Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231332e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3231332e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          w3mbGLZEPibX0U8lqKLeClog9ffuTOdOyPTPFrF/kcQ=
Subject key identifier:   69:53:C5:46:62:A5:D9:F2:3D:2A:12:B2:4F:9F:78:0C:82:13:AC:B7
Certificate issuer:       /CN=13A209790813EB704E8D837910B6D58314EFF4F9
Certificate serial:       60BA5F5A70DE959175E6AEE5F547E93DDDBCAAE3
Authority key identifier: 13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231332e302f32342d3234203d3e20323632363533.roa
Signing time:             Wed 09 Jul 2025 19:55:13 +0000
ROA not before:           Wed 09 Jul 2025 19:50:13 +0000
ROA not after:            Wed 08 Jul 2026 19:55:13 +0000
asID:                     262653
IP address blocks:        177.105.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ba:5f:5a:70:de:95:91:75:e6:ae:e5:f5:47:e9:3d:dd:bc:aa:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A209790813EB704E8D837910B6D58314EFF4F9
        Validity
            Not Before: Jul  9 19:50:13 2025 GMT
            Not After : Jul  8 19:55:13 2026 GMT
        Subject: CN=6953C54662A5D9F23D2A12B24F9F780C8213ACB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bc:44:a4:2c:f5:31:4d:6e:68:53:42:65:95:
                    26:32:d4:8b:18:4b:79:40:cb:e0:5b:46:6e:68:93:
                    df:70:9e:bb:ef:cd:df:03:d4:00:84:e1:23:58:ea:
                    78:ac:ee:f1:29:70:b0:48:b9:5e:93:1a:1a:4a:b0:
                    b0:94:9a:cf:bf:cb:42:21:ad:8a:2c:89:7f:37:75:
                    5c:5f:3b:a8:13:b5:23:f2:80:d1:ec:26:e7:69:2e:
                    20:03:b5:13:ef:16:e8:ff:b4:e1:b0:3f:cd:3b:b1:
                    08:fe:a3:a2:02:ba:c1:29:6b:11:dd:86:a8:ff:fe:
                    af:ce:e0:5e:2f:7c:b4:d6:8c:37:8a:86:4a:89:1e:
                    94:52:4a:3e:1b:14:ed:e2:81:e2:b4:8f:d0:31:63:
                    fd:1d:8f:6e:7b:24:f6:a4:60:ed:8b:97:be:fd:90:
                    9f:61:04:df:a0:d3:f3:14:6e:c5:d2:ce:3c:cf:86:
                    e5:d0:4f:c8:22:10:ff:27:5e:ea:3d:6d:83:f1:70:
                    06:fb:54:9c:2a:f6:b7:4f:4c:df:24:17:c7:17:e6:
                    4f:b5:51:0f:79:10:85:fa:cf:40:d1:bc:f4:de:03:
                    10:cc:10:84:7e:34:75:37:e4:f7:fd:a4:9b:2d:ec:
                    a2:d2:f2:0f:09:0b:47:e9:e6:74:37:70:d3:44:f4:
                    1e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:53:C5:46:62:A5:D9:F2:3D:2A:12:B2:4F:9F:78:0C:82:13:AC:B7
            X509v3 Authority Key Identifier:
                keyid:13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231332e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:38:92:23:40:4d:02:06:35:3f:2a:d4:4f:fe:d3:55:b4:64:
         70:e8:82:02:ee:69:51:bf:e8:27:87:ea:14:ae:d0:7c:0c:8a:
         93:8b:c6:7e:03:5d:ff:d9:5b:54:58:33:9b:50:47:33:ee:04:
         94:9b:f6:d0:ed:d7:fd:0e:62:45:36:4f:23:2f:9b:8b:a3:0d:
         16:15:f1:c1:d8:b7:57:a6:06:45:65:3d:85:80:b0:62:20:4e:
         52:07:52:13:e8:91:36:17:71:f3:96:b4:ad:86:8a:99:ec:7d:
         ea:a3:de:b5:8d:64:03:6f:3b:ab:d1:e4:b7:78:63:98:52:ab:
         2e:ae:57:ec:8c:0c:3f:d0:21:59:d8:62:35:8d:d5:e0:2e:fd:
         a3:e1:f1:ad:a8:4f:4e:9a:c8:71:b2:74:f7:94:54:a4:34:0b:
         aa:60:1e:79:3b:65:0d:26:19:2c:71:84:2c:5a:0b:8d:3d:06:
         ef:7e:d6:cf:ec:f3:af:6d:15:2b:26:8e:9f:bd:b5:af:be:ff:
         f8:c4:ba:8e:f0:98:34:ee:ce:02:b6:a7:bc:6d:ad:a6:38:7a:
         b9:95:4c:be:91:6a:8f:2b:ca:22:b6:bd:34:ca:f9:1b:8c:7d:
         18:3f:e7:9b:d0:bb:37:55:cf:88:15:f3:01:ef:7b:16:00:8a:
         b0:45:07:06
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYLpfWnDelZF15q7l9UfpPd28quMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNBMjA5NzkwODEzRUI3MDRFOEQ4Mzc5MTBCNkQ1ODMx
NEVGRjRGOTAeFw0yNTA3MDkxOTUwMTNaFw0yNjA3MDgxOTU1MTNaMDMxMTAvBgNV
BAMTKDY5NTNDNTQ2NjJBNUQ5RjIzRDJBMTJCMjRGOUY3ODBDODIxM0FDQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlvESkLPUxTW5oU0JllSYy1IsY
S3lAy+BbRm5ok99wnrvvzd8D1ACE4SNY6nis7vEpcLBIuV6TGhpKsLCUms+/y0Ih
rYosiX83dVxfO6gTtSPygNHsJudpLiADtRPvFuj/tOGwP807sQj+o6ICusEpaxHd
hqj//q/O4F4vfLTWjDeKhkqJHpRSSj4bFO3igeK0j9AxY/0dj257JPakYO2Ll779
kJ9hBN+g0/MUbsXSzjzPhuXQT8giEP8nXuo9bYPxcAb7VJwq9rdPTN8kF8cX5k+1
UQ95EIX6z0DRvPTeAxDMEIR+NHU35Pf9pJst7KLS8g8JC0fp5nQ3cNNE9B4nAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUaVPFRmKl2fI9KhKyT594DIITrLcwHwYDVR0j
BBgwFoAUE6IJeQgT63BOjYN5ELbVgxTv9PkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkRHZVE2U1N0ZFRDeTlUc012Tjc5bWlRclRIQ1NSdlhnMnMya0x0RDgx
ZnovMC8xM0EyMDk3OTA4MTNFQjcwNEU4RDgzNzkxMEI2RDU4MzE0RUZGNEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzQTIwOTc5MDgxM0VCNzA0
RThEODM3OTEwQjZENTgzMTRFRkY0RjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pER2VRNlNTdGRUQ3k5VHNNdk43OW1pUXJUSENTUnZYZzJzMmtMdEQ4MWZ6LzAv
MzEzNzM3MmUzMTMwMzUyZTMyMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALFp1TANBgkqhkiG9w0BAQsFAAOCAQEAPjiS
I0BNAgY1PyrUT/7TVbRkcOiCAu5pUb/oJ4fqFK7QfAyKk4vGfgNd/9lbVFgzm1BH
M+4ElJv20O3X/Q5iRTZPIy+bi6MNFhXxwdi3V6YGRWU9hYCwYiBOUgdSE+iRNhdx
85a0rYaKmex96qPetY1kA287q9Hkt3hjmFKrLq5X7IwMP9AhWdhiNY3V4C79o+Hx
rahPTprIcbJ095RUpDQLqmAeeTtlDSYZLHGELFoLjT0G737Wz+zzr20VKyaOn721
r77/+MS6jvCYNO7OAranvG2tpjh6uZVMvpFqjyvKIra9NMr5G4x9GD/nm9C7N1XP
iBXzAe97FgCKsEUHBg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:44:10 2025 by rpki-client