Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230392e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3230392e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          cfBSx/t5pusW+w2K4kw2QMEz0BV4NvM4cguZ6PfSwvo=
Subject key identifier:   A4:FE:0B:4E:4C:ED:79:E9:C4:64:A4:2E:0F:A1:F4:56:20:4A:05:D1
Certificate issuer:       /CN=13A209790813EB704E8D837910B6D58314EFF4F9
Certificate serial:       55373776BABC7CA6439914DD7A62C6D9B768794B
Authority key identifier: 13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230392e302f32342d3234203d3e20323632363533.roa
Signing time:             Wed 09 Jul 2025 19:55:09 +0000
ROA not before:           Wed 09 Jul 2025 19:50:09 +0000
ROA not after:            Wed 08 Jul 2026 19:55:09 +0000
asID:                     262653
IP address blocks:        177.105.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:37:37:76:ba:bc:7c:a6:43:99:14:dd:7a:62:c6:d9:b7:68:79:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A209790813EB704E8D837910B6D58314EFF4F9
        Validity
            Not Before: Jul  9 19:50:09 2025 GMT
            Not After : Jul  8 19:55:09 2026 GMT
        Subject: CN=A4FE0B4E4CED79E9C464A42E0FA1F456204A05D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:60:a4:b1:3b:d6:ee:ac:e5:c1:42:2e:30:
                    5d:f5:41:e5:66:30:6c:69:ec:07:75:16:d2:9b:f0:
                    8e:a2:1e:f9:37:8e:61:be:47:c5:8c:80:14:d3:4f:
                    ea:2f:85:85:69:84:d1:cc:04:54:56:ac:90:9b:3a:
                    81:33:af:15:18:82:54:0d:fd:5a:42:70:96:c5:a3:
                    13:d9:6b:9b:2a:7e:1a:c0:9c:5f:dd:c5:3f:c5:34:
                    17:8c:e1:3e:03:99:23:98:45:11:31:1b:f5:4d:8f:
                    a5:3b:e7:49:29:fe:97:e3:7b:5b:a5:69:5a:b5:5b:
                    28:82:09:f3:35:4e:dd:8f:5d:a5:cd:bf:1a:cd:44:
                    9a:93:71:89:a9:08:1f:45:93:15:19:c0:a3:10:9f:
                    49:53:2e:dd:af:f8:e7:e9:9f:e9:00:6e:49:a7:ea:
                    44:4b:c8:12:dd:eb:40:dc:de:af:79:58:c6:b6:80:
                    eb:cb:34:94:c8:91:75:da:c5:4d:7b:77:73:63:e1:
                    2a:d7:d0:60:fa:56:5c:0b:70:f6:e4:63:83:e5:69:
                    21:3e:c6:e9:0b:3d:03:7f:a3:3b:b2:e1:d4:00:fb:
                    fd:eb:ad:88:45:43:63:06:07:c9:d8:7f:40:b5:05:
                    db:71:85:64:fb:ce:ec:d1:aa:c0:07:6f:e5:41:a5:
                    d3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FE:0B:4E:4C:ED:79:E9:C4:64:A4:2E:0F:A1:F4:56:20:4A:05:D1
            X509v3 Authority Key Identifier:
                keyid:13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230392e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:5a:58:c9:a3:a2:21:e1:0d:f2:3d:98:de:94:12:c7:43:51:
         4d:8d:9f:9c:c2:ca:b5:57:02:14:a9:90:77:8d:39:bf:b7:55:
         2b:c8:39:de:16:77:1c:37:f4:14:a8:3c:3f:77:89:95:b9:79:
         e8:db:8c:64:f6:0b:96:3c:c2:de:b6:7c:78:f0:fd:ab:b0:4a:
         a8:2f:00:a8:eb:29:8a:82:6d:a5:bf:20:39:df:1a:48:f6:c3:
         1e:fd:2e:98:30:57:75:6b:b6:17:96:d8:b5:16:86:6b:d3:17:
         ce:76:5a:02:60:cf:07:5e:d0:26:c0:25:5e:54:3e:69:f9:24:
         30:fe:17:46:a0:99:1f:c1:f9:30:55:55:bb:63:3a:e8:cd:a6:
         e9:eb:70:0e:95:34:7b:57:94:ee:a3:b8:b7:ed:bb:64:77:98:
         7f:fa:52:fe:8b:51:01:73:c7:1e:88:48:67:7c:b3:02:de:eb:
         33:17:d9:53:cc:ad:ce:f8:1e:88:ac:3e:b6:a7:5c:d9:30:ff:
         49:91:dd:a0:67:ae:c5:1a:82:93:f7:65:0d:ce:83:f8:eb:90:
         59:63:a6:36:26:d3:40:0f:9c:d9:3a:1d:f4:92:a2:67:c1:18:
         c2:e1:b7:a7:7e:32:4b:6c:b5:60:b3:a8:8d:0e:e8:76:1b:b6:
         20:9f:36:ee
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVTc3drq8fKZDmRTdemLG2bdoeUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNBMjA5NzkwODEzRUI3MDRFOEQ4Mzc5MTBCNkQ1ODMx
NEVGRjRGOTAeFw0yNTA3MDkxOTUwMDlaFw0yNjA3MDgxOTU1MDlaMDMxMTAvBgNV
BAMTKEE0RkUwQjRFNENFRDc5RTlDNDY0QTQyRTBGQTFGNDU2MjA0QTA1RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2mCksTvW7qzlwUIuMF31QeVm
MGxp7Ad1FtKb8I6iHvk3jmG+R8WMgBTTT+ovhYVphNHMBFRWrJCbOoEzrxUYglQN
/VpCcJbFoxPZa5sqfhrAnF/dxT/FNBeM4T4DmSOYRRExG/VNj6U750kp/pfje1ul
aVq1WyiCCfM1Tt2PXaXNvxrNRJqTcYmpCB9FkxUZwKMQn0lTLt2v+Ofpn+kAbkmn
6kRLyBLd60Dc3q95WMa2gOvLNJTIkXXaxU17d3Nj4SrX0GD6VlwLcPbkY4PlaSE+
xukLPQN/ozuy4dQA+/3rrYhFQ2MGB8nYf0C1BdtxhWT7zuzRqsAHb+VBpdN3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUpP4LTkzteenEZKQuD6H0ViBKBdEwHwYDVR0j
BBgwFoAUE6IJeQgT63BOjYN5ELbVgxTv9PkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkRHZVE2U1N0ZFRDeTlUc012Tjc5bWlRclRIQ1NSdlhnMnMya0x0RDgx
ZnovMC8xM0EyMDk3OTA4MTNFQjcwNEU4RDgzNzkxMEI2RDU4MzE0RUZGNEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzQTIwOTc5MDgxM0VCNzA0
RThEODM3OTEwQjZENTgzMTRFRkY0RjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pER2VRNlNTdGRUQ3k5VHNNdk43OW1pUXJUSENTUnZYZzJzMmtMdEQ4MWZ6LzAv
MzEzNzM3MmUzMTMwMzUyZTMyMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALFp0TANBgkqhkiG9w0BAQsFAAOCAQEAKlpY
yaOiIeEN8j2Y3pQSx0NRTY2fnMLKtVcCFKmQd405v7dVK8g53hZ3HDf0FKg8P3eJ
lbl56NuMZPYLljzC3rZ8ePD9q7BKqC8AqOspioJtpb8gOd8aSPbDHv0umDBXdWu2
F5bYtRaGa9MXznZaAmDPB17QJsAlXlQ+afkkMP4XRqCZH8H5MFVVu2M66M2m6etw
DpU0e1eU7qO4t+27ZHeYf/pS/otRAXPHHohIZ3yzAt7rMxfZU8ytzvgeiKw+tqdc
2TD/SZHdoGeuxRqCk/dlDc6D+OuQWWOmNibTQA+c2Tod9JKiZ8EYwuG3p34yS2y1
YLOojQ7odhu2IJ827g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:42 2025 by rpki-client