Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa
File:                     3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa (raw, json)
Hash identifier:          scT74f9+IGXquXgeiznfoCCJYP7gQXwCIwX0K3d7sQY=
Subject key identifier:   6D:FC:21:05:17:FC:F6:34:69:70:25:16:A0:DE:C9:3C:B9:4B:05:83
Certificate issuer:       /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
Certificate serial:       1B74583C18A9827AAB1BC8B97F4CB58E6F64DA95
Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa
Signing time:             Wed 16 Jul 2025 19:53:19 +0000
ROA not before:           Wed 16 Jul 2025 19:48:19 +0000
ROA not after:            Wed 15 Jul 2026 19:53:19 +0000
asID:                     263445
IP address blocks:        177.91.164.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl
                          rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 17:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:74:58:3c:18:a9:82:7a:ab:1b:c8:b9:7f:4c:b5:8e:6f:64:da:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
        Validity
            Not Before: Jul 16 19:48:19 2025 GMT
            Not After : Jul 15 19:53:19 2026 GMT
        Subject: CN=6DFC210517FCF63469702516A0DEC93CB94B0583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1e:0f:4e:aa:4c:40:70:f2:5e:85:b8:39:44:
                    56:2f:11:c8:83:29:7d:56:ac:bc:0b:f9:19:b2:bf:
                    16:e9:93:61:88:0d:70:ee:96:e2:25:96:41:7a:19:
                    cd:a9:20:5e:28:7c:9f:7e:6f:4b:7d:68:d8:f6:1a:
                    57:63:27:f9:42:f0:8a:05:84:59:49:28:37:49:0f:
                    54:d8:a7:d5:c6:c8:bd:0e:1d:e1:36:d3:7e:ee:52:
                    4f:ff:cd:48:e1:38:ff:d2:ea:20:83:92:82:ea:d6:
                    5b:aa:15:0b:70:f8:7a:2a:a0:30:25:a5:23:01:1c:
                    3a:fb:87:d8:89:e1:7b:ba:80:17:a0:fc:63:cb:57:
                    da:aa:92:fa:de:f2:c3:81:a8:7d:fc:52:98:72:da:
                    d4:be:4f:22:d9:a8:e3:56:b8:29:18:18:5c:97:26:
                    9a:20:52:45:a7:d0:d6:66:7d:8b:b4:f9:ba:51:84:
                    dd:f3:17:86:43:35:7b:05:6e:f8:a7:2a:62:89:2a:
                    22:af:79:21:8e:4f:3a:6f:6f:02:f8:1a:b5:cf:43:
                    74:2f:a3:b0:74:f9:76:33:5d:23:a2:8c:5f:76:e1:
                    76:37:1e:d0:f6:ff:4d:8e:7c:92:3a:5f:ba:ac:a4:
                    f1:a5:2e:6f:c9:6e:76:6a:73:0c:d1:b8:fc:88:c4:
                    1d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FC:21:05:17:FC:F6:34:69:70:25:16:A0:DE:C9:3C:B9:4B:05:83
            X509v3 Authority Key Identifier:
                keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3235203d3e20323633343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:af:f2:58:1d:de:85:45:05:3a:62:79:2f:10:5a:ea:f2:c7:
         fb:04:1a:04:3b:82:21:d3:4b:4d:c9:92:87:25:21:f3:e4:1d:
         b3:4f:62:59:2d:8b:ec:2c:47:0f:e3:78:c5:95:18:25:95:7f:
         d0:08:34:7b:0b:55:5a:28:b2:0e:21:2e:57:42:a9:a1:b7:2c:
         06:18:9e:38:00:bb:5f:bc:79:3b:86:65:bd:fa:4b:82:ff:8f:
         0c:7e:81:86:3f:07:35:94:a1:30:3f:1e:42:a1:1f:d9:a4:2f:
         15:2f:c7:c3:1b:af:99:04:44:d8:62:1c:50:37:45:27:50:20:
         25:d0:07:1c:b1:37:a0:3b:c7:25:60:f5:1c:6c:3f:09:85:bc:
         27:50:fd:5f:0a:36:a4:28:86:a4:43:b1:49:ac:23:83:50:17:
         ea:df:cd:0e:88:6a:3d:11:b8:06:3d:80:bc:7e:44:e1:d0:98:
         0b:39:aa:c9:b4:5f:16:a9:95:6a:09:e8:99:69:02:8a:7d:f1:
         18:fe:27:87:4f:eb:11:37:c3:94:e4:de:ee:8e:d2:2f:d6:2d:
         d8:73:44:d9:22:41:8e:8d:1d:a7:67:f2:d4:69:0a:c5:0a:31:
         40:96:e7:c2:7c:a5:e2:6a:c6:2b:84:2f:5a:df:6a:e7:ea:af:
         20:13:b3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:39:02 2025 by rpki-client