Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232322e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3232322e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          XObblamokquVs8v7oDXSmXRmzjN8KbIeiw0slkF/6pM=
Subject key identifier:   42:04:DE:82:70:62:A9:6E:43:C9:B5:75:35:BF:D8:FF:71:AE:8D:56
Certificate issuer:       /CN=13A209790813EB704E8D837910B6D58314EFF4F9
Certificate serial:       7322F48D2D2E7745D8A459062054057D997C01CF
Authority key identifier: 13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232322e302f32342d3234203d3e20323632363533.roa
Signing time:             Wed 09 Jul 2025 19:55:01 +0000
ROA not before:           Wed 09 Jul 2025 19:50:01 +0000
ROA not after:            Wed 08 Jul 2026 19:55:01 +0000
asID:                     262653
IP address blocks:        177.105.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:22:f4:8d:2d:2e:77:45:d8:a4:59:06:20:54:05:7d:99:7c:01:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A209790813EB704E8D837910B6D58314EFF4F9
        Validity
            Not Before: Jul  9 19:50:01 2025 GMT
            Not After : Jul  8 19:55:01 2026 GMT
        Subject: CN=4204DE827062A96E43C9B57535BFD8FF71AE8D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:37:32:73:42:d9:c5:49:ba:50:1e:07:2d:ab:
                    cf:f1:10:cb:72:70:46:56:48:85:16:ad:64:15:ec:
                    9d:ed:7c:24:1b:8a:d7:f6:1d:eb:d9:7d:04:66:59:
                    1b:3c:3b:74:d3:8f:ee:2b:83:a1:98:b7:cf:d6:18:
                    9b:93:15:0f:68:80:3f:52:d0:31:ee:4c:df:1a:7b:
                    21:e3:6d:ea:9b:9d:9a:79:59:c2:d1:65:85:82:6c:
                    9a:b6:e9:cd:40:74:c0:9e:e4:e0:e7:12:cc:ad:be:
                    16:28:67:14:34:57:34:e8:cb:f0:1a:df:bd:2e:94:
                    9c:42:c9:12:3a:9b:22:cc:99:be:c2:af:3b:1b:11:
                    ae:63:29:b4:ef:41:f8:23:63:60:df:9b:34:22:74:
                    bb:e0:73:4f:55:ed:0a:f9:f7:58:f4:84:2f:41:cf:
                    8c:44:27:88:a4:2d:6a:1d:81:1b:be:74:d3:74:42:
                    01:74:49:3f:da:2e:18:ca:de:4d:4b:9d:ea:40:29:
                    8e:b0:62:cd:8e:e4:02:b7:8b:70:0b:66:68:b3:5e:
                    b9:07:85:8b:f3:c2:8b:f3:90:df:c6:7b:7f:75:f4:
                    47:7a:05:04:ea:66:0e:3a:d3:67:0f:f3:7c:3a:8c:
                    e9:85:fe:8c:75:38:8e:4a:f7:5c:b3:f8:2e:96:83:
                    08:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:04:DE:82:70:62:A9:6E:43:C9:B5:75:35:BF:D8:FF:71:AE:8D:56
            X509v3 Authority Key Identifier:
                keyid:13:A2:09:79:08:13:EB:70:4E:8D:83:79:10:B6:D5:83:14:EF:F4:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/13A209790813EB704E8D837910B6D58314EFF4F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A209790813EB704E8D837910B6D58314EFF4F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232322e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:d7:50:94:47:88:20:82:62:cc:4f:55:8e:07:0b:6c:08:e3:
         c2:33:01:67:de:ca:fd:46:e8:55:26:8f:ab:45:8f:69:6f:29:
         54:b2:e1:eb:23:92:f9:74:a4:b6:fc:e3:7a:61:82:e0:e1:3e:
         89:7c:09:7c:d5:fe:9b:d9:e4:55:48:45:06:fb:33:09:65:cf:
         99:32:43:9b:bb:3e:66:41:88:a4:9c:4b:e2:25:8e:74:99:f7:
         9d:0c:8c:05:d6:ca:35:df:2f:b3:d3:83:cd:80:b6:65:05:af:
         00:02:d7:21:06:6a:1c:09:2a:29:d4:a1:02:f6:86:ba:93:5e:
         67:9c:80:d0:b2:3c:80:5f:b0:a0:9b:61:a7:4f:83:36:d3:7c:
         14:4f:12:fe:08:42:5e:82:20:ec:0e:eb:bd:02:ec:c9:6a:a6:
         6b:34:bb:33:89:b5:d3:5e:5b:8c:5f:74:7d:2e:31:9e:3f:ef:
         ed:0f:4e:df:93:7e:3b:cf:8b:b9:dd:53:29:7b:bb:7f:52:68:
         d2:11:e3:9d:ff:42:d0:55:c2:d0:f5:87:c2:ac:d7:b7:d5:de:
         8c:d3:35:ee:7a:7b:01:95:10:2b:c0:1c:ce:b7:3a:91:c6:47:
         60:61:62:3f:e7:b3:27:5e:24:8e:9b:39:87:a8:af:3e:4e:cb:
         a2:09:11:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:03:48 2025 by rpki-client