba:ff:1f:07:5f:61:77:9e:80:10:f7:6c:37:b4:
         93:8a:49:e3:20:36:3a:bd:e6:c2:72:5d:3d:a0:b1:4a:82:1c:
         92:cc:1d:90:e9:c4:e6:0b:d2:81:06:1c:fc:ee:4e:fb:f8:7a:
         fa:d7:83:60:d2:af:d4:34:7f:90:11:d7:05:8c:ea:a4:3f:b8:
         e4:2d:1e:bd:8e:68:df:b9:c9:ac:29:c0:79:27:da:ba:14:01:
         5d:07:de:e5:1f:98:61:0c:9f:f7:c0:d2:a3:a3:93:e3:6f:e3:
         61:35:8e:e1:a6:02:17:a1:63:0e:25:3d:3d:a7:49:d4:c6:b7:
         53:e7:cd:8e:76:de:54:fc:3a:84:9a:8e:d2:61:bc:04:5d:25:
         df:49:3e:e5:22:fc:f3:12:0f:3f:0f:b9:8f:e9:1d:95:a1:21:
         af:96:8e:16:c1:ea:9d:3a:7a:ec:98:28:55:3a:23:d2:4b:97:
         d5:89:af:39:9c:3c:cd:2a:bd:14:2c:07:fb:7e:17:17:cd:8f:
         7f:fb:13:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:07:16 2025 by rpki-client