Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa
File:                     3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa (raw, json)
Hash identifier:          GEcby//L7CFKH6v7rXG03tWnw4aKWnLLe4qJI8RkfD8=
Subject key identifier:   1B:F5:03:8B:7A:48:C9:3F:5A:BA:12:CC:C1:F5:95:29:2E:E1:71:B1
Certificate issuer:       /CN=13A209790813EB704E8D837910B6D58314EFF4F9
Certificate serial:       0CF5C26D24295291816DE32FDE3B4D57BA163ED9
Authority key identifier: 13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa
Signing time:             Wed 09 Jul 2025 19:55:03 +0000
ROA not before:           Wed 09 Jul 2025 19:50:03 +0000
ROA not after:            Wed 08 Jul 2026 19:55:03 +0000
asID:                     262653
IP address blocks:        177.105.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f5:c2:6d:24:29:52:91:81:6d:e3:2f:de:3b:4d:57:ba:16:3e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A209790813EB704E8D837910B6D58314EFF4F9
        Validity
            Not Before: Jul  9 19:50:03 2025 GMT
            Not After : Jul  8 19:55:03 2026 GMT
        Subject: CN=1BF5038B7A48C93F5ABA12CCC1F595292EE171B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:89:7b:71:ae:b6:d7:0d:a0:27:d8:76:ed:
                    2b:3f:3c:75:98:2a:5c:b5:d8:16:32:49:1d:06:1f:
                    23:5c:bc:46:88:7e:6a:9d:9c:f0:34:df:d8:dc:6d:
                    f5:b6:7c:9d:cd:6f:02:3f:72:dc:f9:cc:11:e5:a8:
                    b1:1c:37:a6:a5:c1:d9:cb:ff:be:57:e3:3c:25:fc:
                    5e:4e:52:02:e6:1b:79:22:48:14:a4:31:7e:a2:88:
                    a9:62:3b:63:fb:f9:ac:09:3d:d5:61:f1:7f:78:8f:
                    ed:36:7e:c7:67:77:f9:71:00:af:dc:3d:43:ce:31:
                    99:93:b3:20:18:32:d6:c1:92:51:e9:f2:84:3d:52:
                    c8:b5:a9:b8:73:7a:ad:af:07:8b:04:bc:1c:63:b3:
                    63:ad:c8:71:ec:dc:84:87:38:ed:2c:1a:07:41:fd:
                    45:c6:07:78:cd:c8:56:fa:99:05:d9:3e:9d:da:7b:
                    cf:3f:32:de:c3:b4:87:76:e3:8a:02:df:04:0c:3b:
                    b3:0b:9e:cb:f3:2a:9c:70:e2:1e:63:9e:d3:4d:42:
                    de:10:d0:b4:22:68:bc:df:49:24:90:e0:28:1b:57:
                    0e:db:b3:b5:59:a1:e8:16:78:f0:4b:7e:59:d6:90:
                    bc:03:5d:83:6f:98:56:18:63:41:c9:5e:02:09:83:
                    66:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F5:03:8B:7A:48:C9:3F:5A:BA:12:CC:C1:F5:95:29:2E:E1:71:B1
            X509v3 Authority Key Identifier:
                keyid:13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:ef:b9:bd:52:8f:53:dd:fd:1a:f8:9b:ca:97:81:24:e3:c2:
         70:5b:eb:30:b5:4d:df:4a:59:a6:1d:4a:33:e4:a1:ca:76:c7:
         03:ba:aa:f1:69:20:83:77:71:8d:1a:bb:4d:6d:21:74:78:59:
         3b:61:27:5a:fe:19:39:98:00:80:5f:14:37:93:40:a0:23:b0:
         89:61:05:a8:6b:34:ee:dd:fb:91:6e:fb:a8:55:51:d5:11:2a:
         fa:a6:6b:09:b1:aa:6c:db:c5:79:34:2f:b1:eb:fe:dc:86:7e:
         28:0f:20:42:7f:65:2c:26:03:43:e1:e2:66:91:37:0e:be:02:
         0e:b0:af:0a:68:c0:6d:61:d3:ba:21:6b:ef:ee:28:5b:09:c4:
         bc:0a:3a:57:e2:6f:7c:ab:42:8e:72:57:70:80:ba:92:ee:a8:
         58:77:65:11:de:84:2b:60:57:03:2f:31:66:77:28:4e:04:ca:
         2e:b4:ea:6f:63:9f:71:b4:dc:43:0d:82:08:d9:8d:e7:10:44:
         83:83:e0:02:e2:6c:63:8b:c5:bb:e2:7f:a2:e2:1c:89:32:c6:
         26:ab:1f:34:d8:74:f7:e3:3e:af:78:41:e7:a1:ca:1b:16:4d:
         de:85:5c:6b:ca:03:3f:98:cc:93:a3:28:85:c1:5d:b9:14:59:
         bd:9b:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:55 2025 by rpki-client