Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3230382e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          F4kRZlR+tJRR2AHpiIjjwqR+1pZJViNHZvvS9EWfTfs=
Subject key identifier:   94:FE:92:A3:3B:BE:B8:6E:E7:26:1B:C5:4C:81:B5:FE:2A:EC:D6:98
Certificate issuer:       /CN=13A209790813EB704E8D837910B6D58314EFF4F9
Certificate serial:       797CBBD834AB8C9B73537B3DCA87145E829DA61F
Authority key identifier: 13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32342d3234203d3e20323632363533.roa
Signing time:             Wed 09 Jul 2025 19:55:12 +0000
ROA not before:           Wed 09 Jul 2025 19:50:12 +0000
ROA not after:            Wed 08 Jul 2026 19:55:12 +0000
asID:                     262653
IP address blocks:        177.105.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7c:bb:d8:34:ab:8c:9b:73:53:7b:3d:ca:87:14:5e:82:9d:a6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A209790813EB704E8D837910B6D58314EFF4F9
        Validity
            Not Before: Jul  9 19:50:12 2025 GMT
            Not After : Jul  8 19:55:12 2026 GMT
        Subject: CN=94FE92A33BBEB86EE7261BC54C81B5FE2AECD698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:89:a2:75:e6:96:17:96:d1:34:69:4f:fd:
                    3e:d9:9e:5e:ce:62:3f:1a:0a:18:c5:7e:d0:20:fd:
                    cc:43:2e:34:8c:79:3e:3d:d0:d0:ee:19:9b:92:01:
                    bd:44:c1:72:e5:0e:91:7c:69:b8:b7:10:1b:7f:30:
                    3a:72:4b:64:cb:ad:d8:f8:e7:65:0e:8f:b5:a1:c8:
                    cb:ea:0b:66:8d:0e:de:33:17:c4:f8:c8:13:ec:98:
                    5b:49:08:a6:72:4a:f0:ff:08:24:92:33:46:f6:67:
                    a4:5b:38:1c:6e:ef:40:bc:3a:78:fc:bb:0e:db:8a:
                    f4:23:ad:04:6d:81:6a:ee:6f:b7:93:a7:88:f6:70:
                    43:25:c7:be:30:47:cf:4b:a9:73:df:6f:18:fa:0b:
                    08:54:0e:9f:cc:67:23:03:66:25:71:a4:d2:25:8c:
                    60:44:34:17:1f:1e:9a:28:fd:7d:6d:3f:1f:6c:a5:
                    6b:b0:d4:47:96:3c:a4:24:c7:94:d2:ca:d5:0c:75:
                    6d:d1:7d:8c:6c:89:82:cc:11:86:b1:a2:da:23:b7:
                    e4:b3:c8:0e:08:0a:fb:4b:82:38:32:26:2c:37:0e:
                    20:b3:da:a5:7b:95:c6:76:a4:ce:81:df:b0:35:e6:
                    90:6b:b1:e0:e7:2b:71:e9:44:0e:7f:d3:7e:66:2f:
                    db:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FE:92:A3:3B:BE:B8:6E:E7:26:1B:C5:4C:81:B5:FE:2A:EC:D6:98
            X509v3 Authority Key Identifier:
                keyid:13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:f6:06:44:3e:fa:72:71:68:8f:02:f3:45:dc:c4:b8:4a:02:
         50:ef:43:41:de:a5:83:ad:b9:ad:d7:e9:58:31:17:3e:13:33:
         0e:aa:b6:3d:d2:ab:a0:4f:f7:ee:5f:1f:be:2b:57:1f:4b:0d:
         cd:f4:f7:eb:61:33:eb:25:ed:2a:df:06:c8:79:44:6d:40:0d:
         13:af:46:40:63:f6:af:c5:c0:b0:5c:16:d1:af:10:a1:cf:6d:
         04:f1:54:90:80:5a:36:ab:02:97:b0:df:42:26:38:94:56:44:
         1a:1d:9d:b8:f1:3b:ba:27:4c:b9:8e:da:f8:26:ae:a3:6f:85:
         74:c4:7a:be:1e:36:21:35:68:08:ce:1e:e7:51:8e:ed:06:52:
         ff:a4:bd:9e:1a:4a:43:1c:f0:7f:d3:cb:52:09:e0:fd:96:cd:
         fc:16:8f:c8:d0:bb:39:51:be:ed:f8:2b:47:bd:69:1e:20:d9:
         5b:b9:8e:02:e6:11:57:b8:46:4e:0a:ec:d2:37:8f:ee:69:99:
         44:04:1d:6d:30:6e:36:9a:a0:bd:d5:c3:56:a6:d8:33:ff:55:
         61:e0:57:0b:05:c2:1b:38:68:fe:41:81:27:1d:6e:0b:e4:58:
         4f:6f:d1:65:e7:0c:a9:41:2e:9d:10:7d:64:96:65:27:a1:40:
         c8:29:e2:02
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeXy72DSrjJtzU3s9yocUXoKdph8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNBMjA5NzkwODEzRUI3MDRFOEQ4Mzc5MTBCNkQ1ODMx
NEVGRjRGOTAeFw0yNTA3MDkxOTUwMTJaFw0yNjA3MDgxOTU1MTJaMDMxMTAvBgNV
BAMTKDk0RkU5MkEzM0JCRUI4NkVFNzI2MUJDNTRDODFCNUZFMkFFQ0Q2OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQNImideaWF5bRNGlP/T7Znl7O
Yj8aChjFftAg/cxDLjSMeT490NDuGZuSAb1EwXLlDpF8abi3EBt/MDpyS2TLrdj4
52UOj7WhyMvqC2aNDt4zF8T4yBPsmFtJCKZySvD/CCSSM0b2Z6RbOBxu70C8Onj8
uw7bivQjrQRtgWrub7eTp4j2cEMlx74wR89LqXPfbxj6CwhUDp/MZyMDZiVxpNIl
jGBENBcfHpoo/X1tPx9spWuw1EeWPKQkx5TSytUMdW3RfYxsiYLMEYaxotojt+Sz
yA4ICvtLgjgyJiw3DiCz2qV7lcZ2pM6B37A15pBrseDnK3HpRA5/035mL9ufAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUlP6Sozu+uG7nJhvFTIG1/irs1pgwHwYDVR0j
BBgwFoAUE6IJeQgT63BOjYN5ELbVgxTv9PkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkRHZVE2U1N0ZFRDeTlUc012Tjc5bWlRclRIQ1NSdlhnMnMya0x0RDgx
ZnovMC8xM0EyMDk3OTA4MTNFQjcwNEU4RDgzNzkxMEI2RDU4MzE0RUZGNEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzQTIwOTc5MDgxM0VCNzA0
RThEODM3OTEwQjZENTgzMTRFRkY0RjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pER2VRNlNTdGRUQ3k5VHNNdk43OW1pUXJUSENTUnZYZzJzMmtMdEQ4MWZ6LzAv
MzEzNzM3MmUzMTMwMzUyZTMyMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALFp0DANBgkqhkiG9w0BAQsFAAOCAQEAG/YG
RD76cnFojwLzRdzEuEoCUO9DQd6lg625rdfpWDEXPhMzDqq2PdKroE/37l8fvitX
H0sNzfT362Ez6yXtKt8GyHlEbUANE69GQGP2r8XAsFwW0a8Qoc9tBPFUkIBaNqsC
l7DfQiY4lFZEGh2duPE7uidMuY7a+Cauo2+FdMR6vh42ITVoCM4e51GO7QZS/6S9
nhpKQxzwf9PLUgng/ZbN/BaPyNC7OVG+7fgrR71pHiDZW7mOAuYRV7hGTgrs0jeP
7mmZRAQdbTBuNpqgvdXDVqbYM/9VYeBXCwXCGzho/kGBJx1uC+RYT2/RZecMqUEu
nRB9ZJZlJ6FAyCniAg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:22:05 2025 by rpki-client